$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dca916ca-ad90-3431-af73-4909a30fd958.roa File: dca916ca-ad90-3431-af73-4909a30fd958.roa (raw, json) Hash identifier: 8Zih7R+W1hgLxJy8whJrymbB58TD5ECCZXuVtmdVfVA= Subject key identifier: 9C:0D:CB:C5:C1:BA:DA:66:56:04:5E:1A:64:72:6D:54:0F:C8:A9:5C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F2E51F552FEC0B8E3E820B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dca916ca-ad90-3431-af73-4909a30fd958.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.3.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:1f:55:2f:ec:0b:8e:3e:82:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=48d6591d-fabf-4bd8-a5da-3c951779eb8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:51:88:7f:2f:64:3f:47:04:08:49:b6:37: 67:f4:a2:90:13:d3:c4:63:af:f8:4b:db:76:23:b7: 14:6b:7b:00:67:d4:16:0f:0b:83:20:a3:27:34:31: 98:c7:0e:52:cf:27:12:68:1b:aa:3d:55:77:e1:be: 5f:1a:92:7e:ab:bb:b2:44:52:2d:7f:cc:11:7a:a2: b1:50:f5:76:c8:45:f3:a0:5b:b7:0d:0c:b5:ab:1e: 0b:78:fd:e6:ca:81:bf:96:c7:13:31:9f:19:ce:bc: 7c:01:67:e8:a7:99:df:31:02:dd:6d:31:6b:48:48: 1b:a2:1f:a0:89:2b:ce:0c:1b:e0:f0:f5:dd:2c:9f: 37:41:42:07:f9:6c:69:44:8b:42:16:e2:96:d3:cd: 06:4a:a2:f3:4c:05:16:0d:6a:8b:1c:5c:c6:58:d7: 38:5d:d7:bc:cf:2a:ce:42:98:dc:0e:62:b6:10:7b: 57:6f:ca:1c:20:6f:f5:4b:f1:e9:c8:15:df:0e:26: c7:84:cd:23:b3:1c:d2:cc:1a:eb:ed:9d:d6:8c:86: 77:2c:87:58:42:d8:ab:5b:bb:dd:d9:0f:60:a6:55: 63:78:86:11:ce:c5:28:63:b4:42:8b:94:42:a0:d7: 02:4f:78:c9:34:ba:2f:eb:fb:2c:b5:1d:47:cb:33: ae:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0D:CB:C5:C1:BA:DA:66:56:04:5E:1A:64:72:6D:54:0F:C8:A9:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dca916ca-ad90-3431-af73-4909a30fd958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ee:49:60:6e:81:6b:61:7b:a7:f7:8c:6e:8e:e8:e1:b9:9c: 18:10:90:7d:13:ff:87:49:b6:b8:b0:de:59:2c:14:10:4b:cc: 36:97:f6:cf:00:17:7c:4a:39:61:36:c9:a2:50:3a:b5:07:1a: 0a:a1:c0:dc:15:ec:48:ce:d1:5e:ff:08:4b:cd:21:6f:12:36: de:9b:fe:ac:04:e0:d0:1c:b6:23:ea:41:ca:bc:bb:81:97:f9: 15:d9:bc:71:a2:c0:53:0b:a2:4a:7c:bd:85:6a:59:71:81:1e: e0:6d:a5:9a:45:64:31:13:d5:77:f2:29:ba:64:af:09:73:95: e6:2d:8c:ad:36:c0:f2:da:07:7b:5f:9d:cd:de:83:fe:75:8c: c7:4e:4a:80:82:20:8c:ed:e1:61:5e:bd:17:54:6e:ed:fc:b1: 4a:de:c1:a5:3d:09:c6:98:c4:3c:20:16:32:9d:f7:c4:25:15: a4:9f:7a:6a:d5:69:83:4e:fc:62:a4:28:8d:84:6e:61:bb:a5: cc:87:96:eb:6d:a2:4c:5f:7e:0f:31:6e:09:61:d8:14:b7:93: ec:4f:03:2f:ed:70:e0:27:62:50:e1:44:5a:75:aa:51:52:d1: 82:8f:ee:ef:d0:ec:d3:4e:9a:22:e3:5f:4e:ed:8c:f4:7d:7f: 90:0d:a8:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5R9VL+wLjj6CCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk NDhkNjU5MWQtZmFiZi00YmQ4LWE1ZGEtM2M5NTE3NzllYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcFRiH8vZD9HBAhJtjdn9KKQE9PEY6/4S9t2 I7cUa3sAZ9QWDwuDIKMnNDGYxw5SzycSaBuqPVV34b5fGpJ+q7uyRFItf8wReqKx UPV2yEXzoFu3DQy1qx4LeP3myoG/lscTMZ8Zzrx8AWfop5nfMQLdbTFrSEgboh+g iSvODBvg8PXdLJ83QUIH+WxpRItCFuKW080GSqLzTAUWDWqLHFzGWNc4Xde8zyrO QpjcDmK2EHtXb8ocIG/1S/HpyBXfDibHhM0jsxzSzBrr7Z3WjIZ3LIdYQtirW7vd 2Q9gplVjeIYRzsUoY7RCi5RCoNcCT3jJNLov6/sstR1HyzOuGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwNy8XButpmVgReGmRybVQPyKlcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGNhOTE2Y2EtYWQ5MC0z NDMxLWFmNzMtNDkwOWEzMGZkOTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwNEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvuSWBugWthe6f3jG6O6OG5nBgQkH0T/4dJtriw3lksFBBLzDaX9s8A F3xKOWE2yaJQOrUHGgqhwNwV7EjO0V7/CEvNIW8SNt6b/qwE4NActiPqQcq8u4GX +RXZvHGiwFMLokp8vYVqWXGBHuBtpZpFZDET1XfyKbpkrwlzleYtjK02wPLaB3tf nc3eg/51jMdOSoCCIIzt4WFevRdUbu38sUrewaU9CcaYxDwgFjKd98QlFaSfemrV aYNO/GKkKI2EbmG7pcyHluttokxffg8xbglh2BS3k+xPAy/tcOAnYlDhRFp1qlFS 0YKP7u/Q7NNOmiLjX07tjPR9f5ANqNE= -----END CERTIFICATE-----Generated at Fri Jun 6 16:46:31 2025 by rpki-client