$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60901cbf-28c2-39f3-b482-0ff5b9a46e56.roa File: 60901cbf-28c2-39f3-b482-0ff5b9a46e56.roa (raw, json) Hash identifier: ZJTsRjfUvflJxlYqImvdIPUxEVaTeWk7q9gvlKb63rQ= Subject key identifier: BF:BA:D0:D3:BF:3E:19:87:EA:1C:A1:27:81:DD:62:0F:59:1D:F7:4B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F2AC50664628999412251900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60901cbf-28c2-39f3-b482-0ff5b9a46e56.roa Signing time: Fri 23 May 2025 11:06:38 +0000 ROA not before: Fri 23 May 2025 11:06:38 +0000 ROA not after: Thu 21 Aug 2025 11:06:38 +0000 asID: 16625 IP address blocks: 23.2.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:ac:50:66:46:28:99:94:12:25:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 23 11:06:38 2025 GMT Not After : Aug 21 11:06:38 2025 GMT Subject: CN=23436183-0d1b-4ab5-8733-834a5e0796d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b0:50:d8:4e:b0:12:15:08:28:69:2b:5d:f0: 64:d9:5a:96:c3:07:86:67:fa:d9:60:6e:1a:99:ce: d0:f6:c9:ff:65:05:25:98:12:7d:5b:b3:d3:de:e4: 64:d4:38:eb:ad:11:a1:c9:1c:e3:03:ae:58:0b:8b: 37:44:2e:93:5f:b5:ad:b9:f9:cd:12:51:08:2a:85: 7d:21:82:ed:fb:ce:c3:85:f0:ac:fa:67:36:67:6d: 95:64:06:99:dc:78:e8:a0:7c:64:91:94:49:40:fc: 86:db:ad:08:3c:39:8a:22:07:18:15:e6:88:fb:59: 06:60:a0:c3:f5:02:40:d0:e9:8c:bb:eb:23:01:b7: 81:e4:fa:a4:64:90:c7:64:0b:49:2b:bb:90:f4:c6: 00:ec:00:c9:bd:bf:0c:29:7f:77:25:b3:2b:6e:f1: 66:13:86:0d:17:95:6d:e8:1e:b4:bf:aa:f6:a2:2c: ad:95:e9:d9:c6:23:75:5a:51:2d:55:de:3c:74:25: cc:b2:a1:d2:13:50:c2:4a:33:b1:f3:d9:89:26:60: a3:c9:cb:0e:30:a4:6a:8b:7d:fe:ba:03:ba:d9:d0: 74:9c:c7:f6:78:e7:50:29:15:55:e4:6c:9c:77:32: 40:ea:95:20:b3:2a:d1:a1:07:a5:20:43:0f:2b:39: 8c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BA:D0:D3:BF:3E:19:87:EA:1C:A1:27:81:DD:62:0F:59:1D:F7:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60901cbf-28c2-39f3-b482-0ff5b9a46e56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.2.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e8:3b:ad:45:60:21:4b:5b:3f:6d:07:ba:68:da:08:93:bc: 58:c6:e6:c3:ae:64:ad:94:8b:98:50:d3:20:83:f8:29:16:38: 29:ec:60:63:34:37:7e:c9:fb:db:6c:b9:42:ef:f3:2f:c3:63: ea:5e:6a:8a:93:ad:ba:9d:95:ad:3a:47:29:5c:62:51:73:e3: c0:e4:6d:be:d4:ff:b0:82:a9:40:ae:f1:c2:b5:de:b8:87:46: 65:f9:55:13:fd:91:66:b9:bc:c9:12:42:0c:6e:60:98:84:83: 9a:a5:a0:47:76:7a:35:e7:af:ea:af:eb:36:d5:5b:e5:32:96: 3b:e0:54:f6:85:26:ef:cf:b1:87:0c:a4:d8:33:16:15:ca:17: 1c:35:c4:41:b2:ce:5e:74:41:0d:f0:28:d2:b2:1a:48:c4:c4: ba:17:fe:23:0e:78:6a:0e:73:00:ea:d1:f4:1d:cc:d2:5d:d7: 78:94:14:30:ef:b6:b7:82:41:91:00:0b:ef:10:6f:c4:32:7b: 6f:64:28:8b:36:fa:57:5e:85:e9:f4:03:58:83:ba:04:df:13: db:3a:cf:05:83:94:98:b5:7c:8e:ea:51:85:97:ed:05:4f:84: a1:42:34:78:19:f6:86:c4:b2:f5:f1:56:30:cb:28:37:40:e5: a3:ca:a7:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnyrFBmRiiZlBIlGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMzExMDYzOFoXDTI1MDgyMTExMDYzOFowLzEtMCsGA1UEAxMk MjM0MzYxODMtMGQxYi00YWI1LTg3MzMtODM0YTVlMDc5NmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA97BQ2E6wEhUIKGkrXfBk2VqWwweGZ/rZYG4a mc7Q9sn/ZQUlmBJ9W7PT3uRk1DjrrRGhyRzjA65YC4s3RC6TX7WtufnNElEIKoV9 IYLt+87DhfCs+mc2Z22VZAaZ3HjooHxkkZRJQPyG260IPDmKIgcYFeaI+1kGYKDD 9QJA0OmMu+sjAbeB5PqkZJDHZAtJK7uQ9MYA7ADJvb8MKX93JbMrbvFmE4YNF5Vt 6B60v6r2oiytlenZxiN1WlEtVd48dCXMsqHSE1DCSjOx89mJJmCjycsOMKRqi33+ ugO62dB0nMf2eOdQKRVV5GycdzJA6pUgsyrRoQelIEMPKzmMNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+60NO/PhmH6hyhJ4HdYg9ZHfdLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjA5MDFjYmYtMjhjMi0z OWYzLWI0ODItMGZmNWI5YTQ2ZTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwI8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvoO61FYCFLWz9tB7po2giTvFjG5sOuZK2Ui5hQ0yCD+CkWOCnsYGM0 N37J+9tsuULv8y/DY+peaoqTrbqdla06RylcYlFz48Dkbb7U/7CCqUCu8cK13riH RmX5VRP9kWa5vMkSQgxuYJiEg5qloEd2ejXnr+qv6zbVW+UyljvgVPaFJu/PsYcM pNgzFhXKFxw1xEGyzl50QQ3wKNKyGkjExLoX/iMOeGoOcwDq0fQdzNJd13iUFDDv treCQZEAC+8Qb8Qye29kKIs2+ldehen0A1iDugTfE9s6zwWDlJi1fI7qUYWX7QVP hKFCNHgZ9obEsvXxVjDLKDdA5aPKp+k= -----END CERTIFICATE-----Generated at Sat Jun 7 14:48:55 2025 by rpki-client