$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/158874c9-af52-3f04-b228-4ec57d2b3dc3.roa File: 158874c9-af52-3f04-b228-4ec57d2b3dc3.roa (raw, json) Hash identifier: cvuMc2tvNtkOseS5e2SPlaeWjxnB7YyYFQtCLwQ97a8= Subject key identifier: 37:A3:A7:BE:AC:F4:9A:B4:40:78:A6:20:C8:A9:05:48:24:25:24:21 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A42758E26BF61F96B12BC1E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/158874c9-af52-3f04-b228-4ec57d2b3dc3.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.50.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:8e:26:bf:61:f9:6b:12:bc:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=20858a10-6141-4bcc-ba99-339feceefd39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:8c:c5:a5:43:46:43:71:be:5c:af:d6:77: dd:a5:14:e1:69:02:89:50:8c:2a:11:c8:94:0d:f2: a1:b5:71:ab:96:d2:d3:62:d5:d2:42:26:1f:6e:3a: 1c:4d:f7:07:13:4e:fa:ff:12:1d:e9:1a:b9:a3:f6: 2e:64:e5:4b:c6:c9:9c:52:ce:8a:0a:0a:5a:1e:b7: 63:df:a6:e6:c3:a4:96:a1:6a:3e:fb:b0:4c:ea:c1: ef:bf:85:f5:48:33:3e:8d:00:3d:ce:00:91:2b:ec: 7e:ae:99:b2:a2:64:02:f4:ee:a5:2c:db:9c:4b:cb: 7a:7a:bb:8a:78:6a:fc:71:54:fc:5a:6e:dd:f9:85: a7:24:9c:b5:08:8a:52:7a:c0:69:41:9f:6b:61:84: f2:69:11:83:34:a4:de:41:31:87:c0:e2:13:33:db: bd:5d:08:c7:fa:a4:3c:83:f0:c0:8c:35:93:05:33: 62:6f:4b:bb:b0:08:13:c0:d7:31:03:09:9c:d9:48: e0:e7:33:ab:be:00:a9:db:e2:87:78:55:05:27:91: 33:e3:58:e8:bd:3d:6e:6e:22:5c:01:a9:d1:b7:da: 52:40:13:f8:94:9c:24:d0:3a:f4:35:6e:89:5b:04: a9:f6:5e:77:00:ea:f7:ed:35:03:e0:4a:7a:b5:0e: f8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A3:A7:BE:AC:F4:9A:B4:40:78:A6:20:C8:A9:05:48:24:25:24:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/158874c9-af52-3f04-b228-4ec57d2b3dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.50.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:22:47:d2:b1:ac:e0:31:4a:24:c1:86:49:98:c1:2d:be:1e: cd:7d:99:22:4e:75:eb:5e:b4:f2:30:f9:bd:56:de:4c:11:0d: 44:00:3d:0c:2c:ec:a7:de:9c:67:eb:57:94:c8:d9:ff:59:a0: de:62:bf:89:87:72:08:71:32:f0:c4:e2:90:a8:02:23:84:62: a9:d7:a2:2f:11:fd:b3:71:1a:07:98:f1:cc:75:95:b9:59:76: ab:d1:95:71:d6:2b:2e:94:b2:fd:f1:0f:0f:98:20:40:bb:c9: 90:27:4c:94:f2:09:67:9c:b5:76:b0:0d:d5:af:61:30:9a:39: 5c:8a:23:8e:49:ea:2c:0d:8d:e1:27:9a:48:ba:53:79:04:07: 46:c8:75:58:98:01:59:cb:e6:ea:63:a6:70:9b:f5:59:58:6c: 07:19:d5:65:a0:13:25:66:8b:30:57:8a:fa:8c:19:22:6f:0e: ba:a0:21:4e:7a:c2:c5:13:d8:6f:1b:2b:92:98:70:f1:a9:99: 04:24:0b:0d:d7:c8:43:98:5c:f1:13:06:7b:f2:f7:ac:a9:1d: 95:6b:e2:70:4a:0e:95:e8:dd:c0:68:b9:80:fe:20:ec:dc:30: 64:bd:c6:db:ee:9d:2c:13:b0:ac:11:9f:ce:b0:a8:59:25:4a: 63:0e:61:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdY4mv2H5axK8HoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk MjA4NThhMTAtNjE0MS00YmNjLWJhOTktMzM5ZmVjZWVmZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAKMxaVDRkNxvlyv1nfdpRThaQKJUIwqEciU DfKhtXGrltLTYtXSQiYfbjocTfcHE076/xId6Rq5o/YuZOVLxsmcUs6KCgpaHrdj 36bmw6SWoWo++7BM6sHvv4X1SDM+jQA9zgCRK+x+rpmyomQC9O6lLNucS8t6eruK eGr8cVT8Wm7d+YWnJJy1CIpSesBpQZ9rYYTyaRGDNKTeQTGHwOITM9u9XQjH+qQ8 g/DAjDWTBTNib0u7sAgTwNcxAwmc2Ujg5zOrvgCp2+KHeFUFJ5Ez41jovT1ubiJc AanRt9pSQBP4lJwk0Dr0NW6JWwSp9l53AOr37TUD4Ep6tQ74oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDejp76s9Jq0QHimIMipBUgkJSQhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTU4ODc0YzktYWY1Mi0z ZjA0LWIyMjgtNGVjNTdkMmIzZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzLpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoiR9KxrOAxSiTBhkmYwS2+Hs19mSJOdetetPIw+b1W3kwRDUQAPQws 7KfenGfrV5TI2f9ZoN5iv4mHcghxMvDE4pCoAiOEYqnXoi8R/bNxGgeY8cx1lblZ dqvRlXHWKy6Usv3xDw+YIEC7yZAnTJTyCWectXawDdWvYTCaOVyKI45J6iwNjeEn mki6U3kEB0bIdViYAVnL5upjpnCb9VlYbAcZ1WWgEyVmizBXivqMGSJvDrqgIU56 wsUT2G8bK5KYcPGpmQQkCw3XyEOYXPETBnvy96ypHZVr4nBKDpXo3cBouYD+IOzc MGS9xtvunSwTsKwRn86wqFklSmMOYYs= -----END CERTIFICATE-----Generated at Sun Jun 29 14:30:50 2025 by rpki-client