$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/452f2df2-f38a-324b-8d0b-17a65b8c2856.roa File: 452f2df2-f38a-324b-8d0b-17a65b8c2856.roa (raw, json) Hash identifier: vxWa1R8GhtH7mUtoosGHzJt2wL6OV1njRy7FqWwoNIU= Subject key identifier: F2:81:E6:33:4F:8D:CB:EE:CA:01:F2:F5:00:CA:A1:E7:54:FE:0C:2F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A1B60135FFF4F6299AB1B6500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/452f2df2-f38a-324b-8d0b-17a65b8c2856.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.43.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:13:5f:ff:4f:62:99:ab:1b:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=82f9b578-29fd-4a2a-aa19-4c818c937679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:93:39:76:51:63:7f:38:4a:40:df:90:33:13: 25:7f:02:98:c0:e1:d7:fd:a4:c1:14:1e:06:d8:e7: 6b:b2:99:9d:8e:10:96:9d:d0:ed:ab:b6:7d:e5:0d: 17:d5:7a:3d:7c:2c:28:74:e5:f9:a7:f2:6f:30:03: 04:7e:fb:82:ff:b6:fe:14:4b:83:ed:dc:31:e0:cf: bb:e8:be:0f:eb:d9:28:e7:e4:42:7f:0b:a8:77:90: 58:25:af:f3:26:56:79:24:a4:36:66:e1:4e:0d:76: 1c:d9:d2:db:fb:05:da:11:ab:08:68:ee:ea:53:b6: 02:42:29:a2:7d:22:7f:0c:44:01:21:d5:25:19:09: c8:2a:9d:91:4e:31:a4:2c:6e:d6:5e:83:14:32:da: 3b:a5:0f:09:01:ca:83:f5:11:51:d7:cc:10:ee:76: 6e:2e:47:48:4d:ec:e1:2c:84:fe:d1:ec:39:02:0d: 7c:92:ef:23:d1:3e:39:b7:0f:a2:48:01:2c:8b:89: 93:ff:b8:ad:e7:22:0a:46:53:b6:5b:a0:09:cc:d4: 9f:4b:23:f9:07:50:74:7e:13:ee:0d:95:6e:bc:1a: ca:a8:2c:f2:76:ba:d1:28:22:e3:22:0f:e9:33:84: 2c:51:d2:52:0f:a5:b4:04:ac:5f:73:f7:ba:4d:8d: 63:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:81:E6:33:4F:8D:CB:EE:CA:01:F2:F5:00:CA:A1:E7:54:FE:0C:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/452f2df2-f38a-324b-8d0b-17a65b8c2856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:19:9b:09:eb:b0:49:97:23:79:04:b6:31:d8:8f:c2:5c:7c: 16:e6:c3:3a:e9:18:94:83:4a:11:15:70:9b:1c:fa:93:da:ee: 5c:5b:8e:db:41:c9:9b:cc:61:32:e6:f2:17:25:c9:8b:1d:73: 83:0c:27:80:5d:c6:6d:0d:9d:97:70:11:de:25:36:84:74:51: 29:88:76:e2:45:94:f9:ce:04:11:70:a6:67:0c:e4:11:e5:5e: ba:62:5c:2d:93:07:66:09:a9:d8:f3:ff:b5:3f:22:f3:44:c9: d9:6f:89:91:6a:fc:af:76:65:04:1e:4a:27:72:38:7c:b6:1f: 7d:63:a7:60:49:0e:eb:fa:9b:88:85:67:7a:8b:8e:3e:18:69: bb:e9:ca:83:1a:22:1c:8b:bb:a4:a7:ab:25:8f:02:a5:f0:10: 94:d8:d9:95:68:17:12:2f:be:1e:1d:42:b7:03:c6:47:15:99: 69:2b:6e:93:32:a4:96:b2:41:59:18:05:15:dc:23:26:c9:11: bc:c3:43:6e:f6:3e:40:3c:c3:46:89:fa:a3:53:5e:99:aa:05: a1:ea:f1:1d:03:e1:5c:23:3e:80:8e:26:3d:7c:2b:d2:ee:92: 08:7c:7e:f4:d6:8b:de:d9:ab:50:55:0c:55:e3:ce:1f:0f:48: 36:3c:19:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYBNf/09imasbZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk ODJmOWI1NzgtMjlmZC00YTJhLWFhMTktNGM4MThjOTM3Njc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZM5dlFjfzhKQN+QMxMlfwKYwOHX/aTBFB4G 2OdrspmdjhCWndDtq7Z95Q0X1Xo9fCwodOX5p/JvMAMEfvuC/7b+FEuD7dwx4M+7 6L4P69ko5+RCfwuod5BYJa/zJlZ5JKQ2ZuFODXYc2dLb+wXaEasIaO7qU7YCQimi fSJ/DEQBIdUlGQnIKp2RTjGkLG7WXoMUMto7pQ8JAcqD9RFR18wQ7nZuLkdITezh LIT+0ew5Ag18ku8j0T45tw+iSAEsi4mT/7it5yIKRlO2W6AJzNSfSyP5B1B0fhPu DZVuvBrKqCzydrrRKCLjIg/pM4QsUdJSD6W0BKxfc/e6TY1jXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKB5jNPjcvuygHy9QDKoedU/gwvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDUyZjJkZjItZjM4YS0z MjRiLThkMGItMTdhNjViOGMyODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyumMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsZmwnrsEmXI3kEtjHYj8JcfBbmwzrpGJSDShEVcJsc+pPa7lxbjttB yZvMYTLm8hclyYsdc4MMJ4Bdxm0NnZdwEd4lNoR0USmIduJFlPnOBBFwpmcM5BHl XrpiXC2TB2YJqdjz/7U/IvNEydlviZFq/K92ZQQeSidyOHy2H31jp2BJDuv6m4iF Z3qLjj4YabvpyoMaIhyLu6SnqyWPAqXwEJTY2ZVoFxIvvh4dQrcDxkcVmWkrbpMy pJayQVkYBRXcIybJEbzDQ272PkA8w0aJ+qNTXpmqBaHq8R0D4VwjPoCOJj18K9Lu kgh8fvTWi97Zq1BVDFXjzh8PSDY8GXY= -----END CERTIFICATE-----Generated at Sat Jun 7 14:24:44 2025 by rpki-client