$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ebc6bdc-2e57-3471-a2c3-7f711815fe93.roa File: 7ebc6bdc-2e57-3471-a2c3-7f711815fe93.roa (raw, json) Hash identifier: /L9bCKIAnudMheQpzXex/rYsilkA+zOvZahwxTqcLTU= Subject key identifier: 23:E0:56:A6:75:D1:31:25:70:FA:6C:A9:6D:54:C8:FB:DD:34:8A:68 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849B14A353FEA3DBFA4DC5EB040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ebc6bdc-2e57-3471-a2c3-7f711815fe93.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.38.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:35:3f:ea:3d:bf:a4:dc:5e:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=209c3ab0-20d6-45e2-adb2-dfe097bb7a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:17:fe:93:07:8f:8c:41:62:35:b9:ef:c6:49: 1d:4e:bc:78:f7:f8:28:b5:17:72:23:69:c9:37:e9: c8:65:b7:ed:5c:dd:cd:a0:3f:00:38:eb:27:a2:1a: 7f:4f:31:26:5b:65:f5:d4:26:fd:82:56:1f:11:fc: 82:d5:38:ec:37:8f:8e:a7:22:f2:2d:ac:5a:c8:06: 58:49:68:f5:e0:68:b4:25:61:72:a5:db:53:96:6f: ac:47:11:fd:d7:90:e7:e0:9d:c7:07:83:a3:72:0b: d7:4e:c8:91:ec:26:1b:d1:a5:8a:3e:98:ca:3b:3b: 7c:6e:49:6e:38:f3:e3:06:a2:9e:65:b9:3b:96:24: f3:bd:b9:05:ae:49:a1:dc:df:27:c3:c0:93:0d:46: 65:d5:8a:7f:e1:0a:ba:0c:06:8e:89:13:9d:1c:73: 0f:f3:d7:17:d0:ca:83:ae:79:32:d2:98:53:c6:8a: fc:e8:cd:38:9f:f6:cd:11:04:14:e1:5d:7f:12:84: f6:a8:c4:27:50:47:bd:8f:84:42:d2:d5:ac:ef:24: 54:0c:9a:16:d0:e1:9c:92:50:85:2c:6a:5a:27:4f: 20:e2:e6:92:ad:92:a5:7c:09:a5:6d:c5:c2:d9:88: b6:50:b5:92:cd:99:7a:ed:37:75:65:cc:9e:3e:5b: 5f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E0:56:A6:75:D1:31:25:70:FA:6C:A9:6D:54:C8:FB:DD:34:8A:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ebc6bdc-2e57-3471-a2c3-7f711815fe93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:bc:95:1b:01:ef:a3:8b:3f:73:0d:99:3d:00:6b:0b:ac:0c: e3:3a:08:05:9e:d5:0d:1f:02:39:f4:ea:8e:aa:af:88:21:19: 96:ac:26:86:94:58:40:cf:4c:e9:a3:01:13:75:55:81:f3:8e: f7:84:17:ca:54:14:8b:ec:75:78:85:b8:58:b3:5d:09:29:8f: 8a:08:7f:d5:e5:23:46:1e:85:e0:f9:8e:87:34:d1:8d:2f:e8: a4:e3:b7:68:b4:ff:5e:d8:6f:14:86:16:30:f4:41:53:c6:c0: de:d9:b7:86:f1:6c:72:a1:a1:b9:2d:79:c4:84:b3:7b:d2:5e: fe:2e:ff:59:44:fe:fd:f0:86:08:43:2f:1e:2b:05:0b:c5:36: b7:ee:ed:cf:48:47:f4:04:dc:30:89:b9:53:1b:b5:c6:a4:68: 10:53:84:2e:a2:64:52:d7:ae:e4:4f:74:3c:fc:74:67:9a:b2: 7b:31:f3:d6:18:94:08:c4:d2:9a:e1:c7:90:e2:d5:27:9f:0c: 0b:22:ec:ad:ad:41:be:c4:37:c2:00:e9:cd:bb:d1:87:36:07: 81:d8:9b:09:31:3e:27:06:a2:6a:cd:bc:5f:f4:41:22:cb:f5: b5:00:84:8a:78:73:31:f0:93:f9:6d:77:25:f5:39:2e:84:21: 37:24:eb:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjU/6j2/pNxesEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MjA5YzNhYjAtMjBkNi00NWUyLWFkYjItZGZlMDk3YmI3YTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBf+kwePjEFiNbnvxkkdTrx49/gotRdyI2nJ N+nIZbftXN3NoD8AOOsnohp/TzEmW2X11Cb9glYfEfyC1TjsN4+OpyLyLaxayAZY SWj14Gi0JWFypdtTlm+sRxH915Dn4J3HB4OjcgvXTsiR7CYb0aWKPpjKOzt8bklu OPPjBqKeZbk7liTzvbkFrkmh3N8nw8CTDUZl1Yp/4Qq6DAaOiROdHHMP89cX0MqD rnky0phTxor86M04n/bNEQQU4V1/EoT2qMQnUEe9j4RC0tWs7yRUDJoW0OGcklCF LGpaJ08g4uaSrZKlfAmlbcXC2Yi2ULWSzZl67Td1ZcyePltfkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPgVqZ10TElcPpsqW1UyPvdNIpoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2ViYzZiZGMtMmU1Ny0z NDcxLWEyYzMtN2Y3MTE4MTVmZTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFW8lRsB76OLP3MNmT0AawusDOM6CAWe1Q0fAjn06o6qr4ghGZasJoaU WEDPTOmjARN1VYHzjveEF8pUFIvsdXiFuFizXQkpj4oIf9XlI0YeheD5joc00Y0v 6KTjt2i0/17YbxSGFjD0QVPGwN7Zt4bxbHKhobktecSEs3vSXv4u/1lE/v3whghD Lx4rBQvFNrfu7c9IR/QE3DCJuVMbtcakaBBThC6iZFLXruRPdDz8dGeasnsx89YY lAjE0prhx5Di1SefDAsi7K2tQb7EN8IA6c270Yc2B4HYmwkxPicGomrNvF/0QSLL 9bUAhIp4czHwk/ltdyX1OS6EITck69U= -----END CERTIFICATE-----Generated at Sat Jun 7 14:33:58 2025 by rpki-client