$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9f3ced6-d4ef-3297-b890-7b65f9d6911e.roa File: f9f3ced6-d4ef-3297-b890-7b65f9d6911e.roa (raw, json) Hash identifier: 0Y5knRJQ45vJzCTuboJ4Rd4GDEi58cOI9pFImrlbC8w= Subject key identifier: E1:8C:E5:23:D5:60:17:C0:07:65:81:B3:8A:95:4E:3C:04:53:A0:93 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A173000D4B774B820EA123BF0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9f3ced6-d4ef-3297-b890-7b65f9d6911e.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.4.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:00:d4:b7:74:b8:20:ea:12:3b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=e4d953e2-9bad-452f-8129-b839ce723f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a8:d9:a3:80:e2:b8:a7:2e:dc:be:23:f0:36: be:d6:c8:89:66:00:21:27:15:12:16:28:d0:e3:29: 86:48:d9:cc:b9:92:f7:ac:9c:10:0e:06:28:9f:f7: 25:f6:39:bc:57:e5:98:47:95:ea:f5:46:a0:57:bf: 6b:e9:2a:1a:8d:48:c6:ec:9f:ed:42:fe:a1:6c:2e: 97:9c:e8:ad:c2:9b:0b:af:83:85:d9:22:0b:2e:b1: a3:3e:4d:4f:71:36:e1:f5:46:b4:68:1c:bc:46:6d: f8:1d:b1:e5:5f:24:2c:ff:45:dc:b0:3d:57:8e:24: c9:db:f2:10:ff:3d:52:c5:0e:b0:17:2d:42:b0:44: 0d:3e:e3:f0:b2:1b:6e:1d:24:fe:6e:c5:2c:76:af: d1:e5:7b:d2:e1:b7:13:3a:10:40:8a:c4:0f:31:63: 00:31:fa:cc:a9:66:c8:97:25:bc:f5:80:bb:d1:bd: dc:e4:f6:37:18:a5:4d:14:c7:66:32:13:21:13:c2: f0:3a:59:9c:21:13:e0:77:90:99:c4:01:14:6d:7a: a5:f4:9e:66:f3:72:3f:49:db:5a:a7:f5:75:2f:6a: 0a:0d:62:72:b1:df:f0:d9:1a:47:fb:41:5d:62:29: e8:1b:f7:04:69:10:e1:e1:4f:51:63:e6:22:8b:57: f8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8C:E5:23:D5:60:17:C0:07:65:81:B3:8A:95:4E:3C:04:53:A0:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9f3ced6-d4ef-3297-b890-7b65f9d6911e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.4.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:52:65:2c:2b:01:35:d9:28:d3:30:39:8c:29:d8:73:a6:71: d4:c9:d9:7d:a5:09:77:f4:ae:8a:0a:ec:14:94:b4:ba:06:ef: 19:4f:65:1b:4d:84:6c:1d:c8:3a:d0:ea:3b:f8:67:39:e7:e0: 99:63:8f:65:0b:4f:1c:22:6e:d7:b1:c6:f9:81:5c:41:99:29: d5:08:2d:25:e7:ff:4d:7b:a7:12:40:16:6d:73:2e:41:6d:4f: 8e:2e:61:82:e7:6d:63:63:5f:67:7e:c2:eb:36:a8:57:3d:90: 30:6a:f7:22:6c:a5:33:c1:21:fb:be:54:3b:e9:91:6d:97:60: 95:67:cc:01:31:56:51:3f:1e:16:b6:7d:d7:59:12:d2:f2:a2: 70:aa:a9:8e:a7:4b:ba:98:d0:eb:b0:26:46:81:73:75:c5:11: 7b:eb:1a:37:2f:28:0f:44:1a:f9:46:31:a2:47:c2:2a:9f:f3: 69:63:e5:7c:e5:ff:9e:21:3f:de:61:76:98:19:7e:61:0f:a1: 66:76:03:af:5a:45:43:23:09:bb:cc:4d:de:94:43:ba:b0:d8: d9:7b:9d:6e:2a:40:b0:68:8d:a1:aa:04:21:aa:dd:7a:45:6f: b5:7a:3b:64:00:8a:a4:1c:ae:1e:4b:7b:cf:82:69:1a:df:72: e5:a2:dc:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMADUt3S4IOoSO/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk ZTRkOTUzZTItOWJhZC00NTJmLTgxMjktYjgzOWNlNzIzZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqjZo4DiuKcu3L4j8Da+1siJZgAhJxUSFijQ 4ymGSNnMuZL3rJwQDgYon/cl9jm8V+WYR5Xq9UagV79r6SoajUjG7J/tQv6hbC6X nOitwpsLr4OF2SILLrGjPk1PcTbh9Ua0aBy8Rm34HbHlXyQs/0XcsD1XjiTJ2/IQ /z1SxQ6wFy1CsEQNPuPwshtuHST+bsUsdq/R5XvS4bcTOhBAisQPMWMAMfrMqWbI lyW89YC70b3c5PY3GKVNFMdmMhMhE8LwOlmcIRPgd5CZxAEUbXql9J5m83I/Sdta p/V1L2oKDWJysd/w2RpH+0FdYinoG/cEaRDh4U9RY+Yii1f4nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGM5SPVYBfAB2WBs4qVTjwEU6CTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjlmM2NlZDYtZDRlZi0z Mjk3LWI4OTAtN2I2NWY5ZDY5MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwRdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxSZSwrATXZKNMwOYwp2HOmcdTJ2X2lCXf0rooK7BSUtLoG7xlPZRtN hGwdyDrQ6jv4Zznn4Jljj2ULTxwibtexxvmBXEGZKdUILSXn/017pxJAFm1zLkFt T44uYYLnbWNjX2d+wus2qFc9kDBq9yJspTPBIfu+VDvpkW2XYJVnzAExVlE/Hha2 fddZEtLyonCqqY6nS7qY0OuwJkaBc3XFEXvrGjcvKA9EGvlGMaJHwiqf82lj5Xzl /54hP95hdpgZfmEPoWZ2A69aRUMjCbvMTd6UQ7qw2Nl7nW4qQLBojaGqBCGq3XpF b7V6O2QAiqQcrh5Le8+CaRrfcuWi3JE= -----END CERTIFICATE-----Generated at Thu Jun 5 18:21:11 2025 by rpki-client