$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a7b918d-e027-398c-ae62-a1b52ff0373a.roa File: 7a7b918d-e027-398c-ae62-a1b52ff0373a.roa (raw, json) Hash identifier: qLCdALg3B+JPoIkwz4tLnxmQCz2Kn9rfRtsIt7LgSuc= Subject key identifier: C5:A0:97:D4:DE:1E:72:CE:E3:6D:52:1C:30:B6:F1:F3:1D:61:1C:1E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849DF5A6A207F71D66698D4CE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a7b918d-e027-398c-ae62-a1b52ff0373a.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 35994 IP address blocks: 23.14.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:6a:20:7f:71:d6:66:98:d4:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=b80fa354-9081-4287-9f59-aebb75978a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:95:50:8f:60:80:75:41:22:40:37:a1:34:dc: 22:b0:b3:12:51:bb:59:9b:ea:55:3d:d6:2b:d0:61: 36:ed:39:83:2c:f2:b3:a5:c1:4e:e0:6b:ca:cd:46: 7f:7a:d7:a0:80:64:55:ed:97:74:60:6d:f4:0a:43: 30:6e:3c:1b:65:53:a5:db:6f:f9:55:d8:1f:1d:74: 82:34:25:6f:d3:6c:2f:e7:01:61:9a:b9:d3:39:04: 65:d0:0e:b3:ef:d4:f7:d6:d4:e6:95:dc:1f:bb:94: 25:96:bc:69:87:e1:9c:ce:1f:8e:22:44:ca:55:7c: e0:14:4a:81:27:9f:13:90:e6:1d:ee:57:78:52:21: 9b:33:be:01:c4:fc:fe:42:37:91:d6:07:18:f8:4c: 5e:a4:f9:53:a8:a9:28:43:c0:57:be:b1:12:c3:96: b1:57:be:16:a5:d3:c2:c1:93:c8:0f:90:ee:b3:db: 59:8b:63:d3:02:bc:d6:d0:6f:b2:8c:5d:2e:d8:63: 9e:ee:9e:08:e6:c3:cc:76:7a:3e:d6:d6:46:76:d3: 9b:6d:a5:ce:30:03:03:58:0d:47:55:53:22:a9:30: 56:6f:39:4d:fc:2e:a4:3d:bf:51:87:9b:a2:f7:f8: 60:a7:e0:55:38:84:39:07:4a:ba:31:fa:7d:b2:1a: 63:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A0:97:D4:DE:1E:72:CE:E3:6D:52:1C:30:B6:F1:F3:1D:61:1C:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a7b918d-e027-398c-ae62-a1b52ff0373a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.14.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ee:42:3f:f2:d4:12:af:81:42:75:db:e0:2a:56:84:aa:4b: 70:5f:b6:8c:5b:2b:cf:c9:77:4f:f2:4f:a2:83:85:d8:e8:bd: 7d:9a:fe:ea:52:4c:24:9d:8f:0b:27:81:1b:f9:d0:08:bf:4f: e9:3d:69:de:a1:67:e6:25:97:71:a8:dd:02:bb:b8:f5:25:68: 96:32:72:11:41:a0:c8:b4:76:b4:f6:92:fc:6f:42:57:2f:32: ce:c5:cb:55:d5:dd:c1:75:a4:59:28:90:1e:30:01:67:f2:7f: c4:a3:20:68:98:24:e5:e0:2c:86:90:b6:81:63:f7:ec:91:da: 39:2f:7b:6a:b4:80:ba:c9:be:8e:f4:32:2a:5e:c1:26:b0:85: a9:71:86:c4:9f:d2:0b:5d:e9:4e:71:f2:c5:c9:07:c9:73:57: 40:ad:07:0f:ce:ac:b2:f4:f2:14:9d:9b:e5:31:f1:e5:0b:89: 59:ad:1e:09:be:fc:31:6b:8f:00:2c:4e:e1:d0:af:54:31:54: 28:36:ad:66:3d:1a:75:8a:f1:fb:82:99:94:ad:f7:f2:6f:a5: fe:ca:c0:99:eb:ab:88:2e:d2:69:84:d1:3c:31:5f:76:e6:63: bf:68:48:4f:96:f1:5e:20:e5:ee:6a:dc:ef:b7:d0:a8:94:46: 3e:6c:8c:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWmogf3HWZpjUzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk YjgwZmEzNTQtOTA4MS00Mjg3LTlmNTktYWViYjc1OTc4YTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipVQj2CAdUEiQDehNNwisLMSUbtZm+pVPdYr 0GE27TmDLPKzpcFO4GvKzUZ/eteggGRV7Zd0YG30CkMwbjwbZVOl22/5VdgfHXSC NCVv02wv5wFhmrnTOQRl0A6z79T31tTmldwfu5Qllrxph+Gczh+OIkTKVXzgFEqB J58TkOYd7ld4UiGbM74BxPz+QjeR1gcY+ExepPlTqKkoQ8BXvrESw5axV74WpdPC wZPID5Dus9tZi2PTArzW0G+yjF0u2GOe7p4I5sPMdno+1tZGdtObbaXOMAMDWA1H VVMiqTBWbzlN/C6kPb9Rh5ui9/hgp+BVOIQ5B0q6Mfp9shpjEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWgl9TeHnLO421SHDC28fMdYRweMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2E3YjkxOGQtZTAyNy0z OThjLWFlNjItYTFiNTJmZjAzNzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFw6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATuQj/y1BKvgUJ12+AqVoSqS3BftoxbK8/Jd0/yT6KDhdjovX2a/upS TCSdjwsngRv50Ai/T+k9ad6hZ+Yll3Go3QK7uPUlaJYychFBoMi0drT2kvxvQlcv Ms7Fy1XV3cF1pFkokB4wAWfyf8SjIGiYJOXgLIaQtoFj9+yR2jkve2q0gLrJvo70 MipewSawhalxhsSf0gtd6U5x8sXJB8lzV0CtBw/OrLL08hSdm+Ux8eULiVmtHgm+ /DFrjwAsTuHQr1QxVCg2rWY9GnWK8fuCmZSt9/Jvpf7KwJnrq4gu0mmE0TwxX3bm Y79oSE+W8V4g5e5q3O+30KiURj5sjHk= -----END CERTIFICATE-----Generated at Sat Jun 7 19:11:08 2025 by rpki-client