$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80f1ce13-2d43-3668-b870-0ded0e5f15a3.roa File: 80f1ce13-2d43-3668-b870-0ded0e5f15a3.roa (raw, json) Hash identifier: e7XI1/Ktnj7NpQjGG87C/dWV6/bWnhyeHbLNBE9p1AQ= Subject key identifier: A9:A9:75:C0:71:37:BC:B9:59:55:33:64:6F:45:A2:ED:98:4D:CE:C9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A03A56C037512496C126FAAE4 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80f1ce13-2d43-3668-b870-0ded0e5f15a3.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.2.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:6c:03:75:12:49:6c:12:6f:aa:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=2acd58b5-8b79-462f-b4f8-7c6a48acefcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c8:8e:cd:ae:b3:dd:42:9e:c9:c5:21:0f:4e: fe:c8:03:24:75:29:56:b4:f0:c9:36:1b:4d:fd:9f: b7:26:a5:4f:b2:b6:99:ae:a4:09:bc:6c:13:e6:2c: 30:05:64:ab:19:6b:ac:2e:4c:4c:1e:20:ef:a8:f5: 19:86:be:ad:42:9c:c4:6c:79:7d:ff:94:fb:72:7f: 39:24:9d:3d:ac:97:52:fc:55:9d:76:a1:90:f1:a1: 81:81:88:54:9b:60:d1:7f:5a:02:89:0c:90:75:9d: 8e:bf:a1:fb:0e:b5:1c:c8:10:1c:10:8d:10:1a:38: fb:73:33:14:0c:e2:8f:33:36:e2:f7:3e:48:01:29: 13:a4:42:43:4f:41:d9:81:2c:8f:72:1e:8f:4b:e0: 93:61:27:7c:85:93:b4:76:76:81:e6:7a:96:b5:d4: f4:3d:09:f6:ee:02:c1:ca:e8:5c:05:45:7e:86:2e: 59:9e:63:58:2f:ce:9d:a7:3c:2b:af:48:db:0a:4e: 38:35:62:0b:26:9e:2c:e4:7c:2b:ad:28:08:69:2d: dd:0c:c7:c8:a8:dc:6a:89:e5:25:ff:53:94:44:02: 3e:d2:2c:d7:36:67:c5:ad:d2:bc:70:0b:36:89:0d: 01:51:17:85:88:2b:fb:04:a7:23:76:30:36:8a:7f: 44:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A9:75:C0:71:37:BC:B9:59:55:33:64:6F:45:A2:ED:98:4D:CE:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80f1ce13-2d43-3668-b870-0ded0e5f15a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.2.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ac:2e:01:69:03:54:be:a6:22:12:39:bf:09:7c:cd:2d:e7: 1e:aa:ee:7c:71:1f:54:be:13:b6:78:48:a3:df:74:4b:1b:40: 87:06:b5:ca:92:f2:db:e9:1a:d6:0c:38:ef:c8:36:09:d9:08: 0e:d8:59:a8:d7:ac:5b:83:2a:a8:b8:55:9b:5b:db:d1:3c:a8: 6b:3b:f9:7a:d4:c0:95:77:67:da:e0:15:10:44:88:43:57:89: 1e:57:2d:5e:62:5e:1b:47:51:e4:75:21:ea:dd:27:d4:ec:a7: 2c:7e:51:e7:be:4d:10:88:88:e2:db:a1:3e:1b:8c:20:ed:ce: 32:a7:dc:9e:00:49:d3:09:db:69:4a:03:50:1b:c5:53:f8:35: a5:a1:b7:1f:6d:49:be:50:bc:50:17:c5:e9:71:88:58:1b:c7: 2f:c5:c0:92:b6:90:ef:b6:cf:ee:58:c8:3a:15:23:7e:76:60: a5:ef:37:01:61:ef:78:6e:b9:e1:61:72:8f:d2:ae:59:68:44: b8:e5:ff:c1:35:13:c3:3b:38:6a:8f:d1:93:6e:2b:a1:b4:d2: da:f5:fa:2b:0b:29:ad:34:6e:05:a5:39:da:18:8b:51:a0:9f: c2:71:00:d3:38:d3:2b:76:f0:d3:d6:43:10:40:24:3f:78:9a: e3:4c:84:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpWwDdRJJbBJvquQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MmFjZDU4YjUtOGI3OS00NjJmLWI0ZjgtN2M2YTQ4YWNlZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMiOza6z3UKeycUhD07+yAMkdSlWtPDJNhtN /Z+3JqVPsraZrqQJvGwT5iwwBWSrGWusLkxMHiDvqPUZhr6tQpzEbHl9/5T7cn85 JJ09rJdS/FWddqGQ8aGBgYhUm2DRf1oCiQyQdZ2Ov6H7DrUcyBAcEI0QGjj7czMU DOKPMzbi9z5IASkTpEJDT0HZgSyPch6PS+CTYSd8hZO0dnaB5nqWtdT0PQn27gLB yuhcBUV+hi5ZnmNYL86dpzwrr0jbCk44NWILJp4s5HwrrSgIaS3dDMfIqNxqieUl /1OURAI+0izXNmfFrdK8cAs2iQ0BUReFiCv7BKcjdjA2in9EEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmpdcBxN7y5WVUzZG9Fou2YTc7JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODBmMWNlMTMtMmQ0My0z NjY4LWI4NzAtMGRlZDBlNWYxNWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwJUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2sLgFpA1S+piISOb8JfM0t5x6q7nxxH1S+E7Z4SKPfdEsbQIcGtcqS 8tvpGtYMOO/INgnZCA7YWajXrFuDKqi4VZtb29E8qGs7+XrUwJV3Z9rgFRBEiENX iR5XLV5iXhtHUeR1IerdJ9Tspyx+Uee+TRCIiOLboT4bjCDtzjKn3J4ASdMJ22lK A1AbxVP4NaWhtx9tSb5QvFAXxelxiFgbxy/FwJK2kO+2z+5YyDoVI352YKXvNwFh 73huueFhco/SrlloRLjl/8E1E8M7OGqP0ZNuK6G00tr1+isLKa00bgWlOdoYi1Gg n8JxANM40yt28NPWQxBAJD94muNMhJA= -----END CERTIFICATE-----Generated at Sat Jun 7 22:56:11 2025 by rpki-client