$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da713c11-e319-3924-b863-4174bc627d6d.roa File: da713c11-e319-3924-b863-4174bc627d6d.roa (raw, json) Hash identifier: ZHWD6XGUsNT2m97eal1LxIpH1r2Ayn3kgraVmA7JMIU= Subject key identifier: B6:A0:A2:52:6D:5C:E9:BA:18:F7:99:8E:17:5B:5B:41:60:64:79:CA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849D6D39E11E082983344EAA240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da713c11-e319-3924-b863-4174bc627d6d.roa Signing time: Tue 13 May 2025 11:43:12 +0000 ROA not before: Tue 13 May 2025 11:43:12 +0000 ROA not after: Mon 11 Aug 2025 11:43:12 +0000 asID: 16625 IP address blocks: 23.8.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d6:d3:9e:11:e0:82:98:33:44:ea:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 13 11:43:12 2025 GMT Not After : Aug 11 11:43:12 2025 GMT Subject: CN=9ac12ac8-1335-4179-a22d-3e201bbeae7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e4:e6:e4:d8:53:54:f6:69:b2:53:55:f0:6b: 13:a7:97:7e:60:8a:1f:bc:2a:44:6f:f2:8a:8c:68: 7f:91:31:9f:49:35:19:bb:45:38:b4:8b:98:17:59: ac:68:28:3c:52:15:58:47:85:d6:b8:39:73:e3:b2: a4:89:10:9c:0a:43:30:26:a3:69:da:ff:90:76:64: da:4a:1e:bd:67:ec:9e:0b:df:d7:5a:97:7d:da:fc: 46:27:a9:fd:3e:7a:90:23:92:7b:e9:e4:8a:fd:39: e3:9a:48:2c:c2:5d:38:28:21:56:9a:5b:75:1a:6a: 4d:4f:d7:f4:7e:8c:54:ed:c1:5f:2a:1c:a4:a0:79: cb:5e:b4:8e:a6:0d:7e:25:08:f2:2f:27:65:14:5e: 8e:da:5d:3c:59:91:13:af:7f:93:43:6b:49:2d:a1: a8:b5:81:08:6a:3a:dd:36:2f:db:fb:33:10:b7:8f: 12:0a:7a:79:52:59:fc:05:47:c3:0c:c6:de:a8:e3: d3:e6:06:64:71:d2:41:85:1b:65:5b:9b:1e:85:4a: ed:71:66:82:09:87:f9:35:ce:8e:cb:13:a1:ae:b1: a7:1b:2a:d7:55:24:ef:80:4f:2c:40:9f:64:9a:2d: 6d:7c:6b:70:5b:0c:23:92:f6:31:bb:67:ec:c1:0a: 3c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A0:A2:52:6D:5C:E9:BA:18:F7:99:8E:17:5B:5B:41:60:64:79:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da713c11-e319-3924-b863-4174bc627d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.8.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c1:fc:86:96:a4:05:ba:3e:b1:35:50:8b:8c:30:b3:bb:f4: 69:c1:f8:1b:28:1f:ee:79:ff:e5:15:83:1a:76:5f:25:23:20: 41:26:65:3d:ef:39:a7:cb:d1:c4:04:09:2a:08:d7:15:b7:db: bb:d9:c8:e0:4b:3c:a5:2f:46:8c:3c:70:90:c6:13:fa:71:61: a3:db:6e:48:9e:e1:15:d5:b2:e0:ba:1c:00:e7:31:35:c6:20: 1d:07:f1:39:13:36:72:e7:80:fe:3c:19:04:3d:af:c4:a5:8a: ac:05:ca:d1:2f:42:2c:6b:0d:61:43:de:d7:2b:bd:34:a9:84: 73:68:2e:b2:cc:fd:ba:19:38:3e:e1:39:43:d3:08:83:a2:43: 37:6f:90:52:4d:65:6d:d6:55:89:cf:82:05:6a:5b:41:3f:e8: 2d:e5:ec:c4:cd:77:9f:82:c3:ef:4c:77:15:ea:b9:5d:51:de: 8a:1c:dd:6b:0d:cb:2a:7d:a2:c9:0e:33:8b:df:f5:bc:8f:8e: c6:63:9a:1c:30:5d:24:33:cc:66:87:82:d7:3b:7f:e4:66:7f: d4:65:9d:c8:05:05:d2:39:c8:9a:f6:08:3a:fa:5f:f0:f3:06: 37:48:8e:04:c4:7e:d7:27:48:6b:ef:d5:f0:4d:7b:12:0e:8e: e4:d8:53:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnW054R4IKYM0TqokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMzExNDMxMloXDTI1MDgxMTExNDMxMlowLzEtMCsGA1UEAxMk OWFjMTJhYzgtMTMzNS00MTc5LWEyMmQtM2UyMDFiYmVhZTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uTm5NhTVPZpslNV8GsTp5d+YIofvCpEb/KK jGh/kTGfSTUZu0U4tIuYF1msaCg8UhVYR4XWuDlz47KkiRCcCkMwJqNp2v+QdmTa Sh69Z+yeC9/XWpd92vxGJ6n9PnqQI5J76eSK/Tnjmkgswl04KCFWmlt1GmpNT9f0 foxU7cFfKhykoHnLXrSOpg1+JQjyLydlFF6O2l08WZETr3+TQ2tJLaGotYEIajrd Ni/b+zMQt48SCnp5Uln8BUfDDMbeqOPT5gZkcdJBhRtlW5sehUrtcWaCCYf5Nc6O yxOhrrGnGyrXVSTvgE8sQJ9kmi1tfGtwWwwjkvYxu2fswQo8bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLagolJtXOm6GPeZjhdbW0FgZHnKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGE3MTNjMTEtZTMxOS0z OTI0LWI4NjMtNDE3NGJjNjI3ZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGFwgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjB/IaWpAW6PrE1UIuMMLO79GnB+BsoH+55/+UVgxp2XyUjIEEmZT3v OafL0cQECSoI1xW327vZyOBLPKUvRow8cJDGE/pxYaPbbkie4RXVsuC6HADnMTXG IB0H8TkTNnLngP48GQQ9r8SliqwFytEvQixrDWFD3tcrvTSphHNoLrLM/boZOD7h OUPTCIOiQzdvkFJNZW3WVYnPggVqW0E/6C3l7MTNd5+Cw+9MdxXquV1R3ooc3WsN yyp9oskOM4vf9byPjsZjmhwwXSQzzGaHgtc7f+Rmf9RlncgFBdI5yJr2CDr6X/Dz BjdIjgTEftcnSGvv1fBNexIOjuTYUy4= -----END CERTIFICATE-----Generated at Sun Jun 8 05:01:00 2025 by rpki-client