$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc50c285-c1ef-33cc-bc50-4d815f9ff74f.roa File: fc50c285-c1ef-33cc-bc50-4d815f9ff74f.roa (raw, json) Hash identifier: vmsFh28OmRsDvDD12OSX35NAFb93D6BU/s2IW7dBJWM= Subject key identifier: 16:0A:7D:5E:99:A4:16:A5:46:84:A3:64:D9:C7:F1:76:8D:DD:BF:D8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F2E54D9EF4459B51DECBF400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc50c285-c1ef-33cc-bc50-4d815f9ff74f.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.65.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:4d:9e:f4:45:9b:51:de:cb:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=d91a9376-b9d8-43d6-911b-2d1a4f4bcbf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c7:cb:ba:29:e2:b7:41:dd:47:99:ea:5d:0c: 8e:f3:0c:0b:e5:b1:e2:3d:7c:f1:c0:bb:4c:ac:e2: 04:15:1c:10:43:5c:eb:54:8c:42:56:70:11:91:72: 2d:be:f6:58:8d:4a:7a:f9:c1:72:54:1a:18:93:13: 0f:66:69:ee:fb:bc:4e:f6:e2:48:71:2a:cb:9e:9a: a2:d1:0d:10:fb:22:03:b1:36:54:34:ab:38:b0:0c: a1:87:25:1b:6e:b5:40:27:d3:ac:1e:b4:c7:19:f7: 52:55:6b:e9:46:da:b9:7f:6b:97:38:ec:9e:29:40: 87:fb:9d:a7:d4:77:ea:31:fe:4a:3f:5c:be:3d:8d: 02:62:90:c0:8f:b4:2d:bc:e3:89:21:b5:67:e1:8a: d0:f2:41:67:38:24:cc:4b:ef:94:3b:46:9e:93:b9: 34:c1:82:2b:68:94:de:3c:77:62:43:24:4e:4e:02: c1:05:bc:cf:eb:08:e6:61:49:b4:fc:f1:e4:f2:6d: 73:3b:17:21:28:54:bd:a0:11:66:a6:c7:29:d2:82: 5f:22:48:43:f5:a4:ef:7a:0a:10:16:84:eb:b9:63: a6:a1:79:00:97:6f:aa:eb:48:18:4c:fe:43:89:e6: 87:30:b9:f5:29:a4:24:fe:9f:48:fb:81:77:b4:2c: d3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0A:7D:5E:99:A4:16:A5:46:84:A3:64:D9:C7:F1:76:8D:DD:BF:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc50c285-c1ef-33cc-bc50-4d815f9ff74f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.65.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5c:44:a9:01:4b:e2:1a:c1:df:48:9f:8a:06:bc:97:08:12: 1a:af:f1:57:7c:28:a7:a8:e4:c2:3c:4e:ce:28:27:9a:d3:b9: 58:76:94:2f:fc:0b:25:30:31:ee:ac:7b:13:eb:76:3d:cc:45: ba:0e:ab:32:cb:ae:7d:d1:24:33:fe:f4:0f:4f:19:7c:50:5d: 80:7d:e4:8e:96:20:19:d5:f6:12:16:70:7a:e5:af:c6:ab:49: 64:f3:b3:4e:17:34:62:13:89:65:13:d7:c1:23:36:f6:10:8a: f2:a1:84:31:70:4b:3f:80:9f:55:96:81:6b:53:80:81:9a:7a: f6:79:d6:dc:03:3e:ca:f9:6e:c5:49:a3:a5:f8:87:a9:75:26: 4a:0d:9e:77:2c:fa:ac:52:3b:40:47:87:77:23:04:cd:74:df: 0b:5b:d5:1d:0a:c0:75:38:20:17:e8:3e:9a:29:32:92:a4:1d: 4f:f4:3a:8f:81:16:78:01:06:1b:df:e1:58:01:b2:d2:be:a0: b3:51:4c:18:03:98:b1:3e:31:d0:ff:af:92:46:2f:5b:28:35: 0f:7f:23:08:85:6a:8f:5e:fb:d9:bd:c5:9c:f7:77:cb:1a:70: fc:96:52:5d:66:ac:d2:74:8d:22:90:bc:46:72:40:f3:92:82: 2b:0e:dc:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5U2e9EWbUd7L9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZDkxYTkzNzYtYjlkOC00M2Q2LTkxMWItMmQxYTRmNGJjYmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisfLuinit0HdR5nqXQyO8wwL5bHiPXzxwLtM rOIEFRwQQ1zrVIxCVnARkXItvvZYjUp6+cFyVBoYkxMPZmnu+7xO9uJIcSrLnpqi 0Q0Q+yIDsTZUNKs4sAyhhyUbbrVAJ9OsHrTHGfdSVWvpRtq5f2uXOOyeKUCH+52n 1HfqMf5KP1y+PY0CYpDAj7QtvOOJIbVn4YrQ8kFnOCTMS++UO0aek7k0wYIraJTe PHdiQyROTgLBBbzP6wjmYUm0/PHk8m1zOxchKFS9oBFmpscp0oJfIkhD9aTvegoQ FoTruWOmoXkAl2+q60gYTP5DieaHMLn1KaQk/p9I+4F3tCzTIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYKfV6ZpBalRoSjZNnH8XaN3b/YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmM1MGMyODUtYzFlZi0z M2NjLWJjNTAtNGQ4MTVmOWZmNzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF0GAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVcRKkBS+Iawd9In4oGvJcIEhqv8Vd8KKeo5MI8Ts4oJ5rTuVh2lC/8 CyUwMe6sexPrdj3MRboOqzLLrn3RJDP+9A9PGXxQXYB95I6WIBnV9hIWcHrlr8ar SWTzs04XNGITiWUT18EjNvYQivKhhDFwSz+An1WWgWtTgIGaevZ51twDPsr5bsVJ o6X4h6l1JkoNnncs+qxSO0BHh3cjBM103wtb1R0KwHU4IBfoPpopMpKkHU/0Oo+B FngBBhvf4VgBstK+oLNRTBgDmLE+MdD/r5JGL1soNQ9/IwiFao9e+9m9xZz3d8sa cPyWUl1mrNJ0jSKQvEZyQPOSgisO3N4= -----END CERTIFICATE-----Generated at Sat Jun 7 14:08:35 2025 by rpki-client