$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d4a1654-7903-3688-a950-66b19d2d7795.roa File: 4d4a1654-7903-3688-a950-66b19d2d7795.roa (raw, json) Hash identifier: 8W5tOF7A+41oXhbqs/koHF2gkBiB5MNzgl7oY+qwPSM= Subject key identifier: F1:6E:FF:0E:3C:0E:87:9E:EA:26:9A:28:B8:29:2D:BC:8E:AD:52:2C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F2E552C32F1C0C1DB0B49500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d4a1654-7903-3688-a950-66b19d2d7795.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.65.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:52:c3:2f:1c:0c:1d:b0:b4:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=b6f7daa9-3b0c-4359-ac95-be397a557fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:15:d7:2b:60:ee:2a:1f:ad:99:f8:6b:67:fe: 7f:a4:25:0b:d1:f9:58:32:34:87:b9:c0:f8:2d:89: d6:14:51:2e:c1:cb:ef:c3:19:2f:25:2e:5e:f5:b8: 03:54:e0:f5:eb:0f:5f:76:0f:38:0a:7c:53:5c:89: f3:1b:f6:10:22:dc:6b:f8:5a:59:2a:ac:0d:37:84: ef:3a:e3:c6:2b:57:d0:d4:0b:b9:97:87:a2:68:81: 65:62:52:f0:5c:99:23:ef:bd:95:71:83:f4:c5:c6: 69:f6:85:db:ad:31:34:35:4e:f4:18:09:c2:16:92: 2a:16:19:57:39:9f:cc:39:94:32:35:d7:57:ab:e3: 56:9f:d9:e4:4c:69:77:b6:43:01:64:49:8d:cc:55: 72:8b:6d:9e:02:ad:11:ab:05:4d:cb:67:26:d6:62: 21:02:3c:db:ab:bb:55:7c:4e:04:94:44:bc:71:b2: 66:b2:f4:51:dc:db:56:6d:98:7c:e5:af:be:46:97: e7:31:f5:74:de:11:df:4c:00:57:40:8e:86:75:6b: 71:aa:0a:5e:ae:1d:2d:91:a7:ea:0c:ac:17:15:ae: 5b:3a:0b:09:f5:35:a1:40:6b:14:a3:9d:5c:c1:b0: 78:f1:4e:de:bb:a1:51:a7:f1:57:51:e5:a8:ab:a3: f2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6E:FF:0E:3C:0E:87:9E:EA:26:9A:28:B8:29:2D:BC:8E:AD:52:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d4a1654-7903-3688-a950-66b19d2d7795.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.65.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:34:e8:97:b4:34:92:54:56:ab:0a:6c:6b:44:3b:76:d6:04: ae:38:47:bf:71:eb:79:86:97:e2:a5:2d:2f:a5:d7:34:82:f1: 58:a9:e7:3f:40:f7:6c:f8:ce:68:f5:36:48:6f:7c:6f:61:47: 25:ba:82:d5:0d:a6:57:e4:e6:42:4f:62:d2:c3:c4:3f:66:9b: df:54:5d:88:6b:1c:0e:e9:8a:30:36:b5:f4:0f:e6:54:99:8c: fd:f0:ff:db:35:11:aa:8d:7f:b7:b0:60:ae:90:ae:55:d1:9d: ec:fd:12:ee:2a:c5:0f:94:b3:11:61:0a:85:e4:74:42:99:29: 2b:e1:84:e4:63:3d:2d:8a:a5:ca:74:b4:81:01:99:34:85:59: 22:13:9a:aa:bd:ea:db:ab:30:ba:98:7a:66:80:1a:bc:54:33: 36:dc:cb:c7:a7:01:88:56:ce:05:56:cb:69:9e:5b:3d:a8:c7: 88:c7:70:48:a5:73:93:04:13:e8:82:a9:b2:f2:02:fe:2c:bf: 7a:83:ac:55:0d:c2:41:ab:1a:80:e8:5a:36:ea:b7:5f:29:f1: f6:21:b8:2b:ad:56:51:61:3b:b3:95:2e:5e:b2:d4:f3:ea:0e: 3c:ed:d8:e3:5d:5a:67:cc:41:3f:d7:07:6a:1c:de:0f:4f:12: ef:dc:da:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5VLDLxwMHbC0lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk YjZmN2RhYTktM2IwYy00MzU5LWFjOTUtYmUzOTdhNTU3ZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhXXK2DuKh+tmfhrZ/5/pCUL0flYMjSHucD4 LYnWFFEuwcvvwxkvJS5e9bgDVOD16w9fdg84CnxTXInzG/YQItxr+FpZKqwNN4Tv OuPGK1fQ1Au5l4eiaIFlYlLwXJkj772VcYP0xcZp9oXbrTE0NU70GAnCFpIqFhlX OZ/MOZQyNddXq+NWn9nkTGl3tkMBZEmNzFVyi22eAq0RqwVNy2cm1mIhAjzbq7tV fE4ElES8cbJmsvRR3NtWbZh85a++RpfnMfV03hHfTABXQI6GdWtxqgperh0tkafq DKwXFa5bOgsJ9TWhQGsUo51cwbB48U7eu6FRp/FXUeWoq6PyFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFu/w48Doee6iaaKLgpLbyOrVIsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGQ0YTE2NTQtNzkwMy0z Njg4LWE5NTAtNjZiMTlkMmQ3Nzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0G+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEk06Je0NJJUVqsKbGtEO3bWBK44R79x63mGl+KlLS+l1zSC8Vip5z9A 92z4zmj1NkhvfG9hRyW6gtUNplfk5kJPYtLDxD9mm99UXYhrHA7pijA2tfQP5lSZ jP3w/9s1EaqNf7ewYK6QrlXRnez9Eu4qxQ+UsxFhCoXkdEKZKSvhhORjPS2Kpcp0 tIEBmTSFWSITmqq96turMLqYemaAGrxUMzbcy8enAYhWzgVWy2meWz2ox4jHcEil c5MEE+iCqbLyAv4sv3qDrFUNwkGrGoDoWjbqt18p8fYhuCutVlFhO7OVLl6y1PPq Djzt2ONdWmfMQT/XB2oc3g9PEu/c2lI= -----END CERTIFICATE-----Generated at Fri Jun 6 16:55:49 2025 by rpki-client