$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/836beaec-4ac1-3060-9f86-98cf929d48dc.roa File: 836beaec-4ac1-3060-9f86-98cf929d48dc.roa (raw, json) Hash identifier: ojU61m+4d1NB7qHxkVTo2QSsDbG2WR/SA0cam1eo8UY= Subject key identifier: FF:CB:A0:16:64:49:FF:39:12:AC:79:F1:05:21:DF:83:39:A2:00:3D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A03A55D8D78021908BED2C040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/836beaec-4ac1-3060-9f86-98cf929d48dc.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.5.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:5d:8d:78:02:19:08:be:d2:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=0bab9313-dd07-44ac-a502-d2363bd47245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1a:ed:e3:55:5b:5c:2a:bb:88:7c:6c:e3:50: e2:70:8d:d8:43:0f:4b:52:3a:91:dd:5d:6c:4c:2f: ec:e1:94:b6:14:96:70:e7:40:1e:92:d0:09:61:f6: 39:78:2d:c3:de:bd:e0:1f:8b:81:84:41:1d:fa:bc: 2d:26:8d:62:25:61:fe:db:98:7b:f6:28:73:7f:47: bd:ce:c5:65:5a:7c:d6:2f:ed:be:1d:19:64:ad:3e: c1:b4:ad:61:02:7b:14:20:f7:da:8e:a8:75:ef:75: 66:b7:19:22:36:08:a8:cb:e5:63:3b:88:a0:7a:4d: 08:44:21:21:15:04:04:cd:c2:63:f1:36:47:97:dc: 81:79:db:37:8a:dd:26:65:69:25:be:1b:79:40:24: 39:7a:a1:8f:01:a9:15:f2:d1:d3:07:64:ea:b8:02: e9:5c:2b:30:a9:68:9f:f7:e0:af:d1:ce:6f:85:53: d5:0e:94:d0:5d:b8:b1:63:28:47:97:f1:5b:39:ca: d8:ae:63:ef:af:50:60:13:bd:ae:6c:10:09:54:c0: 18:73:50:8c:4d:46:f4:c7:93:82:b0:b1:10:e9:73: 55:fa:57:86:3f:e7:07:8a:bc:6e:cc:47:9f:a3:15: ed:e0:5f:fb:58:11:9e:00:ee:cb:e2:2e:e5:6c:66: 7e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CB:A0:16:64:49:FF:39:12:AC:79:F1:05:21:DF:83:39:A2:00:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/836beaec-4ac1-3060-9f86-98cf929d48dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.5.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:e0:7a:23:79:e7:47:4c:87:01:df:61:bc:44:2a:76:ba:e3: 3b:0b:7f:45:6f:f9:cb:e1:2f:bb:a8:0b:37:ac:ed:d2:f8:9d: cc:7d:7e:dc:26:55:20:d5:68:37:df:ed:f5:c2:19:07:2a:7f: 72:73:e9:7d:ac:3f:74:d3:4b:ee:44:bd:c8:52:3b:cb:46:14: b3:93:d0:de:fd:40:3e:89:8a:d9:54:46:44:51:29:f2:84:88: 2d:a1:a8:21:9e:62:5d:2d:5e:f7:1e:d8:4b:05:06:8f:48:43: 80:1f:b2:9b:a7:e8:47:f3:06:26:d5:d4:a4:5d:72:b7:e3:43: 31:36:96:e8:31:8b:b5:a9:e5:d5:af:47:98:12:c7:42:81:e4: a2:86:ba:91:be:eb:20:cd:50:a1:5f:e7:01:e2:0b:f9:a6:97: 8c:4a:17:9f:d0:01:40:9a:c9:88:72:ad:10:de:10:57:ce:f5: 97:f0:89:74:ae:bf:19:95:ff:38:18:f0:12:8a:3c:83:61:16: ef:f4:d0:cc:22:bb:fd:54:7e:c1:40:7c:2f:53:5c:25:bb:4d: 74:d7:a5:80:33:2e:92:7e:45:96:81:a3:af:94:d3:9e:d0:de: ea:e6:ac:6b:63:1f:16:e2:53:b6:5d:3d:06:b4:41:23:f2:e4: a0:b1:7e:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpV2NeAIZCL7SwEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MGJhYjkzMTMtZGQwNy00NGFjLWE1MDItZDIzNjNiZDQ3MjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhrt41VbXCq7iHxs41DicI3YQw9LUjqR3V1s TC/s4ZS2FJZw50AektAJYfY5eC3D3r3gH4uBhEEd+rwtJo1iJWH+25h79ihzf0e9 zsVlWnzWL+2+HRlkrT7BtK1hAnsUIPfajqh173VmtxkiNgioy+VjO4igek0IRCEh FQQEzcJj8TZHl9yBeds3it0mZWklvht5QCQ5eqGPAakV8tHTB2TquALpXCswqWif 9+Cv0c5vhVPVDpTQXbixYyhHl/FbOcrYrmPvr1BgE72ubBAJVMAYc1CMTUb0x5OC sLEQ6XNV+leGP+cHirxuzEefoxXt4F/7WBGeAO7L4i7lbGZ+xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/LoBZkSf85Eqx58QUh34M5ogA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODM2YmVhZWMtNGFjMS0z MDYwLTlmODYtOThjZjkyOWQ0OGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjgeiN550dMhwHfYbxEKna64zsLf0Vv+cvhL7uoCzes7dL4ncx9ftwm VSDVaDff7fXCGQcqf3Jz6X2sP3TTS+5EvchSO8tGFLOT0N79QD6JitlURkRRKfKE iC2hqCGeYl0tXvce2EsFBo9IQ4Afspun6EfzBibV1KRdcrfjQzE2lugxi7Wp5dWv R5gSx0KB5KKGupG+6yDNUKFf5wHiC/mml4xKF5/QAUCayYhyrRDeEFfO9ZfwiXSu vxmV/zgY8BKKPINhFu/00Mwiu/1UfsFAfC9TXCW7TXTXpYAzLpJ+RZaBo6+U057Q 3urmrGtjHxbiU7ZdPQa0QSPy5KCxfnc= -----END CERTIFICATE-----Generated at Sat Jun 7 14:57:51 2025 by rpki-client