$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0a24279-1b7c-306f-b8cf-760136f324fe.roa File: a0a24279-1b7c-306f-b8cf-760136f324fe.roa (raw, json) Hash identifier: VIMYF22WO+LarhzcJ2FsIM8w2xue5WZlaP5mMe46WY8= Subject key identifier: 25:73:FA:1D:18:F2:3A:50:36:D7:D4:20:51:B2:30:E3:1D:B5:F7:99 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A03A55C47A7DB5091638C46E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0a24279-1b7c-306f-b8cf-760136f324fe.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.2.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:5c:47:a7:db:50:91:63:8c:46:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=162806b0-8b73-4b1c-9ad0-038e5ffc35e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:34:2c:b6:2e:a2:04:79:11:d5:cc:8c:b0:15: 67:53:11:56:19:9b:ca:a1:41:42:18:99:bf:3b:38: 24:5e:20:35:6f:e6:cf:72:3c:22:0a:c8:1d:94:c2: 7c:33:5b:cb:36:91:ec:59:14:5d:9a:e7:ca:58:59: a1:24:b3:1f:b9:e4:04:20:2b:87:d7:fe:56:28:c5: ec:87:83:c3:26:04:f1:60:c8:bd:a5:50:d1:7d:4c: 8c:00:e6:b3:b3:1a:89:dc:a3:f6:cc:8f:b2:a0:62: eb:0e:83:53:f8:c6:85:e8:0e:b6:ab:dc:24:ee:a7: 13:10:8b:b5:53:d0:a8:5b:f1:11:61:28:08:9a:4b: 7f:e3:cf:a4:25:1a:d1:c6:8d:5b:3a:a5:b8:2d:fb: c1:96:38:c2:58:99:e9:b8:75:d5:21:97:0a:84:55: a9:2b:6e:cb:ad:59:79:af:70:13:53:20:96:c5:c9: de:61:46:96:b9:04:8e:72:70:b9:78:fb:df:b7:dc: 30:78:d2:7e:88:2b:dd:a6:ad:0b:86:c0:44:07:44: 1f:f2:d7:cd:44:75:b9:d4:c0:99:9a:74:26:3f:7e: 2f:2f:fa:f7:96:cc:f1:d7:e5:5c:7d:67:58:fb:f5: 50:2b:1e:e7:5b:c6:e9:27:85:be:45:ad:28:bc:82: 16:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:73:FA:1D:18:F2:3A:50:36:D7:D4:20:51:B2:30:E3:1D:B5:F7:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0a24279-1b7c-306f-b8cf-760136f324fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.2.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f6:68:4e:c9:95:72:ff:f5:b8:71:4f:cf:33:32:ee:08:bc: 2c:63:f2:63:1d:1f:6e:f9:a5:0f:97:e2:cb:3e:52:b7:cd:69: 26:df:64:24:9e:3c:22:eb:c6:5b:39:d6:e8:82:18:2b:d8:99: 18:f9:fb:89:df:e2:55:72:a4:84:9c:df:2e:d4:bc:37:40:fb: f5:bc:4c:34:09:7a:69:8f:41:38:72:a8:1c:0a:26:6c:fe:3c: ed:b0:51:1f:9c:4d:40:2d:ed:e6:5f:83:7c:31:db:c9:53:a1: d3:f0:23:f9:da:18:fd:b6:f3:7c:c6:bd:74:2a:59:e0:d1:f9: 9a:f2:5c:59:20:13:d1:ba:34:b8:e9:87:a1:4c:22:b5:31:54: bd:98:d3:de:71:dd:0e:e2:d6:5c:76:09:e3:f1:45:1c:3c:44: e0:cb:12:17:8a:13:a1:35:0e:5e:96:ca:e1:60:36:e8:dc:99: 9c:5b:0f:25:b6:1b:92:4f:56:c4:5a:4a:7f:0b:b9:c7:2b:65: 2d:55:45:44:a1:fb:f0:cf:6b:fb:a4:5e:26:cd:1f:ef:9e:ae: 3e:81:0f:d7:e6:16:b0:e3:b8:90:2f:7e:6e:1e:49:7c:20:d0: fa:8b:6c:e2:4e:56:1f:26:ef:86:26:77:df:e9:89:72:31:f0: 64:a1:d4:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpVxHp9tQkWOMRuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MTYyODA2YjAtOGI3My00YjFjLTlhZDAtMDM4ZTVmZmMzNWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DQsti6iBHkR1cyMsBVnUxFWGZvKoUFCGJm/ OzgkXiA1b+bPcjwiCsgdlMJ8M1vLNpHsWRRdmufKWFmhJLMfueQEICuH1/5WKMXs h4PDJgTxYMi9pVDRfUyMAOazsxqJ3KP2zI+yoGLrDoNT+MaF6A62q9wk7qcTEIu1 U9CoW/ERYSgImkt/48+kJRrRxo1bOqW4LfvBljjCWJnpuHXVIZcKhFWpK27LrVl5 r3ATUyCWxcneYUaWuQSOcnC5ePvft9wweNJ+iCvdpq0LhsBEB0Qf8tfNRHW51MCZ mnQmP34vL/r3lszx1+VcfWdY+/VQKx7nW8bpJ4W+Ra0ovIIWwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVz+h0Y8jpQNtfUIFGyMOMdtfeZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTBhMjQyNzktMWI3Yy0z MDZmLWI4Y2YtNzYwMTM2ZjMyNGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwISMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX2aE7JlXL/9bhxT88zMu4IvCxj8mMdH275pQ+X4ss+UrfNaSbfZCSe PCLrxls51uiCGCvYmRj5+4nf4lVypISc3y7UvDdA+/W8TDQJemmPQThyqBwKJmz+ PO2wUR+cTUAt7eZfg3wx28lTodPwI/naGP2283zGvXQqWeDR+ZryXFkgE9G6NLjp h6FMIrUxVL2Y095x3Q7i1lx2CePxRRw8RODLEheKE6E1Dl6WyuFgNujcmZxbDyW2 G5JPVsRaSn8LuccrZS1VRUSh+/DPa/ukXibNH++erj6BD9fmFrDjuJAvfm4eSXwg 0PqLbOJOVh8m74Ymd9/piXIx8GSh1AM= -----END CERTIFICATE-----Generated at Thu Jun 5 18:16:05 2025 by rpki-client