$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a86e3783-e4be-3b78-8bc1-9e2b43a9b90e.roa File: a86e3783-e4be-3b78-8bc1-9e2b43a9b90e.roa (raw, json) Hash identifier: +CtPuxv6XVsk/NbQZUkzg40VYnDLBjDZyHOABCgYuc0= Subject key identifier: B8:AB:A5:3E:41:21:96:FF:AD:8E:92:58:7D:6F:4B:81:11:6D:6D:D4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849FE1002D499947710EC2B1080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a86e3783-e4be-3b78-8bc1-9e2b43a9b90e.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 20940 IP address blocks: 23.76.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:02:d4:99:94:77:10:ec:2b:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=66e5ac7b-e3df-4604-9690-a9d260833110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5b:38:d7:fb:45:24:8c:32:92:c3:ad:e8:73: f9:6e:46:ab:4c:07:22:d5:fa:de:93:51:80:c1:01: 6a:3f:27:4b:0b:df:63:68:64:df:fe:9a:26:d3:a7: 1c:68:d3:fc:7f:62:54:ed:84:9c:50:70:f6:29:53: ec:32:34:65:33:aa:51:4e:42:88:91:9b:11:10:9c: 3a:f0:5f:d8:1e:c9:e0:9c:4a:22:40:5b:cd:4c:e6: 85:30:bb:7e:b3:7e:01:92:50:5e:7a:73:b4:db:e2: fc:f6:b4:3c:46:44:ba:67:0f:a6:a2:aa:d1:44:05: 41:b3:67:49:1d:a2:16:de:55:26:11:4e:19:d5:c2: 22:11:c0:c4:a8:3e:6c:81:c1:42:72:2f:e5:8e:4a: 94:c8:bb:2e:a9:b9:74:c9:af:f6:24:68:12:bb:a2: cb:91:96:be:72:fa:69:32:69:92:88:1d:73:a0:84: 37:89:f1:b6:d1:47:8b:c3:c4:f5:36:4a:46:85:84: a6:94:20:0f:8b:53:11:f0:93:b5:62:f7:f2:9d:f3: b0:e4:ed:cb:52:46:b3:e4:52:24:c2:43:b5:e9:fb: a7:d4:b8:04:3e:8a:47:c3:16:0c:88:bd:66:ff:f6: a1:fb:f3:bb:7f:07:a7:08:02:f0:8d:06:f3:a5:c0: 53:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AB:A5:3E:41:21:96:FF:AD:8E:92:58:7D:6F:4B:81:11:6D:6D:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a86e3783-e4be-3b78-8bc1-9e2b43a9b90e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.76.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e8:bf:7a:18:76:2d:5e:dd:75:d9:73:7c:93:4a:5f:81:f3: dd:c5:a2:3d:b0:b2:be:75:62:2b:82:bf:4b:6f:86:c8:57:01: eb:08:26:9f:19:69:c4:59:13:82:14:91:f7:1d:87:d6:f4:9e: 27:be:bf:79:07:49:a6:1e:eb:a9:0f:6f:87:a5:a3:83:4e:07: 61:e0:32:0c:fb:c0:de:5a:d0:a6:48:91:8c:e4:a4:dc:e4:2d: 3e:a7:ce:02:6d:19:5a:8a:66:2d:cf:a2:c7:47:88:b8:62:a2: 98:5f:89:15:30:3a:f0:58:07:8c:c5:22:e3:25:b6:cf:2c:03: 25:f3:37:d5:c7:d5:0c:38:26:43:c0:7d:b1:28:e2:63:45:2b: f1:16:2a:4a:40:60:4d:23:76:60:8d:93:7b:18:ac:9f:bd:bd: 8d:86:cc:05:18:b3:cc:bd:44:0b:55:a4:63:d3:9c:5c:6a:a4: 4c:84:e0:1b:fd:71:7b:1c:27:fb:12:e2:e2:c7:61:76:84:58: 19:89:17:0b:aa:c7:19:6a:62:52:97:21:fe:b4:aa:e0:60:dc: ae:2a:25:91:3e:2f:14:7f:c7:0a:68:12:25:21:b4:27:55:f8: 52:d2:5e:82:5a:2c:8e:66:66:72:7d:4e:4c:60:90:c1:fd:36: 7d:23:dc:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+EALUmZR3EOwrEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk NjZlNWFjN2ItZTNkZi00NjA0LTk2OTAtYTlkMjYwODMzMTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFs41/tFJIwyksOt6HP5bkarTAci1frek1GA wQFqPydLC99jaGTf/pom06ccaNP8f2JU7YScUHD2KVPsMjRlM6pRTkKIkZsREJw6 8F/YHsngnEoiQFvNTOaFMLt+s34BklBeenO02+L89rQ8RkS6Zw+moqrRRAVBs2dJ HaIW3lUmEU4Z1cIiEcDEqD5sgcFCci/ljkqUyLsuqbl0ya/2JGgSu6LLkZa+cvpp MmmSiB1zoIQ3ifG20UeLw8T1NkpGhYSmlCAPi1MR8JO1YvfynfOw5O3LUkaz5FIk wkO16fun1LgEPopHwxYMiL1m//ah+/O7fwenCALwjQbzpcBTxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLirpT5BIZb/rY6SWH1vS4ERbW3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTg2ZTM3ODMtZTRiZS0z Yjc4LThiYzEtOWUyYjQzYTliOTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0yTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzov3oYdi1e3XXZc3yTSl+B893Foj2wsr51YiuCv0tvhshXAesIJp8Z acRZE4IUkfcdh9b0nie+v3kHSaYe66kPb4elo4NOB2HgMgz7wN5a0KZIkYzkpNzk LT6nzgJtGVqKZi3PosdHiLhiophfiRUwOvBYB4zFIuMlts8sAyXzN9XH1Qw4JkPA fbEo4mNFK/EWKkpAYE0jdmCNk3sYrJ+9vY2GzAUYs8y9RAtVpGPTnFxqpEyE4Bv9 cXscJ/sS4uLHYXaEWBmJFwuqxxlqYlKXIf60quBg3K4qJZE+LxR/xwpoEiUhtCdV +FLSXoJaLI5mZnJ9TkxgkMH9Nn0j3Is= -----END CERTIFICATE-----Generated at Thu Jun 5 18:17:54 2025 by rpki-client