$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f00949c0-a6fb-3c06-8198-5125508ef528.roa File: f00949c0-a6fb-3c06-8198-5125508ef528.roa (raw, json) Hash identifier: 1n2luwbgX9jSLsVH5s1mzKBP5iEwbzFi1sKdAwCdndU= Subject key identifier: 92:D1:55:77:8C:F0:79:91:01:77:26:79:78:FF:AA:48:CC:7B:36:69 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A443F0D3EB0551A8C09A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f00949c0-a6fb-3c06-8198-5125508ef528.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 0 IP address blocks: 23.4.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:44:3f:0d:3e:b0:55:1a:8c:09:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=a411ed84-79de-4da7-a132-0a5ef954b5b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c0:c1:1e:ee:7c:9f:20:94:fd:23:1d:44:94: 27:cd:dc:a7:bb:05:21:7f:46:29:2c:0b:03:f7:9f: 12:b0:be:ff:a6:e8:78:f7:4a:13:58:61:95:34:03: e0:dd:f6:5c:b1:65:f0:fe:65:b8:2d:0a:af:a2:8b: 0e:ea:6b:3b:c8:2c:bf:66:9e:b3:f1:c2:e9:40:e1: 6b:86:40:a0:36:3d:bc:58:20:89:1c:2f:fb:d8:a3: 35:a5:80:8b:b5:9b:9b:60:e2:9d:37:6f:5c:f8:44: 2b:1a:b6:e6:06:85:f3:1a:51:f2:49:c5:8f:ab:d2: cb:7b:fa:4d:33:51:f4:1f:19:00:f5:c1:af:d6:20: 36:86:53:78:56:5a:7d:dc:c1:68:cc:7f:dd:d0:86: 37:a5:17:dd:ae:e8:b5:66:43:ae:31:32:59:1c:cf: ec:d1:19:49:bb:fc:3e:2c:54:9f:da:92:41:c4:dc: 13:b4:b4:f3:13:b7:bf:35:5f:ae:bb:02:1e:fe:44: d0:c3:35:67:f1:f4:38:19:ea:8a:08:59:38:89:83: 69:6f:90:83:5e:07:ee:a8:52:bf:0c:b6:d7:fc:dc: 04:c4:5a:65:da:04:3d:a2:34:a5:05:66:08:69:df: f0:88:61:61:ba:8a:c0:42:2e:78:13:18:df:53:70: 3f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D1:55:77:8C:F0:79:91:01:77:26:79:78:FF:AA:48:CC:7B:36:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f00949c0-a6fb-3c06-8198-5125508ef528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.4.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:61:92:61:43:62:a5:42:4e:fe:b2:43:2a:60:8c:79:b3:65: 07:ea:ce:09:57:bd:22:1e:a8:7b:e7:82:b7:37:9a:23:b0:46: 51:40:ba:7b:d0:af:a6:fd:de:72:b3:2a:95:29:5d:dc:a1:aa: 6e:8d:ec:a9:e3:f0:ec:11:2d:e4:f4:e0:af:99:fe:d9:37:c9: a4:93:93:4e:09:cc:59:54:73:19:7b:01:ef:05:c4:88:09:c5: f3:2d:af:61:46:8c:4f:9a:00:53:93:70:eb:c9:96:44:24:75: f5:61:33:7b:a5:07:01:7e:6c:0f:3d:fc:92:24:c5:78:76:75: 10:f6:18:73:3e:ad:dc:a4:e7:e9:df:2d:1e:d4:26:f0:20:bb: 56:bd:d8:52:0f:4f:98:ed:17:2e:44:6f:d4:97:9b:a0:a2:98: d9:d6:44:d4:64:68:44:a5:ae:b7:d0:7e:d5:8c:89:96:9a:55: 2a:86:7a:15:f2:59:5b:f1:9b:8c:af:6d:27:14:53:be:35:1c: 32:a5:b6:54:3d:88:a6:92:90:10:bf:31:52:7f:53:07:9b:15: fd:da:aa:0a:94:5a:83:26:c7:94:33:15:2c:50:e9:76:de:61: 34:2a:9b:36:55:e5:3b:76:c6:62:05:0a:88:35:b6:cf:ad:17: bd:5f:c1:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmkQ/DT6wVRqMCaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk YTQxMWVkODQtNzlkZS00ZGE3LWExMzItMGE1ZWY5NTRiNWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8DBHu58nyCU/SMdRJQnzdynuwUhf0YpLAsD 958SsL7/puh490oTWGGVNAPg3fZcsWXw/mW4LQqvoosO6ms7yCy/Zp6z8cLpQOFr hkCgNj28WCCJHC/72KM1pYCLtZubYOKdN29c+EQrGrbmBoXzGlHyScWPq9LLe/pN M1H0HxkA9cGv1iA2hlN4Vlp93MFozH/d0IY3pRfdrui1ZkOuMTJZHM/s0RlJu/w+ LFSf2pJBxNwTtLTzE7e/NV+uuwIe/kTQwzVn8fQ4GeqKCFk4iYNpb5CDXgfuqFK/ DLbX/NwExFpl2gQ9ojSlBWYIad/wiGFhuorAQi54ExjfU3A/jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLRVXeM8HmRAXcmeXj/qkjMezZpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjAwOTQ5YzAtYTZmYi0z YzA2LTgxOTgtNTEyNTUwOGVmNTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwRVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVhkmFDYqVCTv6yQypgjHmzZQfqzglXvSIeqHvngrc3miOwRlFAunvQ r6b93nKzKpUpXdyhqm6N7Knj8OwRLeT04K+Z/tk3yaSTk04JzFlUcxl7Ae8FxIgJ xfMtr2FGjE+aAFOTcOvJlkQkdfVhM3ulBwF+bA89/JIkxXh2dRD2GHM+rdyk5+nf LR7UJvAgu1a92FIPT5jtFy5Eb9SXm6CimNnWRNRkaESlrrfQftWMiZaaVSqGehXy WVvxm4yvbScUU741HDKltlQ9iKaSkBC/MVJ/UwebFf3aqgqUWoMmx5QzFSxQ6Xbe YTQqmzZV5Tt2xmIFCog1ts+tF71fwbo= -----END CERTIFICATE-----Generated at Sun Jun 1 03:13:37 2025 by rpki-client