$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c868029c-4de2-3e1e-a537-6b6c45ee323d.roa File: c868029c-4de2-3e1e-a537-6b6c45ee323d.roa (raw, json) Hash identifier: OWf9T0BstTl6u+MSafL9fxQWvismbPIQqc0tP3jN8n0= Subject key identifier: 7B:E6:51:B2:29:24:B1:F3:04:65:AC:C3:78:DA:A8:DE:AD:E8:D7:FD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F2E551B419C99EF638B925B0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c868029c-4de2-3e1e-a537-6b6c45ee323d.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.64.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:51:b4:19:c9:9e:f6:38:b9:25:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=5f1fc559-a662-4b2c-a682-9fbc534c9205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c5:4f:17:f4:1d:41:37:f3:bf:17:88:8e:82: 73:a7:d3:86:d6:ab:c0:97:df:33:b9:d8:dc:89:11: d9:52:d9:08:e1:27:1f:78:e9:60:9e:da:a4:63:f6: d6:bf:61:7a:6a:9a:36:68:14:5c:05:27:ee:43:5b: de:9d:b3:4c:86:36:56:63:e7:41:2a:cd:14:48:50: 0f:94:89:a5:98:e2:5d:b2:3d:af:f7:ee:ea:16:6f: c8:d5:9a:32:64:0b:0d:04:48:86:21:49:03:be:86: e9:15:da:d0:61:f1:ed:cf:da:9c:33:7e:2f:a4:86: f6:fc:e2:52:24:b5:a9:28:7b:e2:1a:f7:85:33:06: 84:01:4f:a0:e0:09:e4:46:e1:8f:85:64:f5:af:82: 45:69:d1:76:e2:6a:e5:ad:ed:a4:7e:c6:1d:f7:29: 1b:3c:cb:19:1c:3a:db:69:36:72:f2:83:a5:75:71: 9a:bf:69:fb:4d:8c:62:fd:ea:13:6a:5f:20:23:06: 1f:8f:08:a6:7b:dd:a6:e3:db:06:a5:b8:51:8b:59: 6b:30:8e:d2:3e:7d:d5:66:f1:20:c8:04:4e:0e:71: 42:e1:f6:ba:86:22:fc:14:42:12:db:f1:30:f4:39: 52:64:11:90:42:7c:f8:7a:7d:82:9f:3f:e6:78:b1: 36:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E6:51:B2:29:24:B1:F3:04:65:AC:C3:78:DA:A8:DE:AD:E8:D7:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c868029c-4de2-3e1e-a537-6b6c45ee323d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.64.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:1a:19:22:14:d5:70:bd:89:e7:12:70:09:c7:fc:59:fe:df: e1:72:1c:10:5b:77:aa:f5:d0:4d:d4:88:92:86:f7:f1:68:93: 81:ae:17:92:01:b3:c4:2d:47:f4:8c:ea:98:0e:b2:92:5e:78: 81:84:8f:68:a9:74:2c:3d:86:e2:47:b5:0f:09:84:ec:ea:b6: e4:44:71:26:36:8a:b5:9c:d9:3c:db:71:63:7c:26:56:96:bb: 4b:92:09:3a:4f:4b:9c:6b:0e:42:f4:7a:8e:66:1f:99:8f:f9: eb:f1:3c:5c:ba:11:94:74:cc:76:61:d9:94:f9:05:3f:a9:5c: 7c:82:08:e6:13:ba:fc:ef:71:9c:a3:63:0f:de:44:3b:fd:3e: 8a:a3:24:c0:25:f1:5f:3b:fa:ba:1c:b8:1f:d8:ab:98:15:df: 4d:42:76:0d:cf:da:54:b2:0f:c0:c6:8c:05:a5:31:bf:04:bc: d1:ae:59:c1:55:7b:2d:c6:1f:c6:42:b0:fa:1f:68:80:31:82: 83:ab:e1:4b:59:3c:ae:89:d2:e8:f7:5d:68:76:68:ce:d5:13: 26:62:ba:27:63:9c:b2:07:94:1e:10:b0:a9:0c:10:97:72:aa: 67:7d:6d:dd:1f:95:ec:cf:10:0c:e2:60:a8:8f:e9:dc:b9:75: 01:9b:03:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5VG0Gcme9ji5JbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk NWYxZmM1NTktYTY2Mi00YjJjLWE2ODItOWZiYzUzNGM5MjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssVPF/QdQTfzvxeIjoJzp9OG1qvAl98zudjc iRHZUtkI4ScfeOlgntqkY/bWv2F6apo2aBRcBSfuQ1venbNMhjZWY+dBKs0USFAP lImlmOJdsj2v9+7qFm/I1ZoyZAsNBEiGIUkDvobpFdrQYfHtz9qcM34vpIb2/OJS JLWpKHviGveFMwaEAU+g4AnkRuGPhWT1r4JFadF24mrlre2kfsYd9ykbPMsZHDrb aTZy8oOldXGav2n7TYxi/eoTal8gIwYfjwime92m49sGpbhRi1lrMI7SPn3VZvEg yARODnFC4fa6hiL8FEIS2/Ew9DlSZBGQQnz4en2Cnz/meLE2lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvmUbIpJLHzBGWsw3jaqN6t6Nf9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzg2ODAyOWMtNGRlMi0z ZTFlLWE1MzctNmI2YzQ1ZWUzMjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF0AEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoaGSIU1XC9iecScAnH/Fn+3+FyHBBbd6r10E3UiJKG9/Fok4GuF5IB s8QtR/SM6pgOspJeeIGEj2ipdCw9huJHtQ8JhOzqtuREcSY2irWc2TzbcWN8JlaW u0uSCTpPS5xrDkL0eo5mH5mP+evxPFy6EZR0zHZh2ZT5BT+pXHyCCOYTuvzvcZyj Yw/eRDv9PoqjJMAl8V87+rocuB/Yq5gV301Cdg3P2lSyD8DGjAWlMb8EvNGuWcFV ey3GH8ZCsPofaIAxgoOr4UtZPK6J0uj3XWh2aM7VEyZiuidjnLIHlB4QsKkMEJdy qmd9bd0flezPEAziYKiP6dy5dQGbAzU= -----END CERTIFICATE-----Generated at Sat Jun 7 14:01:58 2025 by rpki-client