$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c91dba92-42b8-3af4-9c90-f0513847fe77.roa File: c91dba92-42b8-3af4-9c90-f0513847fe77.roa (raw, json) Hash identifier: 7GRyKA4dFkvqdTesxpjhOSR5wM54eqMXUF2Qk7FhANY= Subject key identifier: 08:B3:13:53:62:55:56:D7:5B:32:96:C1:F3:FD:F5:79:11:6A:90:08 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A03A55CA8BB54CB89BF8B5C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c91dba92-42b8-3af4-9c90-f0513847fe77.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.3.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:5c:a8:bb:54:cb:89:bf:8b:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=be5ff391-7bef-4812-b222-e4734d008fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:75:96:87:e0:7b:96:9d:a2:3a:83:40:5b:07: 62:c1:62:50:07:d2:4d:55:f3:2a:4c:55:73:15:b0: 1b:7f:7e:81:b3:b5:76:f6:7c:ba:d6:1c:be:49:c0: 85:98:71:67:fa:2e:63:f2:73:94:17:fa:fe:fe:d2: 01:76:9f:bd:b1:07:1a:d9:8e:29:48:62:ba:49:97: 81:04:32:1d:34:43:64:f7:44:58:e2:a2:c0:f0:f0: 83:b6:46:a2:e2:ff:91:e2:5d:04:d0:f0:39:e2:71: 43:48:6e:4f:05:d5:41:a5:05:be:39:da:52:6d:34: 5a:70:21:b1:37:62:4e:7f:f9:32:e4:1c:86:1c:8e: f8:97:6e:25:81:97:e5:84:30:f0:90:88:11:82:18: d6:92:f5:91:13:a3:16:a5:c8:7b:09:22:2c:cb:0c: 25:42:b4:e7:aa:0e:11:6a:6d:0c:e4:9e:a1:a1:9d: cb:b6:a7:d2:01:40:b2:a7:61:b3:8c:b3:0d:bd:f0: d2:5a:38:14:fe:70:4a:29:69:23:ed:db:df:5a:f6: 94:ff:f2:5d:51:ee:14:92:57:56:e2:5d:83:52:57: e3:81:f2:f9:4c:0d:03:77:77:aa:f2:d1:4b:aa:cc: c4:e7:ee:19:1a:9c:82:12:57:b3:05:d5:18:45:a0: 02:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B3:13:53:62:55:56:D7:5B:32:96:C1:F3:FD:F5:79:11:6A:90:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c91dba92-42b8-3af4-9c90-f0513847fe77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:6f:41:50:68:4c:82:98:2f:4d:fc:6a:d6:cb:d1:99:b1:40: 7c:36:04:04:73:d5:a5:54:ad:9a:c2:05:47:c9:8e:cc:db:90: b6:e9:9d:6b:26:9b:da:05:8f:ae:34:5e:af:98:9b:27:f1:a8: 88:ab:18:d0:ec:f8:ea:1d:d6:28:37:b5:81:f6:01:e6:cb:c2: 91:0e:f7:58:6d:f6:a5:a0:71:d3:cd:a4:67:b5:70:4b:78:7e: 3d:1e:67:a3:b0:0e:53:67:95:20:bd:f0:29:fc:d1:66:1c:b1: 5b:13:5e:4c:a5:be:38:7d:d4:f6:b1:cf:55:c3:0c:0a:44:cb: ac:18:00:ef:b0:e9:56:82:bd:c8:b9:91:d2:53:9f:49:94:30: eb:06:dd:ce:75:66:aa:af:8b:c5:45:61:1c:5f:b7:5b:18:62: 9c:96:dd:22:d4:3c:17:c2:a4:88:24:9b:86:58:e1:cd:38:6d: 98:7d:0c:e5:e7:2a:49:5c:69:22:f4:7d:73:d3:53:e4:31:0e: 79:91:fc:10:a8:ea:4a:77:79:f8:3b:45:51:45:31:c7:e3:48: 2e:06:6e:d8:fc:83:ea:f5:0f:d6:1c:4e:90:ee:34:7c:a7:28: 8c:ab:f6:00:fc:85:ac:4e:1f:a8:fc:4c:80:f3:fe:4b:ec:52: 5c:bb:1d:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpVyou1TLib+LXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk YmU1ZmYzOTEtN2JlZi00ODEyLWIyMjItZTQ3MzRkMDA4ZmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHWWh+B7lp2iOoNAWwdiwWJQB9JNVfMqTFVz FbAbf36Bs7V29ny61hy+ScCFmHFn+i5j8nOUF/r+/tIBdp+9sQca2Y4pSGK6SZeB BDIdNENk90RY4qLA8PCDtkai4v+R4l0E0PA54nFDSG5PBdVBpQW+OdpSbTRacCGx N2JOf/ky5ByGHI74l24lgZflhDDwkIgRghjWkvWRE6MWpch7CSIsywwlQrTnqg4R am0M5J6hoZ3LtqfSAUCyp2GzjLMNvfDSWjgU/nBKKWkj7dvfWvaU//JdUe4UkldW 4l2DUlfjgfL5TA0Dd3eq8tFLqszE5+4ZGpyCElezBdUYRaACAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAizE1NiVVbXWzKWwfP99XkRapAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzkxZGJhOTItNDJiOC0z YWY0LTljOTAtZjA1MTM4NDdmZTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwMNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJvQVBoTIKYL038atbL0ZmxQHw2BARz1aVUrZrCBUfJjszbkLbpnWsm m9oFj640Xq+YmyfxqIirGNDs+Ood1ig3tYH2AebLwpEO91ht9qWgcdPNpGe1cEt4 fj0eZ6OwDlNnlSC98Cn80WYcsVsTXkylvjh91Paxz1XDDApEy6wYAO+w6VaCvci5 kdJTn0mUMOsG3c51Zqqvi8VFYRxft1sYYpyW3SLUPBfCpIgkm4ZY4c04bZh9DOXn KklcaSL0fXPTU+QxDnmR/BCo6kp3efg7RVFFMcfjSC4Gbtj8g+r1D9YcTpDuNHyn KIyr9gD8haxOH6j8TIDz/kvsUly7HSk= -----END CERTIFICATE-----Generated at Thu Jun 5 18:17:11 2025 by rpki-client