$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/741a0961-2984-301a-89be-a8d3bf403220.roa File: 741a0961-2984-301a-89be-a8d3bf403220.roa (raw, json) Hash identifier: Z+TQT4iJge4XG65NO6dog3Lji0IpKgU9scbSQzR5t/k= Subject key identifier: 8A:76:E8:4B:02:36:81:8E:88:DF:68:F0:96:A1:23:F2:8F:62:FE:FD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A03A55B4B96226E8994100B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/741a0961-2984-301a-89be-a8d3bf403220.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.1.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:5b:4b:96:22:6e:89:94:10:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=d9792b30-be59-42d3-a01c-da66095a1a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e2:63:8e:20:7f:6e:a7:86:5d:43:9a:c6:50: 69:56:e1:08:01:ee:37:de:f7:fb:a3:28:92:b6:a6: 21:bf:77:52:89:a1:30:a3:0b:61:4c:2a:9c:79:2c: 3e:04:d2:51:a3:65:49:76:e1:c1:46:83:7e:e0:e0: 9e:a7:ee:fd:45:2c:66:26:35:64:49:33:97:69:5b: d7:9f:d9:9d:57:5f:11:58:39:51:76:6c:89:71:47: 58:dc:06:a2:ce:83:4e:a7:87:e7:7a:b2:9d:1e:7b: 70:0d:07:d3:80:5c:fc:85:0a:87:da:00:55:67:5d: cb:e9:3b:89:82:69:8e:37:f5:7f:cb:94:c5:e5:9a: be:c0:6f:40:30:28:02:18:7c:0b:cc:3d:0b:3e:a0: ea:51:19:af:fe:7d:44:af:0f:9b:f7:51:5d:a9:08: 47:5e:c0:ac:a1:29:5e:9e:86:33:c5:9f:90:c4:c0: f5:31:f5:8e:23:21:a8:8e:fc:10:3a:7e:ec:a0:1c: 91:79:e1:d2:88:20:99:5f:17:fd:f1:b5:b9:ee:87: 3d:83:b5:90:81:e9:5f:57:f9:98:7c:73:5c:01:ea: a1:ba:a5:a9:c3:90:76:c0:72:40:cf:df:4a:e1:b0: 24:e0:41:6e:a9:34:ef:41:e5:46:11:08:53:9b:65: dd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:76:E8:4B:02:36:81:8E:88:DF:68:F0:96:A1:23:F2:8F:62:FE:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/741a0961-2984-301a-89be-a8d3bf403220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:68:4d:59:63:e1:75:fb:10:e2:8e:d6:4d:89:29:55:5e:a9: 84:24:f0:43:94:4e:19:a1:a2:ad:10:36:39:04:0f:12:d1:8a: 95:d3:6d:36:3f:06:67:10:07:18:e3:e8:f6:50:8d:c1:0a:df: 3f:30:55:4e:33:23:61:14:95:2d:26:43:71:89:c6:c0:3c:a7: 8e:92:5b:c5:19:e9:43:64:ce:15:5c:4f:d2:24:28:7e:b0:37: c7:50:d5:9c:d4:0d:58:90:a9:97:af:e7:a2:43:66:4f:dd:30: 6f:d9:1a:5f:a8:fc:5b:1a:46:16:bf:2d:e6:00:65:64:d4:8a: a6:0b:4c:54:56:9f:c9:c2:de:f7:76:c3:95:8d:03:e6:8c:1f: 91:75:26:fc:ce:03:e5:75:db:60:b4:9f:f7:f2:7e:a1:87:03: 0a:e7:cb:00:88:12:0b:c0:a1:3f:7c:30:25:d2:10:b9:41:1a: a9:d5:eb:c7:f4:97:53:f1:7b:aa:5a:48:33:bf:e1:d9:e3:a1: 6f:6d:e3:d0:c9:f1:78:64:5e:5f:f1:39:ee:6e:b6:93:e9:6b: 0d:08:01:37:67:c3:f8:0b:58:8e:9d:0c:d4:53:bd:73:f8:30: 1c:ce:64:dc:a0:b6:ed:d7:78:dd:01:aa:bc:c3:9e:a7:1f:19: f5:e5:42:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpVtLliJuiZQQC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk ZDk3OTJiMzAtYmU1OS00MmQzLWEwMWMtZGE2NjA5NWExYTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeJjjiB/bqeGXUOaxlBpVuEIAe433vf7oyiS tqYhv3dSiaEwowthTCqceSw+BNJRo2VJduHBRoN+4OCep+79RSxmJjVkSTOXaVvX n9mdV18RWDlRdmyJcUdY3AaizoNOp4fnerKdHntwDQfTgFz8hQqH2gBVZ13L6TuJ gmmON/V/y5TF5Zq+wG9AMCgCGHwLzD0LPqDqURmv/n1Erw+b91FdqQhHXsCsoSle noYzxZ+QxMD1MfWOIyGojvwQOn7soByReeHSiCCZXxf98bW57oc9g7WQgelfV/mY fHNcAeqhuqWpw5B2wHJAz99K4bAk4EFuqTTvQeVGEQhTm2XdDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIp26EsCNoGOiN9o8JahI/KPYv79MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzQxYTA5NjEtMjk4NC0z MDFhLTg5YmUtYThkM2JmNDAzMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZoTVlj4XX7EOKO1k2JKVVeqYQk8EOUThmhoq0QNjkEDxLRipXTbTY/ BmcQBxjj6PZQjcEK3z8wVU4zI2EUlS0mQ3GJxsA8p46SW8UZ6UNkzhVcT9IkKH6w N8dQ1ZzUDViQqZev56JDZk/dMG/ZGl+o/FsaRha/LeYAZWTUiqYLTFRWn8nC3vd2 w5WNA+aMH5F1JvzOA+V122C0n/fyfqGHAwrnywCIEgvAoT98MCXSELlBGqnV68f0 l1Pxe6paSDO/4dnjoW9t49DJ8XhkXl/xOe5utpPpaw0IATdnw/gLWI6dDNRTvXP4 MBzOZNygtu3XeN0BqrzDnqcfGfXlQnI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:51:21 2025 by rpki-client