$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0138db54-46af-32ca-ade4-a4af233fb028.roa File: 0138db54-46af-32ca-ade4-a4af233fb028.roa (raw, json) Hash identifier: KtE0PCxvK2EqGeWi0E7mosKRNGYGyTY9N9TAbjtl6Oc= Subject key identifier: C8:DC:26:A5:0A:D3:9B:16:30:67:C0:CE:39:01:7E:E3:44:DC:1F:2E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3B7B0EFDC13CBC72BECCDEC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0138db54-46af-32ca-ade4-a4af233fb028.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 20940 IP address blocks: 23.43.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:0e:fd:c1:3c:bc:72:be:cc:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=44042554-f1f5-403b-8463-619432fee49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:52:82:33:c5:84:b3:8c:2e:06:e0:11:76:9a: f7:8e:a8:3a:f6:74:07:06:c1:45:2f:d7:27:1d:18: 1a:10:2d:aa:30:c3:97:34:ac:08:96:74:1c:b7:41: ba:17:0b:a1:1c:86:a3:75:69:09:3f:7e:74:0d:d6: fb:81:4b:15:cb:f3:ca:8c:59:04:5b:43:31:c4:a7: 24:80:6d:fb:b8:c8:6c:0d:f4:82:97:21:a7:18:23: 43:41:cb:c9:28:37:2e:92:0f:79:dd:55:97:c9:1d: 2e:d7:9a:b7:7b:28:27:0f:8f:25:3e:eb:35:90:fa: 22:f2:f4:f3:5c:65:45:f2:8f:e5:60:d6:4d:70:09: 35:a3:e5:d9:84:67:9a:ed:0a:04:3e:c0:b9:5d:b0: 2b:ec:95:f7:2c:0d:17:42:c7:63:38:96:40:40:55: 48:46:22:72:c6:eb:4a:a3:36:55:ff:da:25:79:9b: fe:69:85:0d:8b:ea:9a:e0:4a:00:82:23:a5:94:4e: 79:7a:d1:69:ce:57:98:58:67:00:5e:12:c5:5c:d0: a4:71:a7:a0:c0:68:1c:23:3c:2e:73:5c:0d:f3:ce: 01:c0:1e:f0:5f:00:b3:86:c2:f2:75:bf:fe:5b:5a: af:b3:cb:ba:cb:b1:88:df:00:e9:40:09:36:70:32: db:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DC:26:A5:0A:D3:9B:16:30:67:C0:CE:39:01:7E:E3:44:DC:1F:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0138db54-46af-32ca-ade4-a4af233fb028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:e1:4a:a1:07:77:73:91:61:c6:50:b5:6f:90:75:9c:7c:f3: 26:04:49:24:b4:3c:d2:49:87:01:a5:2e:e0:93:2b:1e:2f:09: ea:1e:b3:00:b9:17:fd:16:81:26:21:c7:2b:7d:49:2d:c9:90: 67:74:d6:e2:a0:1c:51:81:66:4a:c0:8d:3d:4d:3f:87:35:d6: 02:69:39:11:86:6d:27:fa:54:2a:d8:92:12:f2:7f:f9:f8:f8: da:ea:d5:6f:7e:ae:d3:43:62:78:1a:c1:dc:15:78:4a:79:3e: 9e:88:33:c6:ef:5a:94:29:cf:13:bc:99:aa:b9:1f:62:78:28: 96:87:e3:28:22:83:8d:3e:e1:be:fc:0d:ca:8a:bf:77:36:8b: d7:7c:d2:ba:4e:33:0f:f1:d2:ed:77:ac:4b:25:00:a7:bf:25: b0:7a:3b:f7:c0:05:f1:29:fe:33:0a:7e:2a:ae:87:a2:8d:58: 19:e2:33:bd:c3:57:4c:18:45:84:2c:a1:af:8f:24:38:e7:d3: 63:84:06:09:df:de:81:65:21:63:f5:dc:53:4c:8a:6b:84:7f: db:12:b9:f2:93:9d:50:da:15:fc:f6:dd:74:ea:62:b4:7c:f6: aa:db:43:40:1f:95:77:ea:39:45:4e:69:71:b1:7f:f1:88:56: 4b:5e:c7:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ew79wTy8cr7M3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk NDQwNDI1NTQtZjFmNS00MDNiLTg0NjMtNjE5NDMyZmVlNDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VKCM8WEs4wuBuARdpr3jqg69nQHBsFFL9cn HRgaEC2qMMOXNKwIlnQct0G6FwuhHIajdWkJP350Ddb7gUsVy/PKjFkEW0MxxKck gG37uMhsDfSClyGnGCNDQcvJKDcukg953VWXyR0u15q3eygnD48lPus1kPoi8vTz XGVF8o/lYNZNcAk1o+XZhGea7QoEPsC5XbAr7JX3LA0XQsdjOJZAQFVIRiJyxutK ozZV/9oleZv+aYUNi+qa4EoAgiOllE55etFpzleYWGcAXhLFXNCkcaegwGgcIzwu c1wN884BwB7wXwCzhsLydb/+W1qvs8u6y7GI3wDpQAk2cDLbWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjcJqUK05sWMGfAzjkBfuNE3B8uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDEzOGRiNTQtNDZhZi0z MmNhLWFkZTQtYTRhZjIzM2ZiMDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyszMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvhSqEHd3ORYcZQtW+QdZx88yYESSS0PNJJhwGlLuCTKx4vCeoeswC5 F/0WgSYhxyt9SS3JkGd01uKgHFGBZkrAjT1NP4c11gJpORGGbSf6VCrYkhLyf/n4 +Nrq1W9+rtNDYngawdwVeEp5Pp6IM8bvWpQpzxO8maq5H2J4KJaH4ygig40+4b78 DcqKv3c2i9d80rpOMw/x0u13rEslAKe/JbB6O/fABfEp/jMKfiquh6KNWBniM73D V0wYRYQsoa+PJDjn02OEBgnf3oFlIWP13FNMimuEf9sSufKTnVDaFfz23XTqYrR8 9qrbQ0AflXfqOUVOaXGxf/GIVktex8s= -----END CERTIFICATE-----Generated at Tue Jul 1 12:54:44 2025 by rpki-client