$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2ae9d2e-f31c-3a67-bbaa-534e59a5ad6d.roa File: d2ae9d2e-f31c-3a67-bbaa-534e59a5ad6d.roa (raw, json) Hash identifier: JdKERhlSu5aNVrzOvvw5NfnCkRlOhCe7SFg5kWTakfw= Subject key identifier: 30:99:97:83:89:7D:F6:14:FB:E2:67:AA:EA:79:86:D5:69:FA:9F:78 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849FE1007210F1DEE9EAF47D180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2ae9d2e-f31c-3a67-bbaa-534e59a5ad6d.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 20940 IP address blocks: 23.72.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:07:21:0f:1d:ee:9e:af:47:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=cc68f8d4-0f56-4f3a-be74-473a9b8c4b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:30:0f:6f:d5:5a:22:16:28:49:a8:ce:e7:e8: ac:29:53:94:fd:92:63:66:b5:ee:32:58:b9:da:e9: e0:7a:6a:63:a2:04:74:9f:a5:e9:ba:be:48:2c:28: 20:50:ca:5b:a5:da:76:7d:f9:4e:6c:8b:ea:37:9a: 90:bd:79:c0:94:65:b6:d9:94:1d:20:ec:12:ab:36: 8e:ac:06:1a:59:c8:bf:82:e2:80:a1:e7:b9:3a:43: 56:08:fa:62:39:1f:f7:f2:cc:95:17:b1:93:ee:3b: d2:f6:d9:f8:4a:e6:26:ea:9e:af:82:b5:cf:6b:ac: 11:16:84:20:57:f8:33:2d:02:72:ca:b1:da:b2:3c: 95:83:33:79:78:1f:10:78:e1:0d:04:d1:ee:40:e5: 25:6b:14:01:e4:1f:c6:5b:77:13:ec:4b:44:84:32: 49:c6:93:c6:f9:df:77:d0:24:d7:c0:d1:1f:01:f9: d0:2c:52:58:07:ee:29:af:1d:ed:ce:6c:fb:23:15: 4f:72:96:f7:40:91:ff:9a:9a:d1:db:bf:f6:49:ee: 42:08:89:a9:41:37:b6:12:09:51:ad:23:b2:ac:fb: 65:0c:80:9a:8b:7e:2d:a7:b3:f5:b3:e0:79:88:aa: 8c:fa:d0:1a:ee:48:bd:bd:ad:28:e7:3a:e0:7b:c7: 65:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:99:97:83:89:7D:F6:14:FB:E2:67:AA:EA:79:86:D5:69:FA:9F:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2ae9d2e-f31c-3a67-bbaa-534e59a5ad6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.72.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:d7:ff:a6:4a:21:60:3a:71:b9:ce:dc:34:a1:f5:a2:b4:81: 87:71:cf:58:3c:4d:46:6f:f5:54:7e:90:01:c6:d6:da:f3:c7: dd:60:8d:66:c5:b6:ca:18:5d:59:8a:d1:82:92:dc:cc:dd:18: d8:f2:0d:14:88:a2:df:5f:ec:1e:4b:ef:2d:40:6e:07:a2:af: c8:44:51:7f:bb:ac:90:a1:ed:e6:2e:d4:07:21:f5:dc:f2:f9: 75:ca:c0:5f:12:04:1d:5e:c6:44:95:07:5f:77:fa:9a:46:7d: 67:6f:c7:9b:3d:03:12:33:54:65:4b:20:a5:b8:86:65:24:ba: 76:12:95:74:a5:90:5a:bc:c1:60:d4:3f:12:89:eb:67:45:80: 67:f7:f4:fb:cc:55:64:86:ce:3b:39:f7:a4:bc:39:c1:ee:38: 0f:c2:6b:42:7d:1d:f0:36:3d:87:b3:1e:4d:da:ac:26:08:a2: 1f:3a:9a:b2:69:32:21:54:fc:35:6c:60:ce:0e:6d:2d:92:4b: f8:12:5b:a4:0c:1b:ce:68:6e:ec:bc:11:d9:86:d0:bf:89:51: 5e:30:09:6f:79:ec:65:5c:2b:5a:a1:a4:a9:66:f2:c9:21:8e: 0a:8a:4f:82:10:98:6b:2b:cb:4a:87:b8:84:a1:06:be:52:f7: e6:d0:93:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+EAchDx3unq9H0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk Y2M2OGY4ZDQtMGY1Ni00ZjNhLWJlNzQtNDczYTliOGM0YjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijAPb9VaIhYoSajO5+isKVOU/ZJjZrXuMli5 2ungempjogR0n6Xpur5ILCggUMpbpdp2fflObIvqN5qQvXnAlGW22ZQdIOwSqzaO rAYaWci/guKAoee5OkNWCPpiOR/38syVF7GT7jvS9tn4SuYm6p6vgrXPa6wRFoQg V/gzLQJyyrHasjyVgzN5eB8QeOENBNHuQOUlaxQB5B/GW3cT7EtEhDJJxpPG+d93 0CTXwNEfAfnQLFJYB+4prx3tzmz7IxVPcpb3QJH/mprR27/2Se5CCImpQTe2EglR rSOyrPtlDICai34tp7P1s+B5iKqM+tAa7ki9va0o5zrge8dlqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCZl4OJffYU++Jnqup5htVp+p94MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDJhZTlkMmUtZjMxYy0z YTY3LWJiYWEtNTM0ZTU5YTVhZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0j7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETX/6ZKIWA6cbnO3DSh9aK0gYdxz1g8TUZv9VR+kAHG1trzx91gjWbF tsoYXVmK0YKS3MzdGNjyDRSIot9f7B5L7y1Abgeir8hEUX+7rJCh7eYu1Ach9dzy +XXKwF8SBB1exkSVB193+ppGfWdvx5s9AxIzVGVLIKW4hmUkunYSlXSlkFq8wWDU PxKJ62dFgGf39PvMVWSGzjs596S8OcHuOA/Ca0J9HfA2PYezHk3arCYIoh86mrJp MiFU/DVsYM4ObS2SS/gSW6QMG85obuy8EdmG0L+JUV4wCW957GVcK1qhpKlm8skh jgqKT4IQmGsry0qHuIShBr5S9+bQk20= -----END CERTIFICATE-----Generated at Thu Jun 5 18:14:36 2025 by rpki-client