$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86ae2dd1-46c9-31f2-b936-fa9f23c454d5.roa File: 86ae2dd1-46c9-31f2-b936-fa9f23c454d5.roa (raw, json) Hash identifier: S93bruz+mSge421j5NvPlad5Z8CdUQuQHSVND1s7i2s= Subject key identifier: 67:68:C9:BF:5E:BC:51:D4:52:07:51:A3:3B:08:91:83:9D:81:E3:F3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A03A56B064D10ED5E668838D0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86ae2dd1-46c9-31f2-b936-fa9f23c454d5.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.0.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:6b:06:4d:10:ed:5e:66:88:38:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=1b4ffc21-f3e2-40c1-90d2-4c3515cf0222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c0:78:90:70:a7:20:bb:aa:cd:bb:79:68:0b: 04:99:a5:36:f3:e5:ac:57:2f:8e:62:40:07:94:da: 7e:34:0b:1e:30:e8:2d:4b:9b:e6:ba:f4:46:25:c8: db:e9:50:8c:e6:0c:7c:e5:66:3f:d4:97:21:3b:67: 53:e0:fb:d1:45:5c:a1:8d:17:7b:9d:b1:58:df:33: 6a:83:39:28:4d:0b:13:bd:0f:7f:60:f6:4f:f5:03: e9:26:c2:80:a0:8e:c4:80:dd:31:76:68:f0:8a:ce: b2:d1:d9:65:2c:f3:5e:db:66:ad:da:48:f4:ca:34: 86:88:d4:bf:52:74:14:f4:77:0e:bc:c7:44:21:36: ca:c4:d9:b2:bb:e9:e4:7e:bf:c9:23:bb:bf:8d:0c: fc:10:c1:bb:d4:3d:aa:21:0c:15:29:e7:19:2a:4e: ad:ff:fe:8f:87:1a:80:91:06:2f:97:fd:1b:84:59: 1b:22:1f:86:2a:7b:25:ee:87:da:ad:f6:ce:6b:4a: c7:50:cb:93:df:62:35:5b:47:85:98:f4:a3:d2:8a: 04:e5:af:69:9e:3a:40:30:65:8d:94:10:dd:d4:e8: 27:01:01:c1:43:b6:ec:30:61:d1:fc:ab:08:b2:a8: 92:71:8a:c7:21:c7:fc:19:7c:51:23:9b:15:c4:d3: 17:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:68:C9:BF:5E:BC:51:D4:52:07:51:A3:3B:08:91:83:9D:81:E3:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86ae2dd1-46c9-31f2-b936-fa9f23c454d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.0.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:9b:58:b8:15:8f:18:54:63:02:60:5a:fa:72:0e:c4:2f:17: f7:28:06:8e:84:ed:4c:15:bd:bc:52:58:1c:f8:0d:fb:48:35: ae:e3:99:1c:c7:65:c7:1d:5e:4b:24:15:80:f2:9c:82:65:1c: af:1c:a7:95:70:33:9d:ae:2a:36:95:df:5f:3a:c6:48:41:59: 63:3f:71:ef:e0:64:33:79:72:8c:33:36:35:2d:21:35:74:f1: f0:66:f7:50:69:e7:0a:4d:a1:71:ea:f3:f7:d2:96:96:62:3d: 65:eb:e2:8f:34:2e:3c:2c:25:0d:4d:73:bf:dd:ae:7a:17:fc: 09:a2:65:04:30:ea:fd:4a:c8:48:8b:fa:51:8d:eb:67:8e:9a: 04:9a:33:1a:84:b4:72:ea:31:2b:cc:51:76:44:9a:96:57:e5: be:05:7b:09:92:99:a9:7f:13:6f:f2:dd:1f:7d:41:37:b3:7f: d5:e8:88:42:8d:c5:c1:36:39:9d:c4:b3:71:34:bf:0f:a0:fd: 73:58:81:f6:3f:e7:41:69:5b:4d:31:e7:77:fd:3a:87:ab:9e: 5e:f9:d1:9d:b4:90:93:c3:2a:30:f1:b8:b5:2a:8f:2a:ac:5d: bd:cf:74:0d:56:17:8d:b3:0b:9c:42:59:39:3d:03:cf:22:bc: 48:39:cd:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpWsGTRDtXmaIONAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MWI0ZmZjMjEtZjNlMi00MGMxLTkwZDItNGMzNTE1Y2YwMjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMB4kHCnILuqzbt5aAsEmaU28+WsVy+OYkAH lNp+NAseMOgtS5vmuvRGJcjb6VCM5gx85WY/1JchO2dT4PvRRVyhjRd7nbFY3zNq gzkoTQsTvQ9/YPZP9QPpJsKAoI7EgN0xdmjwis6y0dllLPNe22at2kj0yjSGiNS/ UnQU9HcOvMdEITbKxNmyu+nkfr/JI7u/jQz8EMG71D2qIQwVKecZKk6t//6PhxqA kQYvl/0bhFkbIh+GKnsl7ofarfbOa0rHUMuT32I1W0eFmPSj0ooE5a9pnjpAMGWN lBDd1OgnAQHBQ7bsMGHR/KsIsqiScYrHIcf8GXxRI5sVxNMXbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdoyb9evFHUUgdRozsIkYOdgePzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODZhZTJkZDEtNDZjOS0z MWYyLWI5MzYtZmE5ZjIzYzQ1NGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAibWLgVjxhUYwJgWvpyDsQvF/coBo6E7UwVvbxSWBz4DftINa7jmRzH ZccdXkskFYDynIJlHK8cp5VwM52uKjaV3186xkhBWWM/ce/gZDN5cowzNjUtITV0 8fBm91Bp5wpNoXHq8/fSlpZiPWXr4o80LjwsJQ1Nc7/drnoX/AmiZQQw6v1KyEiL +lGN62eOmgSaMxqEtHLqMSvMUXZEmpZX5b4FewmSmal/E2/y3R99QTezf9XoiEKN xcE2OZ3Es3E0vw+g/XNYgfY/50FpW00x53f9Ooernl750Z20kJPDKjDxuLUqjyqs Xb3PdA1WF42zC5xCWTk9A88ivEg5zSY= -----END CERTIFICATE-----Generated at Sat Jun 7 22:59:14 2025 by rpki-client