$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d3f322b4-9b87-3d0c-8427-6cdcfd6c970a.roa File: d3f322b4-9b87-3d0c-8427-6cdcfd6c970a.roa (raw, json) Hash identifier: BzcvDiDVTaDtd0ef7i1A+N8CrjmedKIldIyI1ytp3hk= Subject key identifier: 46:27:F0:9C:4D:7C:E6:90:D4:A4:00:8D:1C:18:1F:F7:8B:50:9E:FC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A03A56E64CDA975F211D9A3C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d3f322b4-9b87-3d0c-8427-6cdcfd6c970a.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.11.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:6e:64:cd:a9:75:f2:11:d9:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=1c3b0092-4bf5-4ac9-ab17-ee6984815d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:17:f6:9a:00:7f:2b:a0:2b:fe:29:0e:da:b0: a4:9c:36:1a:80:fa:9d:24:00:18:60:00:9e:a9:58: 15:b9:e3:e0:7b:a0:30:5e:d9:cc:05:96:7c:46:1e: 75:eb:28:17:4d:ea:80:fc:0f:1b:6d:0e:ee:64:b7: 6a:89:b0:4d:8f:1a:a1:37:39:30:9a:45:d9:82:cc: 77:81:de:2b:95:08:85:9e:be:25:71:c3:e5:ea:84: 52:b1:01:03:3e:46:47:d5:18:a4:0a:64:c6:4e:5f: 87:c0:b1:23:47:8e:5c:b3:8b:c4:95:68:eb:07:e4: fd:25:ff:85:dc:07:0a:5a:a9:9b:3d:16:ec:cc:5e: f5:5f:64:46:f0:a2:6e:b9:9e:da:59:14:e6:d3:08: f8:c8:3d:b7:ca:a6:cd:1f:5e:95:5d:f2:65:0e:9c: f3:40:9b:1d:f7:2d:12:ae:8a:ae:cc:fd:22:45:06: d6:69:14:b7:24:6e:b4:ec:fa:86:50:dd:75:60:1a: 41:55:cc:cb:15:1c:14:83:f6:b9:b9:54:de:04:48: a8:51:14:d1:c3:54:68:c6:f2:cd:ad:b7:a2:4b:04: f5:29:53:cb:44:a7:80:ce:19:b3:a5:b2:d4:ac:1d: ba:14:43:77:dd:c4:17:1f:99:41:ed:20:b0:ef:3b: 67:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:27:F0:9C:4D:7C:E6:90:D4:A4:00:8D:1C:18:1F:F7:8B:50:9E:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d3f322b4-9b87-3d0c-8427-6cdcfd6c970a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.11.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e3:42:2e:79:8d:22:4e:42:29:96:1a:55:89:39:74:9f:e1: e6:75:1b:c0:54:da:38:13:23:c3:4d:71:0d:8a:9a:b8:47:2a: 83:f6:4c:11:28:11:af:e1:a0:4a:21:ae:3a:cf:46:9b:77:ec: 17:5c:a1:da:46:bf:0b:f3:78:25:40:ea:d2:87:cb:74:62:b3: 7f:df:0d:29:1b:d4:e5:10:18:d1:19:e5:02:6b:62:55:93:7a: 4c:93:4e:70:02:98:c3:a2:61:8b:1c:b5:0f:ec:a9:56:31:dc: b3:50:dc:7d:87:c1:ed:de:01:de:24:b9:ba:c7:ee:fc:a2:88: 75:57:23:48:0a:4e:de:57:e7:a7:9d:7e:2c:95:ee:24:fe:d8: 6c:5d:18:58:9f:05:6f:19:ed:a0:8f:a3:e9:0c:a8:d4:d6:e0: 09:d1:64:20:cb:51:2e:ec:d0:9d:a1:07:03:cb:ea:d2:d8:c5: c4:d1:af:78:fa:c4:b0:78:20:20:bc:cc:9c:52:81:98:67:63: 2e:3e:8c:dd:58:7a:0a:90:9e:3b:63:50:ff:1c:b9:b0:81:59: 02:d8:90:20:d0:77:c3:d2:7c:13:52:1e:d3:40:0f:5a:a0:69: c7:51:2d:06:1b:15:1e:27:47:82:34:fb:74:bc:ef:33:55:f2: cc:82:8b:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpW5kzal18hHZo8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MWMzYjAwOTItNGJmNS00YWM5LWFiMTctZWU2OTg0ODE1ZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhf2mgB/K6Ar/ikO2rCknDYagPqdJAAYYACe qVgVuePge6AwXtnMBZZ8Rh516ygXTeqA/A8bbQ7uZLdqibBNjxqhNzkwmkXZgsx3 gd4rlQiFnr4lccPl6oRSsQEDPkZH1RikCmTGTl+HwLEjR45cs4vElWjrB+T9Jf+F 3AcKWqmbPRbszF71X2RG8KJuuZ7aWRTm0wj4yD23yqbNH16VXfJlDpzzQJsd9y0S roquzP0iRQbWaRS3JG607PqGUN11YBpBVczLFRwUg/a5uVTeBEioURTRw1RoxvLN rbeiSwT1KVPLRKeAzhmzpbLUrB26FEN33cQXH5lB7SCw7ztnOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYn8JxNfOaQ1KQAjRwYH/eLUJ78MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDNmMzIyYjQtOWI4Ny0z ZDBjLTg0MjctNmNkY2ZkNmM5NzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwvVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDjQi55jSJOQimWGlWJOXSf4eZ1G8BU2jgTI8NNcQ2KmrhHKoP2TBEo Ea/hoEohrjrPRpt37BdcodpGvwvzeCVA6tKHy3Ris3/fDSkb1OUQGNEZ5QJrYlWT ekyTTnACmMOiYYsctQ/sqVYx3LNQ3H2Hwe3eAd4kubrH7vyiiHVXI0gKTt5X56ed fiyV7iT+2GxdGFifBW8Z7aCPo+kMqNTW4AnRZCDLUS7s0J2hBwPL6tLYxcTRr3j6 xLB4ICC8zJxSgZhnYy4+jN1YegqQnjtjUP8cubCBWQLYkCDQd8PSfBNSHtNAD1qg acdRLQYbFR4nR4I0+3S87zNV8syCi6w= -----END CERTIFICATE-----Generated at Thu Jun 5 18:18:03 2025 by rpki-client