$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/709c5f50-3043-3c72-989f-da8871f5f0f8.roa File: 709c5f50-3043-3c72-989f-da8871f5f0f8.roa (raw, json) Hash identifier: 6iJ9kwkDtOpN0UkLO+7eaXJVaAr8xQxZ4FC1UsQDtqg= Subject key identifier: 90:40:2A:06:76:39:B7:84:BD:89:BB:99:D0:C9:5F:24:61:32:5C:B6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A1B60132460D54FC6AC90E580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/709c5f50-3043-3c72-989f-da8871f5f0f8.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.41.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:13:24:60:d5:4f:c6:ac:90:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=cbe1ba76-671e-465f-bead-2d3108655a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:09:3d:58:44:8e:e2:ec:ff:4c:16:a4:44:42: ca:84:06:7b:bc:60:dc:43:1c:50:0e:bb:26:39:70: b4:86:85:ef:3b:2f:32:4a:24:d8:af:30:37:95:25: 81:da:7d:d5:24:aa:ff:99:a9:80:3f:86:d2:3d:fc: dc:cf:1c:bc:0a:29:7a:3a:22:50:2f:4d:32:50:22: de:55:36:05:ae:b6:66:61:b2:62:62:c8:b0:fc:14: 7c:fc:d2:bd:46:82:e5:ea:7c:8d:d0:1b:51:98:96: db:1a:4c:49:38:9c:72:48:29:cf:e0:aa:1b:ea:0e: a7:42:38:40:30:93:84:d3:3d:10:a9:97:a9:12:fa: 34:35:78:2b:be:9c:9d:88:e7:51:b5:a9:00:f3:28: af:97:08:73:bb:0b:c0:58:9b:fc:ec:54:0b:9f:73: fd:bd:72:e6:1a:af:6f:ed:91:ff:04:52:de:fa:26: 86:06:7a:ca:3c:23:80:62:cc:eb:21:13:17:f6:af: 69:c3:ee:9b:80:a4:5f:58:4e:40:e2:1a:6e:ff:7c: 32:b2:e3:bb:c1:3f:94:03:85:c3:bd:54:01:f9:78: b7:70:19:6f:cd:ec:f2:96:02:20:67:e4:ac:35:74: 2e:2b:ee:35:12:f5:d5:67:f7:4f:c4:0a:1e:7a:bd: 73:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:40:2A:06:76:39:B7:84:BD:89:BB:99:D0:C9:5F:24:61:32:5C:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/709c5f50-3043-3c72-989f-da8871f5f0f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:7c:a9:c8:02:8d:1f:54:58:ca:54:93:94:0d:0b:b0:47:41: 5b:41:8c:ec:8c:ef:8f:6a:e8:4a:44:24:c7:73:72:6d:73:56: 20:8d:e4:2d:8d:8c:33:b2:0d:1e:d0:22:d7:d8:d1:02:c5:d7: c8:0c:91:b6:c6:b9:5c:f2:b0:64:fb:a7:cc:2d:b2:0b:6c:81: e4:8c:11:82:8d:85:23:81:d8:5c:7f:0e:e0:0a:d5:f3:af:50: 0d:4a:ca:88:5f:fb:e1:62:a4:dd:98:0d:af:16:0a:01:fc:de: 9a:2d:65:ca:a2:05:78:65:c9:1d:5a:1a:a0:50:5b:fd:ab:26: 42:72:69:80:57:c0:be:ce:23:da:db:62:a1:9b:7f:4b:75:22: 7a:fb:44:13:7a:fb:47:35:f3:c2:77:5f:82:d0:a9:03:cc:bd: cc:14:c7:fb:4c:27:4b:ce:d3:eb:12:9a:ab:b0:43:18:74:37: e0:a1:b4:67:2a:64:72:1a:09:71:a1:bf:93:9f:2c:fb:60:25: 9f:c1:6b:31:51:a4:96:b3:52:33:6f:9c:ab:ed:92:b7:b2:c0: 9d:7d:d4:39:3b:a6:91:81:74:28:45:2b:e5:c3:d7:64:c5:f2: b2:ac:bc:98:37:71:a0:b7:c1:e7:62:e4:c9:3e:ac:2a:b4:35: 8d:7b:bf:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYBMkYNVPxqyQ5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk Y2JlMWJhNzYtNjcxZS00NjVmLWJlYWQtMmQzMTA4NjU1YTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgk9WESO4uz/TBakRELKhAZ7vGDcQxxQDrsm OXC0hoXvOy8ySiTYrzA3lSWB2n3VJKr/mamAP4bSPfzczxy8Cil6OiJQL00yUCLe VTYFrrZmYbJiYsiw/BR8/NK9RoLl6nyN0BtRmJbbGkxJOJxySCnP4Kob6g6nQjhA MJOE0z0QqZepEvo0NXgrvpydiOdRtakA8yivlwhzuwvAWJv87FQLn3P9vXLmGq9v 7ZH/BFLe+iaGBnrKPCOAYszrIRMX9q9pw+6bgKRfWE5A4hpu/3wysuO7wT+UA4XD vVQB+Xi3cBlvzezylgIgZ+SsNXQuK+41EvXVZ/dPxAoeer1zQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBAKgZ2ObeEvYm7mdDJXyRhMly2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzA5YzVmNTAtMzA0My0z YzcyLTk4OWYtZGE4ODcxZjVmMGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyn6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGR8qcgCjR9UWMpUk5QNC7BHQVtBjOyM749q6EpEJMdzcm1zViCN5C2N jDOyDR7QItfY0QLF18gMkbbGuVzysGT7p8wtsgtsgeSMEYKNhSOB2Fx/DuAK1fOv UA1Kyohf++FipN2YDa8WCgH83potZcqiBXhlyR1aGqBQW/2rJkJyaYBXwL7OI9rb YqGbf0t1Inr7RBN6+0c188J3X4LQqQPMvcwUx/tMJ0vO0+sSmquwQxh0N+ChtGcq ZHIaCXGhv5OfLPtgJZ/BazFRpJazUjNvnKvtkreywJ191Dk7ppGBdChFK+XD12TF 8rKsvJg3caC3wedi5Mk+rCq0NY17v3Q= -----END CERTIFICATE-----Generated at Sun Jun 8 07:35:48 2025 by rpki-client