$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b4cd7fbc-9065-3000-bd4e-f83a71ab0faa.roa File: b4cd7fbc-9065-3000-bd4e-f83a71ab0faa.roa (raw, json) Hash identifier: bda1XnL8WUNEGlB2iKgkNyL25inMmaQsoC4ckvXhIH4= Subject key identifier: A7:7D:DE:2F:18:8D:3C:AC:32:4F:B8:AF:4A:51:73:B1:3A:35:CC:73 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A03A56F1131FFB2AA25A4C340 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b4cd7fbc-9065-3000-bd4e-f83a71ab0faa.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.14.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:6f:11:31:ff:b2:aa:25:a4:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=68f54e7f-495e-442d-b6b4-9d2b8a741cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2e:39:c3:63:08:6d:4d:b5:3b:5d:bd:d2:86: 72:61:72:1b:99:27:20:3e:0a:31:df:0e:30:b6:5d: a9:8a:0a:90:6f:aa:09:b2:88:5d:ae:bf:fe:17:07: c3:03:70:6b:ed:c4:ae:4b:06:32:bc:30:b1:dd:3a: 49:c9:c2:9a:20:4f:65:72:5d:49:42:5a:be:28:ac: 1d:b8:ac:65:50:51:69:ef:1e:69:49:c2:7b:12:7c: f0:d4:f3:07:ec:94:e5:b4:66:58:d8:e4:6d:da:e7: f8:fd:96:ba:38:c4:6b:fe:f7:cc:a4:b7:01:5a:c4: a2:e3:a7:f6:ea:ef:44:cc:c6:c0:a1:b0:c9:b6:81: 21:8a:af:0e:84:14:03:5a:c9:21:d2:5c:b3:28:e5: 58:52:a5:5f:24:3a:f3:f6:60:c5:09:28:84:b4:23: 90:f8:95:f4:ed:70:4d:e3:af:25:52:9c:62:dd:80: d8:d8:59:e0:79:fe:e1:43:51:e3:1d:b4:e2:7c:0a: 44:19:3a:a5:78:d3:87:e0:35:41:4e:59:de:94:81: 89:95:f8:96:79:b7:6e:8c:d6:cf:3a:38:99:3f:10: fd:d5:14:90:3d:2c:cb:15:ad:5f:81:26:36:67:fd: 75:5c:ba:b6:6d:91:ea:1e:d8:f3:ae:ea:52:33:9a: c6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7D:DE:2F:18:8D:3C:AC:32:4F:B8:AF:4A:51:73:B1:3A:35:CC:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b4cd7fbc-9065-3000-bd4e-f83a71ab0faa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.14.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:b2:52:65:3e:12:9c:e4:58:66:75:0c:0b:e0:c9:05:82:d7: 3b:76:6c:55:e6:97:4f:42:27:b5:e5:16:24:47:b9:78:8e:29: 9c:5b:ae:5d:6a:7b:59:77:7f:2b:12:7b:e3:fc:84:70:36:ec: 30:b4:e4:7e:b6:2e:3f:c6:ae:0f:76:0c:2b:fa:59:cd:8b:77: 61:fc:ea:0a:d6:bb:50:09:64:72:10:66:79:8e:66:ef:b7:7d: a1:c7:a1:9b:af:0a:15:29:3f:f4:b2:1c:27:b2:a9:0a:5a:83: 9f:53:e6:c0:ec:c7:5d:0c:64:1d:95:f7:20:01:a0:4e:c7:50: 96:f0:66:be:e8:2d:f0:9e:bd:8e:65:a5:92:7c:73:3e:90:6f: 60:06:ab:74:0b:ca:31:33:6d:c3:a7:75:e1:51:58:cd:fe:09: 80:96:5d:ef:dc:a7:9e:24:d8:39:a5:66:f7:a8:89:18:28:2c: d5:b8:2f:11:55:af:76:f9:6d:81:44:d0:bf:71:79:88:fc:95: 65:f2:dd:60:4c:1a:1c:56:2f:64:5a:68:4a:e3:9a:ed:50:5b: 38:96:20:ff:42:3c:36:5d:c0:d2:ad:b2:46:b0:94:c7:a6:b2: 84:d8:a6:99:49:b8:93:f4:5e:d5:45:7e:8c:1d:bd:19:8f:b5: cd:62:06:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpW8RMf+yqiWkw0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk NjhmNTRlN2YtNDk1ZS00NDJkLWI2YjQtOWQyYjhhNzQxY2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny45w2MIbU21O1290oZyYXIbmScgPgox3w4w tl2pigqQb6oJsohdrr/+FwfDA3Br7cSuSwYyvDCx3TpJycKaIE9lcl1JQlq+KKwd uKxlUFFp7x5pScJ7Enzw1PMH7JTltGZY2ORt2uf4/Za6OMRr/vfMpLcBWsSi46f2 6u9EzMbAobDJtoEhiq8OhBQDWskh0lyzKOVYUqVfJDrz9mDFCSiEtCOQ+JX07XBN 468lUpxi3YDY2Fngef7hQ1HjHbTifApEGTqleNOH4DVBTlnelIGJlfiWebdujNbP OjiZPxD91RSQPSzLFa1fgSY2Z/11XLq2bZHqHtjzrupSM5rGIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKd93i8YjTysMk+4r0pRc7E6NcxzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjRjZDdmYmMtOTA2NS0z MDAwLWJkNGUtZjgzYTcxYWIwZmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFw5XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSyUmU+EpzkWGZ1DAvgyQWC1zt2bFXml09CJ7XlFiRHuXiOKZxbrl1q e1l3fysSe+P8hHA27DC05H62Lj/Grg92DCv6Wc2Ld2H86grWu1AJZHIQZnmOZu+3 faHHoZuvChUpP/SyHCeyqQpag59T5sDsx10MZB2V9yABoE7HUJbwZr7oLfCevY5l pZJ8cz6Qb2AGq3QLyjEzbcOndeFRWM3+CYCWXe/cp54k2DmlZveoiRgoLNW4LxFV r3b5bYFE0L9xeYj8lWXy3WBMGhxWL2RaaErjmu1QWziWIP9CPDZdwNKtskawlMem soTYpplJuJP0XtVFfowdvRmPtc1iBt0= -----END CERTIFICATE-----Generated at Fri Jun 6 16:50:26 2025 by rpki-client