$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16a31f3d-4869-3d0c-bd85-c252b9a1e5d2.roa File: 16a31f3d-4869-3d0c-bd85-c252b9a1e5d2.roa (raw, json) Hash identifier: 0gVjJhwOw70lnKRpg/y7gbFS8JAv+FBn7lbfZIjinys= Subject key identifier: 23:9A:22:42:EF:8E:C7:F1:07:AC:6C:10:D8:08:C1:1B:10:46:B3:F9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A43DB13B8F5171F1FCC932500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16a31f3d-4869-3d0c-bd85-c252b9a1e5d2.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.52.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:13:b8:f5:17:1f:1f:cc:93:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=7c2bc16c-d8da-4813-9694-b4513831e506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ca:a7:69:30:f8:d7:e1:40:62:67:fa:cd:b3: 4a:e0:3b:68:58:13:04:b2:68:20:25:6e:51:21:7b: ba:26:31:8c:1f:5b:91:5e:3d:a3:df:84:60:9c:4e: 12:3e:b3:85:bc:35:fc:2c:03:3f:66:84:40:40:ba: c5:aa:4e:04:c0:92:58:9b:67:0e:ed:db:84:ec:88: fa:44:73:54:69:2b:51:7d:fa:0e:de:c3:41:62:6a: 60:0b:78:21:74:51:24:32:2a:aa:b0:bf:a5:9e:6f: fd:ad:55:27:b1:fe:a2:97:e7:0c:67:3f:e2:3b:8c: 48:e2:7c:4c:72:b6:11:27:12:37:fc:ea:e7:26:ac: 8e:63:0e:a9:66:f3:ca:d9:46:c1:88:af:76:36:d4: 01:ee:5d:7c:19:ba:88:56:ea:03:25:02:c0:56:3f: d0:e6:42:12:09:f1:ff:9f:3d:c6:8d:e4:45:65:72: b8:63:b6:56:41:e8:4b:3e:7a:e2:4b:8d:e5:d1:72: c8:8c:32:b5:e4:3d:c6:fe:5c:84:50:6e:15:d6:35: a3:e3:df:ab:aa:5e:80:6f:1a:4d:4a:73:86:66:74: 57:95:59:6c:6d:17:22:14:5e:8f:68:07:38:ad:e3: 0c:a5:43:5a:32:cc:d0:fa:74:00:10:bb:0d:a8:a2: b0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9A:22:42:EF:8E:C7:F1:07:AC:6C:10:D8:08:C1:1B:10:46:B3:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16a31f3d-4869-3d0c-bd85-c252b9a1e5d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:02:fb:8e:67:11:62:90:cd:71:ef:4d:1f:8d:2b:13:c8:a4: fa:3a:e9:3e:cb:1c:35:ec:41:6f:cd:50:8e:1e:27:46:45:c4: 61:67:ee:03:d1:74:9b:06:48:31:6e:43:b0:f3:54:ad:e8:97: a9:c2:a9:f8:8f:ba:79:de:c6:91:9e:11:df:ee:6c:43:ad:b6: ed:1a:20:4d:86:e6:7b:b8:ae:0f:6c:6b:d6:40:65:6d:4b:60: c9:ac:07:f9:06:20:4d:ec:d4:85:68:f8:09:ba:17:ba:95:54: 78:39:f4:e2:68:61:92:42:29:09:c7:8e:f2:dc:bd:45:d0:15: 41:ae:fc:a5:6c:4d:f7:9d:15:87:58:03:68:bf:66:40:1f:d3: a9:38:2d:78:c8:63:f4:00:8a:05:44:14:2e:29:99:05:04:d2: 30:10:97:89:cb:f1:ae:3d:99:b3:81:20:33:33:ce:41:f5:ab: fa:81:f1:c6:47:79:b8:f8:3f:08:f3:ce:a0:80:85:fc:8f:e1: 34:ec:e5:0e:4c:e1:ae:4b:e7:fd:58:45:0b:2e:be:05:18:42: 36:61:20:e7:11:74:d1:87:4f:0d:82:7c:d5:33:ee:86:59:e3: 16:3e:62:8c:92:28:7f:96:b8:36:c9:9b:91:60:70:5c:18:22: 12:88:59:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2xO49RcfH8yTJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk N2MyYmMxNmMtZDhkYS00ODEzLTk2OTQtYjQ1MTM4MzFlNTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcqnaTD41+FAYmf6zbNK4DtoWBMEsmggJW5R IXu6JjGMH1uRXj2j34RgnE4SPrOFvDX8LAM/ZoRAQLrFqk4EwJJYm2cO7duE7Ij6 RHNUaStRffoO3sNBYmpgC3ghdFEkMiqqsL+lnm/9rVUnsf6il+cMZz/iO4xI4nxM crYRJxI3/OrnJqyOYw6pZvPK2UbBiK92NtQB7l18GbqIVuoDJQLAVj/Q5kISCfH/ nz3GjeRFZXK4Y7ZWQehLPnriS43l0XLIjDK15D3G/lyEUG4V1jWj49+rql6AbxpN SnOGZnRXlVlsbRciFF6PaAc4reMMpUNaMszQ+nQAELsNqKKwFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOaIkLvjsfxB6xsENgIwRsQRrP5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTZhMzFmM2QtNDg2OS0z ZDBjLWJkODUtYzI1MmI5YTFlNWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzSOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgC+45nEWKQzXHvTR+NKxPIpPo66T7LHDXsQW/NUI4eJ0ZFxGFn7gPR dJsGSDFuQ7DzVK3ol6nCqfiPunnexpGeEd/ubEOttu0aIE2G5nu4rg9sa9ZAZW1L YMmsB/kGIE3s1IVo+Am6F7qVVHg59OJoYZJCKQnHjvLcvUXQFUGu/KVsTfedFYdY A2i/ZkAf06k4LXjIY/QAigVEFC4pmQUE0jAQl4nL8a49mbOBIDMzzkH1q/qB8cZH ebj4PwjzzqCAhfyP4TTs5Q5M4a5L5/1YRQsuvgUYQjZhIOcRdNGHTw2CfNUz7oZZ 4xY+YoySKH+WuDbJm5FgcFwYIhKIWb4= -----END CERTIFICATE-----Generated at Sun Jun 29 12:24:57 2025 by rpki-client