$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89afa793-4e1b-338b-8d16-78d6b96f5ae2.roa File: 89afa793-4e1b-338b-8d16-78d6b96f5ae2.roa (raw, json) Hash identifier: XXrT/AxqQoMPq3mE7chkdYC1pR32d5ErHhXOzDT1X3g= Subject key identifier: 79:B1:10:1E:94:09:B2:7B:9E:21:BA:6B:73:0C:4C:88:E2:72:F9:61 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A07D5438BFC80D0B02BCC6E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89afa793-4e1b-338b-8d16-78d6b96f5ae2.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.0.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:43:8b:fc:80:d0:b0:2b:cc:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=535d37c4-6eb2-4f03-84ef-f5491f982b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2e:d7:4e:6c:b5:68:05:0a:9e:3e:89:3c:d7: 50:14:35:b7:5b:c7:3c:92:b4:de:b3:78:e5:32:0f: 30:da:9d:e2:ab:bd:07:c1:d4:bf:0d:0b:42:a0:48: d3:48:6b:aa:06:a0:97:c6:dc:c3:17:11:ce:05:84: 74:4a:fc:4e:71:5c:64:10:79:ef:34:88:af:f5:1c: 7d:83:19:88:53:23:76:df:f7:da:17:dc:65:79:12: ca:09:88:26:a6:7e:0a:15:ed:3c:99:1f:0f:2f:a8: 04:11:10:e4:77:bf:cf:91:26:37:af:8a:77:13:25: 0e:c9:cd:c1:62:45:64:6e:dc:96:c6:31:c7:19:39: f1:ca:59:51:91:01:3c:27:f0:5b:d1:dd:93:44:99: c0:62:76:3c:1d:8e:6c:bc:c6:bc:49:ec:d3:f6:2d: 39:1d:40:cb:3b:fa:ab:6a:b1:25:65:5b:1b:18:1f: 30:95:6b:61:ba:69:23:e3:01:ab:bd:11:15:17:31: 3d:fb:a2:81:d0:ba:df:45:19:ff:61:16:c3:6a:54: cc:31:ae:10:8d:27:ba:f9:de:1a:a2:d8:d1:c5:19: 76:56:c5:32:70:33:5a:cc:a2:ae:08:31:70:2c:da: b1:0d:9c:00:fd:86:33:8b:d1:06:cd:1f:25:78:99: 08:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B1:10:1E:94:09:B2:7B:9E:21:BA:6B:73:0C:4C:88:E2:72:F9:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89afa793-4e1b-338b-8d16-78d6b96f5ae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.0.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d1:69:ad:9c:67:2e:d1:14:17:34:f4:f2:42:c6:8f:5f:bc: d4:ab:64:5a:5d:2a:cb:77:df:24:24:c0:a1:75:9e:ec:33:d3: 7d:57:df:a2:e4:47:83:cf:9c:14:62:37:0b:cb:5c:ac:90:3e: 86:76:b4:c0:ce:ab:10:dd:b2:f0:e2:69:f9:97:20:22:02:f7: 51:c0:d2:57:71:15:c9:92:85:ab:64:16:fb:13:c4:6a:fc:15: 3a:51:04:49:e8:1c:2a:7a:ab:12:cf:b2:89:ab:09:cd:6f:74: f7:64:40:c9:76:60:b2:ee:a0:e4:bd:91:7f:ed:d0:16:b4:b6: 8b:c9:63:66:4e:90:4b:b8:be:8b:38:fc:48:ce:1b:4c:35:7a: a7:5b:87:4e:73:73:c0:5a:63:2e:94:ae:0e:57:53:1b:f0:79: 73:20:98:c3:b8:c6:9c:b5:0e:23:b6:1c:31:78:a5:6a:a7:e4: b6:69:8b:e5:74:22:9c:99:82:da:bb:a0:8f:4b:c5:78:5e:87: 4e:3a:17:56:ef:a1:df:a5:40:29:a4:6b:8a:13:93:26:9a:03: 42:72:65:77:ef:22:79:79:10:2b:27:9c:3d:39:bf:ee:fc:d7: 5b:1c:8d:6a:bc:18:99:03:33:c6:72:ec:f4:77:7f:ba:5c:b7: 03:5b:54:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1UOL/IDQsCvMboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk NTM1ZDM3YzQtNmViMi00ZjAzLTg0ZWYtZjU0OTFmOTgyYjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS7XTmy1aAUKnj6JPNdQFDW3W8c8krTes3jl Mg8w2p3iq70HwdS/DQtCoEjTSGuqBqCXxtzDFxHOBYR0SvxOcVxkEHnvNIiv9Rx9 gxmIUyN23/faF9xleRLKCYgmpn4KFe08mR8PL6gEERDkd7/PkSY3r4p3EyUOyc3B YkVkbtyWxjHHGTnxyllRkQE8J/Bb0d2TRJnAYnY8HY5svMa8SezT9i05HUDLO/qr arElZVsbGB8wlWthumkj4wGrvREVFzE9+6KB0LrfRRn/YRbDalTMMa4QjSe6+d4a otjRxRl2VsUycDNazKKuCDFwLNqxDZwA/YYzi9EGzR8leJkIiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmxEB6UCbJ7niG6a3MMTIjicvlhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODlhZmE3OTMtNGUxYi0z MzhiLThkMTYtNzhkNmI5NmY1YWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrRaa2cZy7RFBc09PJCxo9fvNSrZFpdKst33yQkwKF1nuwz031X36Lk R4PPnBRiNwvLXKyQPoZ2tMDOqxDdsvDiafmXICIC91HA0ldxFcmShatkFvsTxGr8 FTpRBEnoHCp6qxLPsomrCc1vdPdkQMl2YLLuoOS9kX/t0Ba0tovJY2ZOkEu4vos4 /EjOG0w1eqdbh05zc8BaYy6Urg5XUxvweXMgmMO4xpy1DiO2HDF4pWqn5LZpi+V0 IpyZgtq7oI9LxXheh046F1bvod+lQCmka4oTkyaaA0JyZXfvInl5ECsnnD05v+78 11scjWq8GJkDM8Zy7PR3f7pctwNbVJE= -----END CERTIFICATE-----Generated at Sat Jun 7 14:51:20 2025 by rpki-client