$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d519f53b-3556-3e54-8ded-793491bcb0f6.roa File: d519f53b-3556-3e54-8ded-793491bcb0f6.roa (raw, json) Hash identifier: cs+jzIv1WQ6vWBkHDspvgFYbFnv5QK3FOGxguFdC0jk= Subject key identifier: C1:A0:3B:DC:FB:60:90:5E:EF:7A:99:F6:3A:D4:B0:5B:C3:30:F3:0D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F7152D6330917107DB689300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d519f53b-3556-3e54-8ded-793491bcb0f6.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 16625 IP address blocks: 23.72.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:2d:63:30:91:71:07:db:68:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=dc2ea74b-8916-493c-8fc7-fd6fb2fcceac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1f:e0:87:c0:e4:a2:ff:70:55:d2:ea:da:0d: e2:49:3e:2a:32:db:63:a1:7e:ad:a7:5c:ba:24:4f: 50:92:c5:0a:d3:3c:13:37:e8:96:c9:b6:87:09:ee: 1c:51:fa:49:b6:0e:94:6b:88:54:fa:04:c1:9f:92: e4:b4:b4:19:8e:80:3e:7b:25:40:b5:87:5e:8a:69: e3:da:7f:04:32:2f:33:70:ba:65:9a:66:18:3e:ca: d4:a5:3a:18:c8:7c:f2:6b:28:86:24:12:7a:56:06: cd:60:85:b4:8d:2c:5f:ab:68:a1:72:5c:06:43:57: 91:f8:3e:16:be:72:06:71:2f:94:46:25:5e:9f:64: db:37:9b:42:23:01:bc:2e:d2:98:16:88:16:c7:ba: 38:d2:5a:05:a1:aa:ef:09:cc:49:94:d8:ad:e9:a8: af:05:4d:43:a1:28:df:ad:53:b5:ae:5e:14:36:57: f8:01:74:0f:9c:c0:da:ce:11:44:ef:3c:54:cf:f6: be:37:ac:aa:97:d4:24:90:51:d7:e4:79:c1:2e:56: 34:69:24:70:e5:f8:e7:a0:de:86:37:b6:87:8b:39: 12:70:57:b6:f2:09:90:85:f1:1d:76:04:d9:bd:8d: a3:ec:50:0d:1a:94:9e:7a:36:86:1e:64:48:20:e5: 5d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A0:3B:DC:FB:60:90:5E:EF:7A:99:F6:3A:D4:B0:5B:C3:30:F3:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d519f53b-3556-3e54-8ded-793491bcb0f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.72.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:63:9a:30:b5:3d:02:d1:30:bd:fd:a9:23:84:28:13:aa:ac: ba:67:f9:26:8d:e8:4f:f3:5c:64:97:d6:75:35:63:2d:56:e0: 5a:5e:57:3b:4f:93:16:ab:76:b9:0b:32:8a:ed:65:36:87:88: 13:4f:b7:e4:f1:76:d8:08:bc:36:62:5b:5c:44:8b:53:2f:4a: 14:e3:1b:e0:2b:8e:61:7d:4f:34:1b:ae:f5:84:03:72:07:33: b8:43:8b:97:d0:1d:ef:0f:d5:4d:d6:83:bb:1a:7c:3b:6c:ec: 11:43:33:65:3f:41:e4:a2:f9:c2:96:7c:c6:d0:7e:52:e8:56: 4e:08:45:5d:48:2a:94:7a:8a:dc:4e:8e:cb:be:1b:09:06:ea: 7c:a1:a9:0e:d4:ca:84:6c:a4:78:e3:4d:43:32:14:de:ab:ca: 0c:c0:ee:0c:b0:5c:97:0a:26:b4:1f:92:65:f1:b8:17:48:ca: cb:e0:31:63:24:82:86:c4:30:77:2d:d5:5f:a2:22:51:21:2a: b0:b8:98:f9:e4:27:53:d2:a6:39:1a:10:b5:44:74:b0:7f:32: 5c:62:08:85:35:cc:55:cb:a9:00:a4:20:eb:97:9c:08:23:82: 1b:ed:02:eb:81:86:34:d3:32:21:e6:f9:3e:99:5e:7a:4b:20: 2c:cd:f1:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FS1jMJFxB9tokwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk ZGMyZWE3NGItODkxNi00OTNjLThmYzctZmQ2ZmIyZmNjZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx/gh8Dkov9wVdLq2g3iST4qMttjoX6tp1y6 JE9QksUK0zwTN+iWybaHCe4cUfpJtg6Ua4hU+gTBn5LktLQZjoA+eyVAtYdeimnj 2n8EMi8zcLplmmYYPsrUpToYyHzyayiGJBJ6VgbNYIW0jSxfq2ihclwGQ1eR+D4W vnIGcS+URiVen2TbN5tCIwG8LtKYFogWx7o40loFoarvCcxJlNit6aivBU1DoSjf rVO1rl4UNlf4AXQPnMDazhFE7zxUz/a+N6yql9QkkFHX5HnBLlY0aSRw5fjnoN6G N7aHizkScFe28gmQhfEddgTZvY2j7FANGpSeejaGHmRIIOVdkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGgO9z7YJBe73qZ9jrUsFvDMPMNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDUxOWY1M2ItMzU1Ni0z ZTU0LThkZWQtNzkzNDkxYmNiMGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF0jwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxjmjC1PQLRML39qSOEKBOqrLpn+SaN6E/zXGSX1nU1Yy1W4FpeVztP kxardrkLMortZTaHiBNPt+TxdtgIvDZiW1xEi1MvShTjG+ArjmF9TzQbrvWEA3IH M7hDi5fQHe8P1U3Wg7safDts7BFDM2U/QeSi+cKWfMbQflLoVk4IRV1IKpR6itxO jsu+GwkG6nyhqQ7UyoRspHjjTUMyFN6rygzA7gywXJcKJrQfkmXxuBdIysvgMWMk gobEMHct1V+iIlEhKrC4mPnkJ1PSpjkaELVEdLB/MlxiCIU1zFXLqQCkIOuXnAgj ghvtAuuBhjTTMiHm+T6ZXnpLICzN8fE= -----END CERTIFICATE-----Generated at Sat Jun 7 15:29:18 2025 by rpki-client