$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a89708f9-f6dd-39d4-b67f-98ba8899950c.roa File: a89708f9-f6dd-39d4-b67f-98ba8899950c.roa (raw, json) Hash identifier: ERWleWuOPq4kp7cx9sd3nFXbRcbfwJ/3jVEIfEkXFmA= Subject key identifier: 50:BC:4C:AD:7C:15:C5:49:1F:97:71:E3:1D:7D:B0:AB:97:CB:A7:85 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A03A55CE568D196F1ED965D20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a89708f9-f6dd-39d4-b67f-98ba8899950c.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.3.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:5c:e5:68:d1:96:f1:ed:96:5d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=c1058743-ba76-4774-a1f0-439f65ecb108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:45:ff:de:35:bf:bf:15:5a:d8:0f:e6:6e:62: e5:ab:08:79:bf:85:92:9f:79:bb:69:bc:00:f9:e2: a8:a5:ac:ff:c2:73:24:8a:54:c6:06:a9:a1:47:d8: cd:22:8c:3d:e4:4f:1d:a3:b0:22:77:91:2b:6a:b7: e7:bb:af:b9:09:1a:70:52:c3:3d:7f:f8:d9:02:e5: 70:a9:f7:1c:28:18:3e:d6:ff:08:33:92:76:5a:f3: 61:b8:af:a0:7f:ca:27:cc:84:93:db:9c:b6:40:3c: 85:75:5f:42:5c:7d:c7:61:6a:32:89:e2:7f:0b:ee: 96:12:0c:6c:3e:18:09:31:df:36:78:7c:3c:ca:c8: a9:20:33:40:63:68:f8:e4:1b:da:73:0e:77:55:0b: f6:a7:f1:1b:b0:fe:77:45:9b:30:80:20:d0:17:44: 94:54:ae:a7:b3:e6:74:da:20:89:f6:d9:2a:d2:b3: d9:41:65:a3:e9:a4:39:ef:2f:ef:ec:98:9a:78:01: f8:b0:e6:0c:7d:2d:4d:50:e6:15:5d:06:e6:11:81: 86:f5:52:06:ca:47:00:eb:0f:6e:ac:e7:f2:69:c5: 0c:2a:19:dc:43:0e:f0:29:1f:1f:7b:ce:8a:7d:98: 79:21:d6:da:20:81:c7:c5:83:a9:77:63:d2:c2:d2: e8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BC:4C:AD:7C:15:C5:49:1F:97:71:E3:1D:7D:B0:AB:97:CB:A7:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a89708f9-f6dd-39d4-b67f-98ba8899950c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:c5:c2:71:8c:c8:f9:ff:fb:f2:19:79:7b:32:a0:1e:86:13: d1:a1:65:6c:33:67:ea:e0:d5:e3:4c:d2:00:42:cd:4e:31:1e: b1:41:a4:87:80:55:f0:31:9c:dc:ff:fd:9c:ba:ae:49:6f:1f: 7e:3a:1e:68:61:80:ee:a6:4f:f3:12:73:fb:c1:bf:c8:19:3c: 5f:bd:e2:e4:4e:0e:ac:3c:7f:ba:e3:de:4b:f8:b4:97:c0:4a: e2:ac:ba:08:1a:a4:be:03:49:35:f0:1e:c9:c9:c7:26:89:de: 95:cc:04:39:83:1e:36:20:b5:2b:be:33:cd:06:a2:b2:8b:11: 4d:22:25:f9:14:4e:0f:54:44:fd:c4:f0:6d:99:5c:e1:70:f8: d7:4a:d6:08:f4:23:56:46:b3:05:68:8e:3f:c8:2e:b9:05:7a: 79:0f:67:a0:11:1e:d6:5b:e3:bb:4b:56:d7:9d:47:34:3d:ec: 53:97:4e:ac:d4:05:09:4d:f2:70:06:ba:4b:a0:fe:e5:74:c6: 3c:74:d7:d3:d9:5e:f0:ec:a0:1c:04:b9:0f:cb:41:6f:22:00: 7f:43:ae:ba:3c:c5:f5:d9:c5:f7:83:ea:19:b0:74:de:9d:d7: a0:c3:5a:d8:38:3f:ec:c3:49:61:0f:c1:8b:35:10:df:15:e8: b9:a8:ae:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpVzlaNGW8e2WXSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk YzEwNTg3NDMtYmE3Ni00Nzc0LWExZjAtNDM5ZjY1ZWNiMTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkX/3jW/vxVa2A/mbmLlqwh5v4WSn3m7abwA +eKopaz/wnMkilTGBqmhR9jNIow95E8do7Aid5Erarfnu6+5CRpwUsM9f/jZAuVw qfccKBg+1v8IM5J2WvNhuK+gf8onzIST25y2QDyFdV9CXH3HYWoyieJ/C+6WEgxs PhgJMd82eHw8ysipIDNAY2j45Bvacw53VQv2p/EbsP53RZswgCDQF0SUVK6ns+Z0 2iCJ9tkq0rPZQWWj6aQ57y/v7JiaeAH4sOYMfS1NUOYVXQbmEYGG9VIGykcA6w9u rOfyacUMKhncQw7wKR8fe86KfZh5IdbaIIHHxYOpd2PSwtLoRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFC8TK18FcVJH5dx4x19sKuXy6eFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTg5NzA4ZjktZjZkZC0z OWQ0LWI2N2YtOThiYTg4OTk5NTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwNZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXFwnGMyPn/+/IZeXsyoB6GE9GhZWwzZ+rg1eNM0gBCzU4xHrFBpIeA VfAxnNz//Zy6rklvH346HmhhgO6mT/MSc/vBv8gZPF+94uRODqw8f7rj3kv4tJfA SuKsuggapL4DSTXwHsnJxyaJ3pXMBDmDHjYgtSu+M80GorKLEU0iJfkUTg9URP3E 8G2ZXOFw+NdK1gj0I1ZGswVojj/ILrkFenkPZ6ARHtZb47tLVtedRzQ97FOXTqzU BQlN8nAGukug/uV0xjx019PZXvDsoBwEuQ/LQW8iAH9Drro8xfXZxfeD6hmwdN6d 16DDWtg4P+zDSWEPwYs1EN8V6Lmorv8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:26:00 2025 by rpki-client