$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a2b1697-d2b6-3d03-8292-78ca6df47474.roa File: 4a2b1697-d2b6-3d03-8292-78ca6df47474.roa (raw, json) Hash identifier: UnzNNNdsCOZiNOLhpetR02Xzb++nRHBC/yW5Wyp4mhA= Subject key identifier: 61:69:5C:97:C3:A6:C6:3E:DE:32:BA:72:72:B1:7C:05:47:11:7D:F2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A03A56CB3A85F6CFEF52ED940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a2b1697-d2b6-3d03-8292-78ca6df47474.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.3.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:6c:b3:a8:5f:6c:fe:f5:2e:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=43fe95ee-cff6-4bbe-a865-00e464164c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:43:94:9a:97:48:d9:dd:e2:2b:51:b0:33:cf: 83:3f:26:20:7b:e3:df:bd:0a:bc:81:0b:62:59:d6: f2:76:e8:04:0d:4b:d1:43:4f:8a:31:a7:32:69:41: 77:be:2a:69:a9:58:4c:4f:52:6d:0f:cb:c2:5e:72: 81:0e:76:11:ba:22:97:b2:65:f7:22:34:64:cc:f3: 54:ac:c9:2e:a0:89:29:4d:73:a5:9b:f1:0a:65:ef: a3:82:86:8e:29:57:25:a3:37:48:e3:98:0e:de:cc: b1:2a:f4:73:06:d8:36:cc:f7:39:a9:58:f2:a3:1a: c0:9b:83:e5:fc:78:fe:22:6c:1a:f9:0e:0c:93:32: d1:c1:a9:6e:48:90:a9:81:65:d1:66:b2:dc:e1:29: bd:8e:4f:a4:a4:f6:d5:73:74:99:88:f8:24:a1:4e: ca:71:5a:d8:5b:69:8c:5c:89:30:74:7d:c4:75:b6: 20:33:54:7c:9b:d8:9d:bd:34:94:7d:2e:78:cd:13: f3:44:c9:c4:61:c3:81:8f:54:97:4d:38:61:c5:7f: f9:f4:dd:19:d9:67:28:c7:ac:44:f7:ee:e5:ee:e5: 40:4e:65:7b:8f:a6:36:6d:fe:d9:d7:9a:b9:3c:be: ca:00:84:05:95:79:e5:84:bb:f2:26:8f:ea:8a:d4: b1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:69:5C:97:C3:A6:C6:3E:DE:32:BA:72:72:B1:7C:05:47:11:7D:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a2b1697-d2b6-3d03-8292-78ca6df47474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:99:5f:a1:07:9e:a6:56:d4:ae:1d:09:ca:f9:75:39:b4:1f: 17:1f:fa:a0:81:79:cf:81:7b:37:bb:61:6f:82:b4:6a:e4:5f: 95:b9:65:03:fe:82:e8:ba:67:10:8a:0f:0b:43:6d:52:6d:88: 9c:65:6a:6a:d5:dd:d6:32:bf:5a:a7:a1:4d:54:e0:29:12:08: f5:0e:5a:af:b9:3f:80:e1:6c:a8:bb:66:0d:f2:f4:1e:79:84: 0f:9f:59:f7:8b:e6:ff:f1:62:bf:e9:bf:36:d4:1f:75:d8:4d: fa:d1:56:87:f9:dc:a4:24:0b:1f:4c:30:00:24:69:b5:df:29: a8:7a:89:c9:c3:2d:07:a1:01:34:b1:17:4a:12:47:40:01:9a: 1a:8a:09:9a:85:84:c5:01:35:7b:03:10:b4:65:ed:92:89:2a: 0e:18:56:57:d6:e1:22:b8:7f:a3:bc:28:5f:83:d6:c1:a8:92: 32:43:41:1d:da:e2:f3:35:cc:3d:3e:ae:a8:3f:6a:eb:40:f7: 08:af:84:81:70:dd:e5:c9:22:a6:74:52:cd:99:db:d6:fc:06: 13:62:d2:ce:53:0b:3b:8d:ce:a6:2f:76:0a:ab:d4:d8:b0:d1: 24:30:5b:39:4c:86:a3:5c:7a:7c:2e:92:11:62:38:a5:94:21: 46:5e:ce:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpWyzqF9s/vUu2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk NDNmZTk1ZWUtY2ZmNi00YmJlLWE4NjUtMDBlNDY0MTY0YzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEOUmpdI2d3iK1GwM8+DPyYge+PfvQq8gQti WdbydugEDUvRQ0+KMacyaUF3vippqVhMT1JtD8vCXnKBDnYRuiKXsmX3IjRkzPNU rMkuoIkpTXOlm/EKZe+jgoaOKVclozdI45gO3syxKvRzBtg2zPc5qVjyoxrAm4Pl /Hj+Imwa+Q4MkzLRwaluSJCpgWXRZrLc4Sm9jk+kpPbVc3SZiPgkoU7KcVrYW2mM XIkwdH3EdbYgM1R8m9idvTSUfS54zRPzRMnEYcOBj1SXTThhxX/59N0Z2Wcox6xE 9+7l7uVATmV7j6Y2bf7Z15q5PL7KAIQFlXnlhLvyJo/qitSxYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFpXJfDpsY+3jK6cnKxfAVHEX3yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGEyYjE2OTctZDJiNi0z ZDAzLTgyOTItNzhjYTZkZjQ3NDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwNjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqZX6EHnqZW1K4dCcr5dTm0Hxcf+qCBec+Beze7YW+CtGrkX5W5ZQP+ gui6ZxCKDwtDbVJtiJxlamrV3dYyv1qnoU1U4CkSCPUOWq+5P4DhbKi7Zg3y9B55 hA+fWfeL5v/xYr/pvzbUH3XYTfrRVof53KQkCx9MMAAkabXfKah6icnDLQehATSx F0oSR0ABmhqKCZqFhMUBNXsDELRl7ZKJKg4YVlfW4SK4f6O8KF+D1sGokjJDQR3a 4vM1zD0+rqg/autA9wivhIFw3eXJIqZ0Us2Z29b8BhNi0s5TCzuNzqYvdgqr1Niw 0SQwWzlMhqNcenwukhFiOKWUIUZezl0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:10 2025 by rpki-client