$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59ce9656-d1d1-31ac-9430-5ae376a264d9.roa File: 59ce9656-d1d1-31ac-9430-5ae376a264d9.roa (raw, json) Hash identifier: UqXfg0y7+BwTDfkVlnZlkbDdkbJ3GT/QfHHfqTpqcz0= Subject key identifier: 88:85:03:D8:47:45:85:67:C8:5E:64:DC:F5:28:F9:E8:12:50:86:C1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F2E552326D7887FD7502F980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59ce9656-d1d1-31ac-9430-5ae376a264d9.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.64.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:52:32:6d:78:87:fd:75:02:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=fdb4afaf-0879-4e2b-bd9a-3ecbd432bcb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:dc:7f:b3:da:ab:f1:e0:c9:e8:75:02:2b: a9:aa:1f:df:8b:b6:11:9f:61:7f:6a:9b:a2:d3:9d: 18:8b:aa:e1:34:28:c3:76:83:34:35:4c:30:84:1b: ad:6a:28:b9:5a:8f:90:db:97:04:89:d8:35:9c:a5: ac:2f:f5:b7:f5:ac:2b:de:31:b0:41:d9:21:fd:89: 54:04:d1:97:ff:4c:90:36:91:28:81:41:e0:f4:75: 4d:fd:ce:23:72:5e:33:7b:80:50:91:25:70:cf:00: 85:b1:37:c7:15:db:90:8d:f4:38:3b:ad:97:df:82: e1:c4:79:59:29:85:f1:45:7a:42:32:18:5f:78:3f: 18:c5:bf:25:62:eb:a0:5b:29:93:cf:4c:60:a6:67: 58:6b:44:13:18:91:a8:23:b6:62:a5:20:8d:69:e9: 1e:da:17:a7:94:c4:c4:d2:6a:d6:f9:53:84:eb:14: f9:c3:28:d5:0b:10:f4:69:02:7b:dc:de:38:f8:40: 39:99:e6:17:f7:99:90:aa:be:e2:22:08:f0:01:c0: 2e:ba:e9:34:9a:5f:7d:99:34:88:e4:fe:12:d1:1f: b1:6a:e7:bc:a2:00:39:83:10:a2:e6:92:fe:22:75: c6:5c:65:df:0b:15:6c:82:46:d7:17:7a:f6:b4:a3: 8b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:85:03:D8:47:45:85:67:C8:5E:64:DC:F5:28:F9:E8:12:50:86:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59ce9656-d1d1-31ac-9430-5ae376a264d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.64.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:cb:ed:43:cf:39:2a:84:f3:eb:f2:af:21:ce:c4:0a:44:b8: 0c:ad:c1:00:8a:63:6e:82:b2:4e:7d:29:b2:d3:ae:cc:c2:88: ea:2b:0d:64:ed:16:37:60:7f:a1:3f:e6:cd:92:ac:99:5c:cc: 2e:56:45:21:0c:57:77:09:d7:ee:2f:1c:0b:90:f0:3b:9b:2c: 8c:97:6c:01:b6:21:b5:4c:93:c1:98:13:c7:87:4d:20:42:8a: 2f:b3:65:79:7d:bb:bc:26:37:50:9c:c9:10:9a:5c:5c:b3:14: a8:f5:66:b6:9a:34:82:fd:bb:7a:4d:9e:a1:f2:7b:f4:b1:ce: f3:d0:5d:1b:e3:6f:d5:dc:7b:e4:39:90:7a:ce:77:f9:e6:c9: 35:c5:44:e7:4e:0d:5b:a2:4e:07:93:cc:3b:fa:52:91:50:f7: df:ef:e0:42:23:cf:27:20:04:89:75:d5:96:c3:54:65:a2:fe: ea:96:6d:81:9d:95:7b:41:40:30:32:d9:f6:52:93:71:5a:9e: 50:11:1c:ba:07:2f:94:e7:4e:b3:99:c1:d1:e9:0d:98:03:2c: 33:79:6e:bf:85:1f:14:cb:73:5d:ec:c3:3a:5c:bc:92:3b:12: b3:3c:c0:72:89:d8:f9:b7:b0:f9:3a:7a:f6:2e:63:3b:83:e7: 34:46:f8:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5VIybXiH/XUC+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZmRiNGFmYWYtMDg3OS00ZTJiLWJkOWEtM2VjYmQ0MzJiY2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu03cf7Paq/Hgyeh1Aiupqh/fi7YRn2F/apui 050Yi6rhNCjDdoM0NUwwhButaii5Wo+Q25cEidg1nKWsL/W39awr3jGwQdkh/YlU BNGX/0yQNpEogUHg9HVN/c4jcl4ze4BQkSVwzwCFsTfHFduQjfQ4O62X34LhxHlZ KYXxRXpCMhhfeD8Yxb8lYuugWymTz0xgpmdYa0QTGJGoI7ZipSCNaeke2henlMTE 0mrW+VOE6xT5wyjVCxD0aQJ73N44+EA5meYX95mQqr7iIgjwAcAuuuk0ml99mTSI 5P4S0R+xaue8ogA5gxCi5pL+InXGXGXfCxVsgkbXF3r2tKOLBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiFA9hHRYVnyF5k3PUo+egSUIbBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTljZTk2NTYtZDFkMS0z MWFjLTk0MzAtNWFlMzc2YTI2NGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0CNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLL7UPPOSqE8+vyryHOxApEuAytwQCKY26Csk59KbLTrszCiOorDWTt Fjdgf6E/5s2SrJlczC5WRSEMV3cJ1+4vHAuQ8DubLIyXbAG2IbVMk8GYE8eHTSBC ii+zZXl9u7wmN1CcyRCaXFyzFKj1ZraaNIL9u3pNnqHye/SxzvPQXRvjb9Xce+Q5 kHrOd/nmyTXFROdODVuiTgeTzDv6UpFQ99/v4EIjzycgBIl11ZbDVGWi/uqWbYGd lXtBQDAy2fZSk3FanlARHLoHL5TnTrOZwdHpDZgDLDN5br+FHxTLc13swzpcvJI7 ErM8wHKJ2Pm3sPk6evYuYzuD5zRG+OI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:41:27 2025 by rpki-client