$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bef42413-7565-3f07-a128-21d479d78f42.roa File: bef42413-7565-3f07-a128-21d479d78f42.roa (raw, json) Hash identifier: gsBKACowzKLVrQtINoZUycSIGz5tKHcma68Badjz8m0= Subject key identifier: DB:B3:D9:CF:E6:32:3C:C0:85:0F:93:03:D5:23:4A:5E:71:84:15:EE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A03A56B993AAEFC96907A66C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bef42413-7565-3f07-a128-21d479d78f42.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.1.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:6b:99:3a:ae:fc:96:90:7a:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=662248e9-3d52-4281-b155-4e239d716ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c4:d4:b3:c7:83:e1:38:79:a0:60:e8:bb:92: 11:ee:62:12:6d:95:32:19:70:2a:3a:33:02:6d:1c: 8a:86:95:f4:ee:1b:d1:8e:03:16:fb:4e:f7:19:e2: 61:8b:9a:46:45:b9:c6:00:63:28:a6:b8:b3:6e:94: 83:7d:5b:3e:a0:08:3a:0a:2d:e3:a3:01:b8:54:67: a9:8b:65:96:19:ef:ec:d0:2d:dd:90:28:26:05:d6: f2:69:6d:fb:8e:19:9d:57:c3:95:ae:44:2b:57:c9: 7a:ce:ef:66:5a:3b:b5:08:c7:6e:9e:79:9b:8e:b3: bf:a4:24:57:49:fa:d6:34:74:1e:31:0d:ec:6c:f9: 3d:ce:2a:2a:00:7f:9f:2f:3a:78:c5:70:f7:ab:d3: 40:43:fc:73:8a:1a:54:b6:1b:b0:73:69:7c:ca:db: 5c:99:f0:12:cf:64:9d:b6:a7:33:36:41:50:da:9b: 9c:5d:23:e1:51:1a:c0:f3:eb:20:db:f2:f5:b9:20: 7e:93:77:25:2b:cb:2a:fa:96:9c:8c:d0:69:52:dc: 50:f2:06:8e:16:f4:34:0d:1f:a5:d9:20:c1:65:fb: 3e:56:5e:64:33:49:ea:46:7b:7a:77:48:8d:10:1a: 0f:01:6b:74:56:e2:de:02:0b:48:f8:f7:df:fa:67: 8e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B3:D9:CF:E6:32:3C:C0:85:0F:93:03:D5:23:4A:5E:71:84:15:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bef42413-7565-3f07-a128-21d479d78f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:ef:a4:c2:f1:d5:58:67:03:7c:07:ab:f1:0e:97:4d:61:e7: 75:34:0b:17:61:41:58:3c:83:6d:61:6f:bd:91:c6:0d:c4:89: 9a:91:11:85:8c:d0:04:ac:2e:67:e1:94:61:a8:97:76:8d:8a: 31:97:e3:e2:05:01:25:c6:78:c3:ef:3e:f0:c0:8f:70:4b:4c: 9f:38:a1:43:5c:5f:ad:c6:3e:d2:6d:00:e0:6c:1e:9d:6f:e4: 96:b6:a1:70:47:f7:f1:5b:db:b4:50:dd:19:e5:91:d1:1c:99: 15:55:9d:32:e0:f0:6b:3f:ad:31:0c:33:0d:01:c6:79:d3:6a: dd:f4:94:b6:3c:96:71:eb:b8:10:2d:10:24:71:b6:9d:02:52: 5f:7f:7a:71:61:9b:d6:8e:f5:47:54:18:e2:4e:1e:73:6b:17: 13:a2:95:fd:15:bb:b9:eb:47:a6:71:14:38:f5:8f:43:69:4b: 79:6b:65:ab:d8:4f:21:e8:9c:4e:af:8f:22:be:46:39:35:de: f0:4e:0d:fe:07:2f:36:36:09:b4:34:29:f5:ad:2a:ee:52:68: c4:ca:f9:c1:63:b2:ba:a4:de:f1:f8:a3:f6:85:2c:bd:3a:b7: d2:9d:87:f9:15:4f:19:56:5a:2a:26:70:ef:ca:d1:e9:f2:49: 8a:47:8d:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpWuZOq78lpB6ZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk NjYyMjQ4ZTktM2Q1Mi00MjgxLWIxNTUtNGUyMzlkNzE2ZGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisTUs8eD4Th5oGDou5IR7mISbZUyGXAqOjMC bRyKhpX07hvRjgMW+073GeJhi5pGRbnGAGMoprizbpSDfVs+oAg6Ci3jowG4VGep i2WWGe/s0C3dkCgmBdbyaW37jhmdV8OVrkQrV8l6zu9mWju1CMdunnmbjrO/pCRX SfrWNHQeMQ3sbPk9zioqAH+fLzp4xXD3q9NAQ/xzihpUthuwc2l8yttcmfASz2Sd tqczNkFQ2pucXSPhURrA8+sg2/L1uSB+k3clK8sq+pacjNBpUtxQ8gaOFvQ0DR+l 2SDBZfs+Vl5kM0nqRnt6d0iNEBoPAWt0VuLeAgtI+Pff+meO0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuz2c/mMjzAhQ+TA9UjSl5xhBXuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmVmNDI0MTMtNzU2NS0z ZjA3LWExMjgtMjFkNDc5ZDc4ZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHvpMLx1VhnA3wHq/EOl01h53U0CxdhQVg8g21hb72Rxg3EiZqREYWM 0ASsLmfhlGGol3aNijGX4+IFASXGeMPvPvDAj3BLTJ84oUNcX63GPtJtAOBsHp1v 5Ja2oXBH9/Fb27RQ3RnlkdEcmRVVnTLg8Gs/rTEMMw0BxnnTat30lLY8lnHruBAt ECRxtp0CUl9/enFhm9aO9UdUGOJOHnNrFxOilf0Vu7nrR6ZxFDj1j0NpS3lrZavY TyHonE6vjyK+Rjk13vBODf4HLzY2CbQ0KfWtKu5SaMTK+cFjsrqk3vH4o/aFLL06 t9Kdh/kVTxlWWiomcO/K0enySYpHjVc= -----END CERTIFICATE-----Generated at Thu Jun 5 18:38:07 2025 by rpki-client