$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c75aa0a-9d48-3b87-bf8c-d65b3151c388.roa File: 8c75aa0a-9d48-3b87-bf8c-d65b3151c388.roa (raw, json) Hash identifier: 9ajAYVvFiRryTD7b58lGjlF/4i1sickFd7YjTbvnTCU= Subject key identifier: 5D:BA:55:C9:9A:6F:67:6E:15:10:90:EC:1A:24:73:DB:4D:67:D3:4A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A03A56C59213E87B9F3873880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c75aa0a-9d48-3b87-bf8c-d65b3151c388.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 9498 IP address blocks: 23.3.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:6c:59:21:3e:87:b9:f3:87:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=f8c40e11-0f03-48d5-97db-440e1ccc21ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3a:cd:e4:3b:21:10:e3:31:12:cb:9f:85:9f: 8e:fd:5b:44:c5:66:b3:29:69:5b:ce:51:e4:1b:d5: 63:af:b8:87:45:3f:9b:ee:e9:03:6e:f0:de:e4:a8: 44:ec:93:83:b5:4b:39:1d:33:aa:d5:43:41:3d:e1: 41:1a:f6:da:dc:46:a1:fa:e0:9b:8b:6f:10:fa:0a: 1f:99:06:c8:2b:95:a5:2a:07:41:98:af:23:2e:03: 48:d6:17:73:4e:41:31:6a:f8:1d:17:3d:2e:95:77: 63:e4:b1:49:ed:d7:95:88:29:78:96:e9:00:90:4d: 39:d6:40:87:2e:e7:37:f0:3e:c6:76:95:fc:4a:61: d3:24:90:9b:d8:b1:29:c3:72:37:08:bb:f4:71:09: 3b:27:e5:80:dd:d7:47:5b:81:c7:8d:63:4f:89:29: 2f:7e:dd:23:f9:55:7f:5e:14:40:ea:b4:a1:23:1c: 19:b0:0a:4d:63:8f:50:68:e5:dc:e8:56:e0:97:0f: 59:19:1e:0f:51:aa:f4:f0:5a:ee:8d:88:cc:da:5f: 92:af:ba:84:bd:f6:f5:4b:23:93:fb:cb:e6:e2:34: 3d:5f:9b:d3:9a:88:04:b7:b4:01:91:98:bf:bc:bc: fe:27:4f:9c:59:69:59:59:68:0d:aa:e7:d1:3f:53: d5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BA:55:C9:9A:6F:67:6E:15:10:90:EC:1A:24:73:DB:4D:67:D3:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c75aa0a-9d48-3b87-bf8c-d65b3151c388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:93:be:d8:b5:5e:12:bc:f9:30:62:99:12:0b:cf:92:f1:0d: 87:d2:97:22:6c:43:06:ea:23:b3:d8:30:51:99:ad:c1:74:a0: c2:7d:2a:ec:76:cc:d6:27:c1:46:b1:51:fc:73:02:27:43:88: f1:c0:bc:bd:22:c4:dc:09:e4:c1:ad:f2:de:84:ec:a4:50:82: 37:f6:b5:7e:45:91:6d:ee:c4:a7:0a:44:31:f5:b3:65:d1:6e: 91:51:ed:f5:22:64:31:94:ba:92:c4:1d:cd:4b:e8:18:5e:e4: 71:d8:a2:d4:1d:ff:c2:4a:ef:89:e2:78:4a:ac:9d:eb:a4:16: be:0c:47:11:65:02:d8:8b:60:97:58:e4:31:8d:db:81:01:fc: 54:7f:fd:24:c3:bd:b9:6d:70:38:13:0c:25:f7:d6:de:49:3d: 74:0a:37:5c:8e:c6:96:91:42:fe:c0:21:8b:c0:57:62:b7:65: 3c:92:f2:66:1f:3d:6f:ac:57:68:95:6e:75:99:e8:36:b5:a5: a9:23:1b:b4:29:e5:96:7d:3d:5e:ac:07:74:78:e1:23:d9:43: a6:07:bb:6c:fa:f7:ec:21:c5:43:2d:36:48:d2:47:fc:cf:92: d5:b4:29:22:47:d8:22:ac:2d:f8:c1:1d:28:2e:63:66:1b:c1: f9:d5:0b:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpWxZIT6HufOHOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk ZjhjNDBlMTEtMGYwMy00OGQ1LTk3ZGItNDQwZTFjY2MyMWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTrN5DshEOMxEsufhZ+O/VtExWazKWlbzlHk G9Vjr7iHRT+b7ukDbvDe5KhE7JODtUs5HTOq1UNBPeFBGvba3Eah+uCbi28Q+gof mQbIK5WlKgdBmK8jLgNI1hdzTkExavgdFz0ulXdj5LFJ7deViCl4lukAkE051kCH Luc38D7GdpX8SmHTJJCb2LEpw3I3CLv0cQk7J+WA3ddHW4HHjWNPiSkvft0j+VV/ XhRA6rShIxwZsApNY49QaOXc6Fbglw9ZGR4PUar08FrujYjM2l+Sr7qEvfb1SyOT +8vm4jQ9X5vTmogEt7QBkZi/vLz+J0+cWWlZWWgNqufRP1PVwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF26Vcmab2duFRCQ7Bokc9tNZ9NKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGM3NWFhMGEtOWQ0OC0z Yjg3LWJmOGMtZDY1YjMxNTFjMzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwNGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuTvti1XhK8+TBimRILz5LxDYfSlyJsQwbqI7PYMFGZrcF0oMJ9Kux2 zNYnwUaxUfxzAidDiPHAvL0ixNwJ5MGt8t6E7KRQgjf2tX5FkW3uxKcKRDH1s2XR bpFR7fUiZDGUupLEHc1L6Bhe5HHYotQd/8JK74nieEqsneukFr4MRxFlAtiLYJdY 5DGN24EB/FR//STDvbltcDgTDCX31t5JPXQKN1yOxpaRQv7AIYvAV2K3ZTyS8mYf PW+sV2iVbnWZ6Da1pakjG7Qp5ZZ9PV6sB3R44SPZQ6YHu2z69+whxUMtNkjSR/zP ktW0KSJH2CKsLfjBHSguY2YbwfnVC3s= -----END CERTIFICATE-----Generated at Sat Jun 7 13:52:54 2025 by rpki-client