$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1643706-514d-3423-85ae-9a30203af3a0.roa File: b1643706-514d-3423-85ae-9a30203af3a0.roa (raw, json) Hash identifier: gIpbvC7ObbvB5b16xZ5CfZR7W61LtpCvTDct3ske/YM= Subject key identifier: 98:6A:E1:69:02:FD:9B:43:F6:16:9F:4A:0F:16:E0:C2:B9:D2:F0:5F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A03A56CA36638E0A8272335C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1643706-514d-3423-85ae-9a30203af3a0.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.3.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:6c:a3:66:38:e0:a8:27:23:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=63d77df0-0593-4ab7-8765-58a0e55db43c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:47:c4:f6:fc:1f:29:a2:0c:31:bc:10:2d:0c: e1:f0:60:4b:85:0d:e4:80:8b:82:ae:f2:a8:b9:f8: 6c:e2:fd:b0:6e:52:4e:a9:33:b1:2e:b9:54:b4:e0: e4:65:1d:ba:e8:b1:5b:f2:17:83:91:ee:01:42:31: 61:73:2d:d7:8c:a2:26:e1:89:41:01:2c:10:22:d4: e4:94:a3:d8:ae:c8:98:45:f2:63:b7:04:7f:e2:97: 15:c2:fa:04:92:b7:63:e8:5f:4b:d6:c6:bb:1b:ca: fb:68:1b:dd:21:0b:da:f3:08:bf:d6:e1:ca:5f:93: bb:8f:ce:20:63:ef:bf:46:d7:2e:16:21:5f:da:1c: e6:15:cf:cc:78:72:ab:a9:77:94:31:42:20:f5:d1: a2:a4:8d:ff:41:74:a7:83:b8:b5:0a:bb:0c:fc:11: ae:2e:dd:00:7b:35:84:a5:fc:6a:d4:a5:56:a0:d4: e8:ab:15:a4:5f:ed:17:88:8a:cb:32:57:3b:f5:25: aa:33:34:18:2f:fa:76:82:a8:5f:7f:6c:d0:16:ed: e2:c2:3c:50:fa:ac:8f:39:84:3f:de:27:30:ba:62: b7:75:dc:0e:42:52:8d:3d:4a:2d:de:ea:d5:02:5d: fa:26:a4:08:2a:34:91:1d:4f:7d:71:cf:2e:b7:e3: 98:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6A:E1:69:02:FD:9B:43:F6:16:9F:4A:0F:16:E0:C2:B9:D2:F0:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1643706-514d-3423-85ae-9a30203af3a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:fd:34:08:69:e9:b2:66:d7:47:8c:a1:2e:aa:9e:63:29:4e: 06:15:f2:90:7c:ab:26:70:20:6c:ea:1b:5f:45:6a:36:89:01: 27:73:e5:9c:c0:15:32:7b:63:83:fb:72:1b:a0:a4:80:b7:6d: 22:2f:ab:34:7a:ca:c2:5e:4a:51:3b:8c:e4:6c:98:45:6c:4e: 18:81:21:82:5c:f6:7f:45:50:f7:4c:91:e3:e0:56:51:0d:23: ff:43:23:e4:a6:75:32:c8:ef:81:59:76:5f:ea:f7:8a:bd:30: a3:9b:88:91:29:36:da:71:2e:82:ab:83:7a:8b:5e:aa:28:bf: 50:ee:0c:d6:6a:0f:ad:5b:a8:47:5c:ec:d0:bf:89:67:03:6d: 7b:72:0f:bd:64:2f:60:c2:d7:3f:6d:58:5a:50:2a:78:06:09: a3:ec:f2:bf:4b:2a:92:8e:68:45:d6:b7:26:16:25:17:59:ae: 18:8c:a8:f4:4c:33:e4:86:7f:fe:b5:ef:43:d3:23:54:dc:2a: 92:4e:b8:3d:11:75:86:dc:ef:84:e2:17:c8:ce:f7:7f:6b:7d: 35:b4:d5:5f:c8:90:5a:31:92:e4:17:37:ea:61:63:c1:b5:61: 8d:c4:fc:32:9b:76:7e:06:c2:a6:c1:3a:d8:27:6e:5d:c6:cf: d2:86:7f:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpWyjZjjgqCcjNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk NjNkNzdkZjAtMDU5My00YWI3LTg3NjUtNThhMGU1NWRiNDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkfE9vwfKaIMMbwQLQzh8GBLhQ3kgIuCrvKo ufhs4v2wblJOqTOxLrlUtODkZR266LFb8heDke4BQjFhcy3XjKIm4YlBASwQItTk lKPYrsiYRfJjtwR/4pcVwvoEkrdj6F9L1sa7G8r7aBvdIQva8wi/1uHKX5O7j84g Y++/RtcuFiFf2hzmFc/MeHKrqXeUMUIg9dGipI3/QXSng7i1CrsM/BGuLt0AezWE pfxq1KVWoNToqxWkX+0XiIrLMlc79SWqMzQYL/p2gqhff2zQFu3iwjxQ+qyPOYQ/ 3icwumK3ddwOQlKNPUot3urVAl36JqQIKjSRHU99cc8ut+OYewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhq4WkC/ZtD9hafSg8W4MK50vBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjE2NDM3MDYtNTE0ZC0z NDIzLTg1YWUtOWEzMDIwM2FmM2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFwNaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIL9NAhp6bJm10eMoS6qnmMpTgYV8pB8qyZwIGzqG19FajaJASdz5ZzA FTJ7Y4P7chugpIC3bSIvqzR6ysJeSlE7jORsmEVsThiBIYJc9n9FUPdMkePgVlEN I/9DI+SmdTLI74FZdl/q94q9MKObiJEpNtpxLoKrg3qLXqoov1DuDNZqD61bqEdc 7NC/iWcDbXtyD71kL2DC1z9tWFpQKngGCaPs8r9LKpKOaEXWtyYWJRdZrhiMqPRM M+SGf/6170PTI1TcKpJOuD0RdYbc74TiF8jO939rfTW01V/IkFoxkuQXN+phY8G1 YY3E/DKbdn4GwqbBOtgnbl3Gz9KGfyQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:44:28 2025 by rpki-client