$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1fa73cb-5685-32ce-9338-5981442ff18c.roa File: b1fa73cb-5685-32ce-9338-5981442ff18c.roa (raw, json) Hash identifier: /1ZVCB66vzgXlYR83CTzEUDdOG4GZC1lV6Ep1nsP9B8= Subject key identifier: C2:2A:9D:2A:3A:D0:7D:71:38:88:27:A7:07:1D:02:99:13:A0:9E:4A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849FE100676CFD55CA7C0CE0D40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1fa73cb-5685-32ce-9338-5981442ff18c.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 20940 IP address blocks: 23.72.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:06:76:cf:d5:5c:a7:c0:ce:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=085aafa1-95e9-4871-acdc-32897061dc2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:67:18:42:c5:94:76:a5:5c:65:da:16:08:95: 65:96:6b:d1:3c:77:ef:78:7c:86:23:a5:f3:49:39: 7c:fd:2c:7b:27:3d:e9:55:ff:14:97:af:a0:b5:18: d5:e4:ab:91:ad:48:41:53:bf:37:90:66:ad:bd:83: 85:b6:6b:d6:74:e7:2d:b6:21:cd:da:f0:5e:76:0f: ea:37:5d:72:59:3b:ce:18:78:e3:b7:72:82:07:75: 06:01:bc:83:98:47:17:24:11:93:ac:82:cb:41:7a: 96:ca:a2:f3:2e:46:48:01:c7:c0:5f:26:41:6b:15: 80:2c:2c:3e:b6:91:e3:ac:04:e3:03:c2:a6:19:75: d4:37:14:04:5d:f7:e5:ea:7c:d4:3e:e3:61:35:73: c1:51:c2:29:31:c0:50:b3:76:cd:0e:d2:61:8e:f7: 7d:f3:27:d6:28:dd:c1:bd:37:74:0f:23:8a:2f:c2: 4f:2b:c2:f3:d7:01:fb:4f:d7:8f:19:51:78:31:bf: 4b:56:38:a2:3f:46:83:62:d4:a2:25:56:11:06:4e: d1:22:35:30:c9:a6:c0:a7:3e:22:5c:2c:10:92:e2: 1b:a5:30:98:4c:e5:53:e4:98:5f:2d:21:d8:74:58: a0:21:9e:29:c8:d7:c5:13:60:7e:a8:73:62:2d:77: f5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2A:9D:2A:3A:D0:7D:71:38:88:27:A7:07:1D:02:99:13:A0:9E:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1fa73cb-5685-32ce-9338-5981442ff18c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.72.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:8f:04:88:53:d9:0b:c9:47:bf:19:9e:f5:a9:37:ea:55:89: 5f:20:5c:fc:82:56:a1:3b:c1:e9:f2:49:c4:82:7f:3b:4c:10: 24:f0:d1:92:a5:52:64:ce:1d:5f:1c:be:f2:fd:97:3a:0e:52: 20:70:3c:a5:65:8c:18:c8:19:f8:09:00:7f:fd:16:88:14:4b: a2:cc:cc:2e:65:8b:34:b8:a2:3f:76:be:36:c4:00:4e:90:c1: dc:e3:18:62:a3:bf:aa:49:f2:48:89:01:bf:cf:78:1a:f0:76: 71:74:16:ba:5f:67:99:7e:28:51:df:0f:17:75:89:c0:fa:e9: 05:ad:9a:a4:d2:c0:1a:2a:c8:8a:8d:b0:cc:46:02:fa:bc:27: 01:34:9d:01:7a:61:e7:e8:f4:2e:fc:4b:ce:39:cf:af:79:66: e8:90:4f:5e:60:83:a2:ef:2f:e3:67:3a:64:97:24:e5:99:67: e6:83:46:8b:eb:3f:7a:e9:0e:3d:b7:91:05:38:1e:e3:6a:73: fc:68:9f:18:b4:6d:c4:d4:b0:b6:2c:b3:20:1b:18:ce:33:a7: ed:16:77:f7:14:38:b4:f1:13:e1:85:7f:23:1e:25:51:b6:8b: fc:b6:35:81:88:8b:b9:dd:16:45:c6:77:bd:fc:7b:77:74:40: 95:6b:f9:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+EAZ2z9Vcp8DODUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk MDg1YWFmYTEtOTVlOS00ODcxLWFjZGMtMzI4OTcwNjFkYzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2cYQsWUdqVcZdoWCJVllmvRPHfveHyGI6Xz STl8/Sx7Jz3pVf8Ul6+gtRjV5KuRrUhBU783kGatvYOFtmvWdOcttiHN2vBedg/q N11yWTvOGHjjt3KCB3UGAbyDmEcXJBGTrILLQXqWyqLzLkZIAcfAXyZBaxWALCw+ tpHjrATjA8KmGXXUNxQEXffl6nzUPuNhNXPBUcIpMcBQs3bNDtJhjvd98yfWKN3B vTd0DyOKL8JPK8Lz1wH7T9ePGVF4Mb9LVjiiP0aDYtSiJVYRBk7RIjUwyabApz4i XCwQkuIbpTCYTOVT5JhfLSHYdFigIZ4pyNfFE2B+qHNiLXf1twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIqnSo60H1xOIgnpwcdApkToJ5KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjFmYTczY2ItNTY4NS0z MmNlLTkzMzgtNTk4MTQ0MmZmMThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0hYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2PBIhT2QvJR78ZnvWpN+pViV8gXPyCVqE7wenyScSCfztMECTw0ZKl UmTOHV8cvvL9lzoOUiBwPKVljBjIGfgJAH/9FogUS6LMzC5lizS4oj92vjbEAE6Q wdzjGGKjv6pJ8kiJAb/PeBrwdnF0FrpfZ5l+KFHfDxd1icD66QWtmqTSwBoqyIqN sMxGAvq8JwE0nQF6Yefo9C78S845z695ZuiQT15gg6LvL+NnOmSXJOWZZ+aDRovr P3rpDj23kQU4HuNqc/xonxi0bcTUsLYssyAbGM4zp+0Wd/cUOLTxE+GFfyMeJVG2 i/y2NYGIi7ndFkXGd738e3d0QJVr+Z0= -----END CERTIFICATE-----Generated at Sat Jun 7 04:46:22 2025 by rpki-client