$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03277df5-d8a7-3d04-a82d-a1014fe0940c.roa File: 03277df5-d8a7-3d04-a82d-a1014fe0940c.roa (raw, json) Hash identifier: TsZr2+TO0XkkrcH3gRAS60wF6cCd3Zr9FqCphcuzSoY= Subject key identifier: 9A:1B:1F:37:F5:B6:D1:B0:A8:F0:5F:FD:36:D7:0D:EE:22:43:6A:40 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A51D0777162C89F6D53CCC980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03277df5-d8a7-3d04-a82d-a1014fe0940c.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.203.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:77:71:62:c8:9f:6d:53:cc:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=4cd05e4b-a9db-4ef7-9aed-770490194376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2b:e6:a9:1e:57:bb:9e:58:a9:a0:9e:d6:ac: 1e:9f:dd:03:61:02:db:3d:29:c3:57:43:f3:a9:fc: ce:5e:96:94:9f:92:c0:8a:18:fd:4c:f4:dc:3f:ca: 27:8e:3a:0a:5c:09:7e:c3:ca:ea:01:43:b6:dc:59: 8f:c8:37:68:5f:d0:ff:5e:cc:67:9c:25:59:cc:96: f9:41:4d:cf:f1:40:27:31:75:eb:5c:54:52:49:80: 0d:56:12:df:19:f9:75:c9:86:43:0b:f1:29:25:2e: 70:64:54:a0:d4:33:60:b0:d0:2c:4c:20:df:cd:7c: 3b:7c:64:b3:06:99:fc:d4:2e:eb:91:ad:fd:aa:be: ff:70:5b:3c:8e:58:5e:82:5d:fb:63:97:85:88:65: 42:82:4c:d1:23:ec:51:82:94:cc:5a:49:0c:13:d4: 45:4b:62:39:bc:14:56:1e:52:45:2c:26:1d:47:1d: 32:82:23:55:6b:b2:d6:f9:42:e6:6b:83:47:59:17: ac:3c:5f:f0:b9:4c:ba:c3:65:b9:17:74:3d:84:88: 2f:df:1d:84:48:64:b6:c8:9b:d3:6f:2f:4f:59:0b: ba:8d:b3:23:8c:d2:d1:f2:24:d4:e6:64:b6:16:95: 53:b2:05:58:df:ad:5e:b6:59:3d:64:25:be:77:37: 00:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1B:1F:37:F5:B6:D1:B0:A8:F0:5F:FD:36:D7:0D:EE:22:43:6A:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03277df5-d8a7-3d04-a82d-a1014fe0940c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:bf:52:9b:9e:6e:04:f5:c8:34:4e:fd:b9:47:65:79:75:95: 8d:62:bd:10:ff:6e:04:97:96:a3:67:4a:1d:99:97:4a:8f:c5: fd:75:b6:fe:ca:13:9e:f1:6c:08:78:c9:f1:37:c3:b8:c6:7e: 15:c0:ec:88:30:52:46:bc:0a:26:16:92:10:18:36:74:c2:92: fa:11:62:68:75:1a:51:47:27:9f:74:83:e4:9f:71:ba:87:02: 97:5a:ff:d7:4a:37:5a:3d:4f:59:e5:75:58:af:90:92:5c:79: ad:7e:0c:2f:86:54:ef:4a:5a:d8:c4:85:b4:d2:36:ff:f9:7e: 0b:37:d0:c3:dd:80:fa:8b:ca:60:39:0b:48:cc:d3:88:74:af: 3c:42:98:9f:26:7b:9d:1f:76:08:37:52:7d:0c:f0:f4:dc:dd: a0:07:08:33:ce:3e:4f:59:91:91:46:79:2d:40:f1:85:8f:c1: b3:f2:19:c5:ba:bd:08:04:d1:c9:14:55:36:14:c4:5c:e7:9b: c2:97:25:f3:df:69:2b:b3:55:a8:e6:66:d3:e4:5f:29:16:bc: da:1b:2e:2a:9d:90:8c:dd:7a:16:c5:74:09:e2:97:e5:ff:29: 79:e9:61:34:a5:65:7c:65:57:42:5c:96:e9:ad:d2:fc:93:df: 0e:49:84:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0HdxYsifbVPMyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk NGNkMDVlNGItYTlkYi00ZWY3LTlhZWQtNzcwNDkwMTk0Mzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSvmqR5Xu55YqaCe1qwen90DYQLbPSnDV0Pz qfzOXpaUn5LAihj9TPTcP8onjjoKXAl+w8rqAUO23FmPyDdoX9D/XsxnnCVZzJb5 QU3P8UAnMXXrXFRSSYANVhLfGfl1yYZDC/EpJS5wZFSg1DNgsNAsTCDfzXw7fGSz Bpn81C7rka39qr7/cFs8jlhegl37Y5eFiGVCgkzRI+xRgpTMWkkME9RFS2I5vBRW HlJFLCYdRx0ygiNVa7LW+ULma4NHWResPF/wuUy6w2W5F3Q9hIgv3x2ESGS2yJvT by9PWQu6jbMjjNLR8iTU5mS2FpVTsgVY361etlk9ZCW+dzcAUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJobHzf1ttGwqPBf/TbXDe4iQ2pAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDMyNzdkZjUtZDhhNy0z ZDA0LWE4MmQtYTEwMTRmZTA5NDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8uQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFS/UpuebgT1yDRO/blHZXl1lY1ivRD/bgSXlqNnSh2Zl0qPxf11tv7K E57xbAh4yfE3w7jGfhXA7IgwUka8CiYWkhAYNnTCkvoRYmh1GlFHJ590g+SfcbqH Apda/9dKN1o9T1nldVivkJJcea1+DC+GVO9KWtjEhbTSNv/5fgs30MPdgPqLymA5 C0jM04h0rzxCmJ8me50fdgg3Un0M8PTc3aAHCDPOPk9ZkZFGeS1A8YWPwbPyGcW6 vQgE0ckUVTYUxFznm8KXJfPfaSuzVajmZtPkXykWvNobLiqdkIzdehbFdAnil+X/ KXnpYTSlZXxlV0Jclumt0vyT3w5JhCc= -----END CERTIFICATE-----Generated at Sun Jun 29 12:25:49 2025 by rpki-client