$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19c48cbe-6f5b-31fa-bf5c-0a043dcade29.roa File: 19c48cbe-6f5b-31fa-bf5c-0a043dcade29.roa (raw, json) Hash identifier: F3aWa5XOxAAUSMWy9F1uhdXpf1NQ263Zrvf2vvhQ2yk= Subject key identifier: B7:0A:A8:BA:C0:E7:46:D6:32:E8:37:9A:39:1F:32:96:24:7E:04:AE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3B7B0FC53C7010BC229D45C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19c48cbe-6f5b-31fa-bf5c-0a043dcade29.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 16625 IP address blocks: 23.43.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:0f:c5:3c:70:10:bc:22:9d:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=f6973816-269c-42d0-a1b0-566138c246f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:99:28:48:63:5b:ce:b4:9a:a0:03:1b:78:ce: 5e:04:41:08:78:82:de:3d:2e:4d:61:f1:ea:c7:cf: 49:e5:51:cd:a3:b1:e8:84:94:3a:8e:08:89:47:c4: 33:71:7f:71:f1:f7:95:96:be:33:dc:a0:b5:95:7e: ac:d1:b5:2d:55:c5:e2:0f:35:2a:c6:21:9b:53:3a: 2e:8e:63:0a:39:78:a0:02:66:68:7d:20:46:51:d9: 7c:44:98:77:5c:26:f8:04:23:32:27:1f:97:0e:f8: 41:09:68:b0:f3:21:60:c1:72:c0:28:26:75:a0:d2: 72:3b:4f:13:a9:8b:33:c5:96:ca:b5:a0:7f:0b:cd: 3f:78:7f:26:0b:9c:5d:14:fb:e1:76:4d:95:82:7a: 90:5f:09:c5:ba:6b:34:a6:e8:bc:d6:f8:d3:ab:2c: 35:b1:a3:af:28:25:ef:12:66:85:34:3e:23:ba:0b: e6:0e:0b:62:70:ab:ce:d8:d8:4e:54:60:fb:42:a2: ef:df:17:c0:d6:64:a4:fb:1c:fc:b3:15:27:cc:d7: 22:d6:4d:a2:d1:57:f7:ba:11:e6:bb:7c:ae:8c:16: 6f:c4:0a:aa:d9:ba:d9:6c:37:34:59:9c:18:d5:6a: 67:40:1d:44:a7:ee:58:e2:f5:a3:44:41:8b:ce:ca: d7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0A:A8:BA:C0:E7:46:D6:32:E8:37:9A:39:1F:32:96:24:7E:04:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19c48cbe-6f5b-31fa-bf5c-0a043dcade29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:3d:3a:60:fd:dc:da:6d:ef:c9:49:ad:a4:bd:8b:26:d8:bb: e5:59:34:31:ea:ba:37:fe:e6:0a:13:4b:d1:cd:a1:84:7a:ea: bc:b0:1d:59:cb:e8:fc:5b:6c:f2:2f:cc:de:96:b7:5b:5b:22: ec:68:7a:79:9d:98:22:7d:a0:08:86:d1:b1:49:26:d0:1a:a2: 1b:c5:50:fe:b8:38:87:37:51:82:1a:10:96:55:11:a3:78:38: 62:4c:44:1d:24:8e:a0:5d:ff:77:7a:07:7a:30:b5:73:ca:85: 79:6d:1d:b0:4e:f5:04:77:3a:5c:20:45:92:dc:df:65:bd:aa: a6:38:21:d1:dd:42:12:3a:07:dc:9c:68:23:8d:ba:a3:ec:d3: 1e:1a:6d:a0:fe:74:d0:ab:5d:5f:d3:7b:3d:55:18:7e:d3:fe: 18:48:76:e6:4b:84:dc:40:b7:b0:41:22:eb:ee:70:5c:5d:5f: 5a:19:70:c5:46:15:f8:c3:9b:6b:07:55:2b:25:c3:32:be:08: f4:ba:d9:71:59:a9:ba:4c:e9:5d:73:ed:7d:f4:f2:3d:a0:98: 53:be:d7:2e:8f:0e:83:f9:19:3f:20:42:55:dc:8a:dc:9a:f2: 9f:85:35:b7:75:26:cf:a5:fd:dc:6d:f2:c2:e3:52:fa:6d:75: f2:ed:7d:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ew/FPHAQvCKdRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk ZjY5NzM4MTYtMjY5Yy00MmQwLWExYjAtNTY2MTM4YzI0NmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpkoSGNbzrSaoAMbeM5eBEEIeILePS5NYfHq x89J5VHNo7HohJQ6jgiJR8QzcX9x8feVlr4z3KC1lX6s0bUtVcXiDzUqxiGbUzou jmMKOXigAmZofSBGUdl8RJh3XCb4BCMyJx+XDvhBCWiw8yFgwXLAKCZ1oNJyO08T qYszxZbKtaB/C80/eH8mC5xdFPvhdk2VgnqQXwnFums0pui81vjTqyw1saOvKCXv EmaFND4jugvmDgticKvO2NhOVGD7QqLv3xfA1mSk+xz8sxUnzNci1k2i0Vf3uhHm u3yujBZvxAqq2brZbDc0WZwY1WpnQB1Ep+5Y4vWjREGLzsrXUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcKqLrA50bWMug3mjkfMpYkfgSuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTljNDhjYmUtNmY1Yi0z MWZhLWJmNWMtMGEwNDNkY2FkZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyvoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH89OmD93Npt78lJraS9iybYu+VZNDHqujf+5goTS9HNoYR66rywHVnL 6PxbbPIvzN6Wt1tbIuxoenmdmCJ9oAiG0bFJJtAaohvFUP64OIc3UYIaEJZVEaN4 OGJMRB0kjqBd/3d6B3owtXPKhXltHbBO9QR3OlwgRZLc32W9qqY4IdHdQhI6B9yc aCONuqPs0x4abaD+dNCrXV/Tez1VGH7T/hhIduZLhNxAt7BBIuvucFxdX1oZcMVG FfjDm2sHVSslwzK+CPS62XFZqbpM6V1z7X308j2gmFO+1y6PDoP5GT8gQlXcitya 8p+FNbd1Js+l/dxt8sLjUvptdfLtfdA= -----END CERTIFICATE-----Generated at Sun Jun 29 12:36:37 2025 by rpki-client