$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b9582f0-e3d8-3978-9a6b-f8c46aa076f5.roa File: 8b9582f0-e3d8-3978-9a6b-f8c46aa076f5.roa (raw, json) Hash identifier: 7Gj1kL0NKT0gV2oHQAmfME1CAs1nEU3mA+I89HL5PRI= Subject key identifier: 3C:EA:46:92:9B:F1:DA:3B:10:E0:33:7F:C6:CE:ED:09:0D:BC:70:E3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849FE10043F40EF0ACEE78D2580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b9582f0-e3d8-3978-9a6b-f8c46aa076f5.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16625 IP address blocks: 23.37.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:04:3f:40:ef:0a:ce:e7:8d:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=d05296ae-c5da-4b45-98a9-3d616c2f94ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a0:18:dd:04:3e:57:96:12:c9:55:cc:91:5b: 02:f7:09:eb:01:a0:d6:09:90:0b:ad:ed:69:ad:66: 80:af:e0:ab:58:ef:c1:74:c2:b9:27:0a:79:c1:d7: b0:d0:f5:cc:60:b4:2c:32:d8:ff:0b:9a:ab:66:ae: 72:72:a0:d5:a1:fd:92:38:ab:5a:38:a4:f8:5d:0f: 08:40:27:b7:7e:94:0a:d5:51:cd:02:c9:c8:51:6c: de:d2:36:2d:63:e5:a5:5c:82:90:34:ba:29:48:7d: 9b:4b:47:a1:14:71:b6:ce:2a:11:81:03:3e:a4:dd: ff:a6:c5:b0:7f:2b:81:2f:b7:b1:94:50:30:b3:df: ae:96:07:1b:e1:d8:03:64:38:ac:43:64:33:54:62: 65:90:5d:43:0a:84:1d:46:08:1e:02:d4:39:81:d6: ef:96:9d:11:f1:41:ab:c5:eb:c9:49:51:a7:fc:98: e6:f3:03:c2:57:10:37:c0:66:bc:ce:5c:88:12:a7: b4:66:6f:03:69:0a:8c:d0:a2:10:a1:75:fe:70:00: bb:0a:20:73:84:54:04:d9:f1:54:d6:31:58:ec:ca: a3:8c:c0:db:09:c6:33:e2:c3:a2:e6:ad:d7:50:91: 6d:f3:fc:25:1e:8e:95:39:90:ab:53:ba:5b:03:d4: f8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EA:46:92:9B:F1:DA:3B:10:E0:33:7F:C6:CE:ED:09:0D:BC:70:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b9582f0-e3d8-3978-9a6b-f8c46aa076f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.37.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:5d:9a:92:fd:7a:49:9f:60:f3:e1:73:b6:37:23:8d:1d:94: 37:97:7f:46:ad:c1:66:de:f3:e0:4d:ab:6e:ee:56:12:30:ee: 6f:57:7c:34:9e:66:82:d3:88:d6:99:44:33:09:90:1c:a6:e1: fd:8d:98:97:12:5f:94:a7:36:72:7c:37:e9:97:7a:dd:bf:4a: 80:45:c7:1a:a3:6c:a6:9f:84:7c:06:c2:0d:5d:46:93:38:93: d7:7f:b9:f2:51:de:6b:cc:d3:c4:be:2f:3c:ff:17:73:83:cd: f1:6f:29:71:d5:8f:3d:6e:96:52:dd:49:cc:77:f4:90:4b:bd: fc:ba:11:d0:05:69:10:03:a0:09:e0:ba:86:b8:a2:96:62:b4: cf:b4:d6:43:2a:9d:8e:d2:05:fc:26:3e:f9:6e:93:56:02:9f: a9:a9:71:04:24:13:b7:22:02:ca:7d:87:8f:c8:97:7f:08:2d: 84:10:58:f8:fd:d2:01:d6:52:cb:f2:9b:52:44:19:23:35:a7: 22:c4:33:1a:ab:70:ec:76:ab:40:d7:4c:55:45:0f:10:22:66: 03:bc:a9:39:3d:09:c6:a5:80:e0:3a:54:a6:3e:38:95:9f:9c: 24:8d:d9:56:ff:bc:78:3b:b8:ef:c8:11:71:cd:1f:13:5e:28: f5:99:20:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+EAQ/QO8KzueNJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk ZDA1Mjk2YWUtYzVkYS00YjQ1LTk4YTktM2Q2MTZjMmY5NGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqAY3QQ+V5YSyVXMkVsC9wnrAaDWCZALre1p rWaAr+CrWO/BdMK5Jwp5wdew0PXMYLQsMtj/C5qrZq5ycqDVof2SOKtaOKT4XQ8I QCe3fpQK1VHNAsnIUWze0jYtY+WlXIKQNLopSH2bS0ehFHG2zioRgQM+pN3/psWw fyuBL7exlFAws9+ulgcb4dgDZDisQ2QzVGJlkF1DCoQdRggeAtQ5gdbvlp0R8UGr xevJSVGn/Jjm8wPCVxA3wGa8zlyIEqe0Zm8DaQqM0KIQoXX+cAC7CiBzhFQE2fFU 1jFY7MqjjMDbCcYz4sOi5q3XUJFt8/wlHo6VOZCrU7pbA9T4TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzqRpKb8do7EOAzf8bO7QkNvHDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGI5NTgyZjAtZTNkOC0z OTc4LTlhNmItZjhjNDZhYTA3NmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyXMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpdmpL9ekmfYPPhc7Y3I40dlDeXf0atwWbe8+BNq27uVhIw7m9XfDSe ZoLTiNaZRDMJkBym4f2NmJcSX5SnNnJ8N+mXet2/SoBFxxqjbKafhHwGwg1dRpM4 k9d/ufJR3mvM08S+Lzz/F3ODzfFvKXHVjz1ullLdScx39JBLvfy6EdAFaRADoAng uoa4opZitM+01kMqnY7SBfwmPvluk1YCn6mpcQQkE7ciAsp9h4/Il38ILYQQWPj9 0gHWUsvym1JEGSM1pyLEMxqrcOx2q0DXTFVFDxAiZgO8qTk9CcalgOA6VKY+OJWf nCSN2Vb/vHg7uO/IEXHNHxNeKPWZIHU= -----END CERTIFICATE-----Generated at Sat Jun 7 13:59:12 2025 by rpki-client