$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/885f8979-6046-3f0b-bba6-09d9fa075325.roa File: 885f8979-6046-3f0b-bba6-09d9fa075325.roa (raw, json) Hash identifier: HN6XwomVMdGSX9Af1uWl5pveZMVW0/BNdMk0+frNcOI= Subject key identifier: A6:A4:ED:3B:50:6E:BA:51:7A:50:C3:47:EE:D0:8A:D5:11:67:CE:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F2E54DCE1ABE50E6A62CE700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/885f8979-6046-3f0b-bba6-09d9fa075325.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.65.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:4d:ce:1a:be:50:e6:a6:2c:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=d5e92a50-b93e-44ce-a98d-b8850b24873b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4e:16:33:7f:de:2a:0b:40:72:02:37:85:18: 04:52:70:d6:7e:9b:c6:df:fb:05:82:4a:b2:35:10: 6a:d1:a7:4e:b3:7d:6c:40:68:01:00:c9:fe:3a:60: e2:8b:1c:16:a8:98:c5:ab:49:9b:dd:cc:ab:bf:1d: 21:60:85:b0:54:d7:6a:c7:74:cc:f9:62:68:1b:b9: 0a:fb:67:f1:ab:f0:24:77:0a:55:2f:ac:53:33:57: 1b:f8:57:07:1d:8f:d1:e0:96:b6:de:7c:9b:c0:83: a2:9a:2c:38:09:23:7f:26:33:61:3e:b7:67:66:08: 14:8e:c7:aa:b1:10:66:51:fe:32:2c:4f:e4:00:06: 31:d4:df:3a:6d:c3:ae:06:10:e7:a5:46:3d:09:3f: 7f:d7:59:8a:60:18:06:95:24:dc:0a:5c:10:80:7e: 0c:ff:a0:a3:64:04:05:af:e6:9d:e1:ed:ea:04:24: bd:9d:ac:83:ad:da:a4:b7:c1:25:eb:51:b3:4a:13: b6:14:a6:4b:c3:62:47:54:c8:f1:96:2e:d9:45:3b: 74:84:90:5d:43:d2:dd:7e:ff:b1:f2:35:2a:cd:66: 3b:44:b8:52:cc:b7:d9:63:5e:3b:e1:45:f2:ac:92: 01:37:8e:bc:06:9f:66:f3:0a:fb:61:6e:e7:53:c7: 25:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A4:ED:3B:50:6E:BA:51:7A:50:C3:47:EE:D0:8A:D5:11:67:CE:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/885f8979-6046-3f0b-bba6-09d9fa075325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.65.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:69:cb:1c:91:c3:e6:66:1c:56:81:16:20:e5:96:67:f4:06: a5:cf:a8:51:35:c2:bc:a0:72:a8:b5:d2:32:ab:97:3f:10:39: 7e:34:b5:36:bf:ad:35:c3:8f:7c:f3:70:05:b0:0c:81:92:f8: 0d:3b:58:a5:68:47:6b:50:a7:51:6b:c4:af:55:cd:48:83:3f: 9d:2c:59:6a:66:9e:72:80:8d:cb:eb:2b:f2:3b:d0:c9:20:4b: 75:2c:b6:7d:2a:e0:23:ae:37:ac:7e:7f:1d:82:b3:c4:0a:85: 5f:e6:20:25:15:f5:2c:fc:c2:c0:ac:80:42:a5:9f:7f:31:1c: 3a:01:e9:3f:0e:28:68:e9:5f:bc:52:2c:25:22:bb:3d:fa:bf: 06:9a:d3:e9:78:88:30:d1:83:18:6a:6e:f2:80:2a:2f:90:2f: 93:43:d6:78:42:96:b6:c3:95:37:2b:39:dd:3d:f4:99:8d:04: dd:bb:23:a1:09:fc:99:cf:4e:ed:17:ec:19:02:9f:71:ab:8f: 3e:da:c8:4a:06:a5:02:92:85:07:ec:a1:3d:1b:6e:0a:c4:4c: fc:4c:3c:c2:a1:1f:cd:24:88:73:68:22:98:69:44:f9:81:09: 57:b2:85:bf:75:fc:98:d5:37:04:db:f9:8c:02:42:ce:1c:6e: 49:de:4d:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5U3OGr5Q5qYs5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZDVlOTJhNTAtYjkzZS00NGNlLWE5OGQtYjg4NTBiMjQ4NzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk4WM3/eKgtAcgI3hRgEUnDWfpvG3/sFgkqy NRBq0adOs31sQGgBAMn+OmDiixwWqJjFq0mb3cyrvx0hYIWwVNdqx3TM+WJoG7kK +2fxq/AkdwpVL6xTM1cb+FcHHY/R4Ja23nybwIOimiw4CSN/JjNhPrdnZggUjseq sRBmUf4yLE/kAAYx1N86bcOuBhDnpUY9CT9/11mKYBgGlSTcClwQgH4M/6CjZAQF r+ad4e3qBCS9nayDrdqkt8El61GzShO2FKZLw2JHVMjxli7ZRTt0hJBdQ9Ldfv+x 8jUqzWY7RLhSzLfZY1474UXyrJIBN468Bp9m8wr7YW7nU8clTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKak7TtQbrpRelDDR+7QitURZ84RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODg1Zjg5NzktNjA0Ni0z ZjBiLWJiYTYtMDlkOWZhMDc1MzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF0GwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRpyxyRw+ZmHFaBFiDllmf0BqXPqFE1wrygcqi10jKrlz8QOX40tTa/ rTXDj3zzcAWwDIGS+A07WKVoR2tQp1FrxK9VzUiDP50sWWpmnnKAjcvrK/I70Mkg S3Ustn0q4COuN6x+fx2Cs8QKhV/mICUV9Sz8wsCsgEKln38xHDoB6T8OKGjpX7xS LCUiuz36vwaa0+l4iDDRgxhqbvKAKi+QL5ND1nhClrbDlTcrOd099JmNBN27I6EJ /JnPTu0X7BkCn3Grjz7ayEoGpQKShQfsoT0bbgrETPxMPMKhH80kiHNoIphpRPmB CVeyhb91/JjVNwTb+YwCQs4cbkneTbE= -----END CERTIFICATE-----Generated at Sat Jun 7 15:28:39 2025 by rpki-client