$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0fa11e3-e167-3081-89af-43e84523a431.roa File: f0fa11e3-e167-3081-89af-43e84523a431.roa (raw, json) Hash identifier: ref1xHv+Cspmi9PvAbPpxOyhKGjlo6mQFKkpTug8xgw= Subject key identifier: CE:89:B2:74:74:CF:A4:2B:80:9A:79:88:D8:D6:48:A5:A0:81:DE:91 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A009692F1D5399CF872E84BC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0fa11e3-e167-3081-89af-43e84523a431.roa Signing time: Wed 28 May 2025 10:44:09 +0000 ROA not before: Wed 28 May 2025 10:44:09 +0000 ROA not after: Tue 26 Aug 2025 10:44:09 +0000 asID: 20940 IP address blocks: 23.197.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:96:92:f1:d5:39:9c:f8:72:e8:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 10:44:09 2025 GMT Not After : Aug 26 10:44:09 2025 GMT Subject: CN=fe2fe07b-8112-4aa9-a466-0a2a84d542e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:70:5c:1e:7a:a0:bb:c5:03:fb:36:f6:cc:44: 94:24:15:df:88:ee:31:6b:35:fc:a1:a9:00:2d:fe: a2:49:54:c8:d5:18:10:10:b4:e5:58:77:d1:27:a6: 87:73:d3:12:05:ac:98:64:ff:18:18:ab:e6:38:01: 43:f7:a4:1b:91:6c:fd:9d:0c:11:54:78:47:33:f9: 78:54:60:8b:74:ab:75:49:8b:12:7b:85:11:a0:ba: a0:7b:9d:5f:71:8f:32:43:58:c1:7d:27:e6:d1:9d: 83:32:6c:da:13:f1:b5:55:61:b7:3e:58:b9:bb:62: cc:10:46:4f:88:6e:cd:ae:ab:e5:52:e2:f2:d2:52: 87:c8:99:30:3f:13:95:d7:f7:bc:3d:c3:47:2c:9e: c5:94:48:b0:97:cf:1e:fd:e0:c5:c0:d3:7b:83:6d: eb:b2:e9:63:e0:4f:81:fb:e3:d4:90:c0:20:2c:99: 5f:49:98:99:12:58:05:8d:8b:0b:18:c9:fb:64:ef: 7a:ec:82:44:31:a7:68:94:1f:ae:9b:0e:f2:d6:b1: 8a:40:f3:d7:46:de:9a:fa:45:a7:b9:49:0b:99:af: 14:ef:13:ba:a5:21:cb:e7:20:54:e5:04:9a:f5:15: 2a:5a:22:79:35:6e:da:d2:a5:0a:1d:a0:07:fa:66: 65:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:89:B2:74:74:CF:A4:2B:80:9A:79:88:D8:D6:48:A5:A0:81:DE:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0fa11e3-e167-3081-89af-43e84523a431.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:c2:24:f6:bc:b7:14:e3:bc:c6:7a:85:27:66:1c:9b:3f:8b: b3:c8:2e:84:7a:ac:a2:7e:ba:f7:68:b2:57:de:a7:9e:9a:1a: ad:b6:e8:56:21:c0:f0:f1:5e:3d:b4:b4:b3:be:a1:21:58:58: 2c:b4:be:0f:9c:da:ff:a6:74:ad:fa:8b:02:19:d4:51:70:9a: 57:6a:81:b1:cd:8a:dd:65:ce:b1:f6:9d:13:2c:84:2c:40:92: 8e:97:1e:05:6c:7c:71:b8:11:cf:e2:5a:27:b2:47:22:7b:cf: 13:95:36:e1:20:38:85:28:6c:93:7d:26:8b:4b:bd:00:94:00: ca:68:35:ea:e5:db:74:33:bb:9e:ff:dd:02:93:00:df:f1:ad: 3a:de:42:32:7e:63:7a:ae:a9:91:49:9b:b3:9c:92:d4:3f:06: ea:17:d3:7b:f3:7f:8d:54:bf:90:49:1d:10:08:8b:fe:52:a2: 62:6a:93:b3:2e:1e:6a:17:1e:bf:a2:49:d0:03:96:5e:a9:68: 8a:59:87:c1:81:5e:2a:52:c2:cd:cb:bd:1e:08:47:ad:ff:99: ca:bd:f8:53:c7:65:73:c0:83:7d:44:2a:5c:f1:05:60:b7:47: c9:18:31:a9:53:4f:19:13:98:f9:39:6d:61:6a:56:f2:d1:47: 9d:83:0b:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoAlpLx1Tmc+HLoS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyODEwNDQwOVoXDTI1MDgyNjEwNDQwOVowLzEtMCsGA1UEAxMk ZmUyZmUwN2ItODExMi00YWE5LWE0NjYtMGEyYTg0ZDU0MmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXBcHnqgu8UD+zb2zESUJBXfiO4xazX8oakA Lf6iSVTI1RgQELTlWHfRJ6aHc9MSBayYZP8YGKvmOAFD96QbkWz9nQwRVHhHM/l4 VGCLdKt1SYsSe4URoLqge51fcY8yQ1jBfSfm0Z2DMmzaE/G1VWG3Pli5u2LMEEZP iG7NrqvlUuLy0lKHyJkwPxOV1/e8PcNHLJ7FlEiwl88e/eDFwNN7g23rsulj4E+B ++PUkMAgLJlfSZiZElgFjYsLGMn7ZO967IJEMadolB+umw7y1rGKQPPXRt6a+kWn uUkLma8U7xO6pSHL5yBU5QSa9RUqWiJ5NW7a0qUKHaAH+mZlYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6JsnR0z6QrgJp5iNjWSKWggd6RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjBmYTExZTMtZTE2Ny0z MDgxLTg5YWYtNDNlODQ1MjNhNDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8VMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLCJPa8txTjvMZ6hSdmHJs/i7PILoR6rKJ+uvdoslfep56aGq226FYh wPDxXj20tLO+oSFYWCy0vg+c2v+mdK36iwIZ1FFwmldqgbHNit1lzrH2nRMshCxA ko6XHgVsfHG4Ec/iWieyRyJ7zxOVNuEgOIUobJN9JotLvQCUAMpoNerl23Qzu57/ 3QKTAN/xrTreQjJ+Y3quqZFJm7OcktQ/BuoX03vzf41Uv5BJHRAIi/5SomJqk7Mu HmoXHr+iSdADll6paIpZh8GBXipSws3LvR4IR63/mcq9+FPHZXPAg31EKlzxBWC3 R8kYMalTTxkTmPk5bWFqVvLRR52DC9Y= -----END CERTIFICATE-----Generated at Thu Jun 5 18:42:24 2025 by rpki-client