$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b74dce2-5925-344c-a8e7-24e3fa57ca20.roa File: 1b74dce2-5925-344c-a8e7-24e3fa57ca20.roa (raw, json) Hash identifier: GKhgkaMB/VQIwUQ6KRZsEhyMucktJ0NLOyiwpIQCEY4= Subject key identifier: D6:6F:79:F9:9D:46:2C:FA:0D:28:43:89:3B:83:A9:3F:A1:49:6D:65 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3B7B3CD0CF08809CC3799A10 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b74dce2-5925-344c-a8e7-24e3fa57ca20.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 20940 IP address blocks: 23.44.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:3c:d0:cf:08:80:9c:c3:79:9a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=164be032-a844-4f11-b7db-9c580b866f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:81:63:ff:08:5c:5f:81:ed:ce:bf:b7:56:7a: e8:68:58:49:6d:59:c0:f6:bf:25:d2:92:a3:28:8e: e4:81:47:81:37:52:32:cd:60:b1:1c:98:6e:e4:22: 75:fc:5f:ed:f6:34:a2:1e:ff:2b:64:3b:0a:27:48: 79:0c:d6:ad:78:6c:3c:07:92:cf:5d:65:7a:4a:c6: 15:64:e7:b7:75:86:24:52:84:db:42:ac:6f:a0:8f: 06:8a:e8:3a:75:85:0a:f2:33:1d:56:ed:d7:b7:1c: f6:43:f3:76:ab:14:11:47:99:60:92:b6:80:16:d7: e1:1a:e7:25:2c:24:0c:ed:dd:1a:91:bf:d4:d0:4c: 90:35:71:e9:44:9a:a9:56:3c:59:12:6f:11:e9:ca: 12:a4:ff:0d:d6:6c:68:8e:c9:8f:8f:f4:d5:60:16: 42:9d:3f:80:5e:e2:44:32:ec:dd:0c:41:db:d7:f2: 54:d3:e4:0b:bf:98:41:aa:a2:4e:62:c1:18:20:e1: 6f:08:c6:a7:16:8d:ca:aa:f0:51:e9:49:e0:da:2b: d8:73:96:3a:e3:94:9c:8c:f7:1a:cf:ed:03:1e:dd: e2:b7:15:af:10:e7:b9:d0:26:d6:19:bc:3b:e8:7c: 1c:b8:a5:e6:5c:ee:57:df:e1:a5:ed:a5:7b:80:0a: 71:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6F:79:F9:9D:46:2C:FA:0D:28:43:89:3B:83:A9:3F:A1:49:6D:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b74dce2-5925-344c-a8e7-24e3fa57ca20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:02:58:17:6d:98:91:cd:5a:82:a2:61:b2:28:28:b9:e5:4d: 1a:ba:3e:80:d2:2b:6a:7f:63:7f:cc:db:ff:2e:23:39:b4:8c: 55:81:b6:6d:a9:37:63:0a:53:b4:b5:ea:39:a3:53:de:e5:8c: 4b:2d:69:1c:8d:58:67:01:88:26:7e:95:13:24:16:88:2f:c6: 7f:1d:04:88:f5:8d:11:21:b2:4b:1c:b8:04:ab:eb:05:57:cc: 22:9d:78:57:03:63:a9:36:20:3a:0c:1b:4c:c0:e0:19:9d:67: 5f:34:30:0a:07:2a:f0:62:8b:96:95:dd:fb:55:61:c8:cb:53: 98:e7:f9:a5:45:f0:42:38:3a:88:b2:38:8e:8a:7e:2e:ae:83: d8:dd:6c:0c:6e:f7:2e:aa:d0:09:a9:61:3a:3f:de:a5:a5:78: 82:7d:74:9e:6e:a8:b7:ac:cd:8b:a5:52:32:bb:6e:cc:4c:1f: f8:3d:d3:99:5d:38:6f:ba:8b:dd:e4:e5:96:ae:f5:14:53:a6: bf:7d:06:5c:a1:d6:fe:b3:34:f5:f2:8f:ba:1e:58:ef:58:76: 33:34:df:9f:e8:80:fc:a4:7f:b9:6f:6c:4a:a2:b6:c5:73:2a: ce:52:46:8a:8f:29:19:0c:f0:7d:5c:23:ed:51:9d:ae:bb:10: d9:50:45:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ezzQzwiAnMN5mhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk MTY0YmUwMzItYTg0NC00ZjExLWI3ZGItOWM1ODBiODY2ZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIFj/whcX4Htzr+3VnroaFhJbVnA9r8l0pKj KI7kgUeBN1IyzWCxHJhu5CJ1/F/t9jSiHv8rZDsKJ0h5DNateGw8B5LPXWV6SsYV ZOe3dYYkUoTbQqxvoI8Giug6dYUK8jMdVu3Xtxz2Q/N2qxQRR5lgkraAFtfhGucl LCQM7d0akb/U0EyQNXHpRJqpVjxZEm8R6coSpP8N1mxojsmPj/TVYBZCnT+AXuJE MuzdDEHb1/JU0+QLv5hBqqJOYsEYIOFvCManFo3KqvBR6Ung2ivYc5Y645ScjPca z+0DHt3itxWvEOe50CbWGbw76HwcuKXmXO5X3+Gl7aV7gApxaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZvefmdRiz6DShDiTuDqT+hSW1lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWI3NGRjZTItNTkyNS0z NDRjLWE4ZTctMjRlM2ZhNTdjYTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyxjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHECWBdtmJHNWoKiYbIoKLnlTRq6PoDSK2p/Y3/M2/8uIzm0jFWBtm2p N2MKU7S16jmjU97ljEstaRyNWGcBiCZ+lRMkFogvxn8dBIj1jREhskscuASr6wVX zCKdeFcDY6k2IDoMG0zA4BmdZ180MAoHKvBii5aV3ftVYcjLU5jn+aVF8EI4Ooiy OI6Kfi6ug9jdbAxu9y6q0AmpYTo/3qWleIJ9dJ5uqLeszYulUjK7bsxMH/g905ld OG+6i93k5Zau9RRTpr99Blyh1v6zNPXyj7oeWO9YdjM035/ogPykf7lvbEqitsVz Ks5SRoqPKRkM8H1cI+1Rna67ENlQRY8= -----END CERTIFICATE-----Generated at Sun Jun 29 19:10:35 2025 by rpki-client