$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2193fa72-d310-366a-a5f6-42ab920e8787.roa File: 2193fa72-d310-366a-a5f6-42ab920e8787.roa (raw, json) Hash identifier: tKFmIiz0lT6PmZL3qVDEXvjGllRiz/3qUQGRIr9Ksl0= Subject key identifier: 33:CB:50:2B:B4:43:34:C6:3C:A3:EF:4D:BB:96:31:81:57:94:8E:C0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A1E2AB6773CFE521893AC6520 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2193fa72-d310-366a-a5f6-42ab920e8787.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 20940 IP address blocks: 23.50.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:b6:77:3c:fe:52:18:93:ac:65:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=d7c42d26-d3f5-4678-aa04-39059e52fda2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:04:ff:95:53:00:e2:ee:1c:f3:9f:0a:53:48: 22:b4:a4:ee:dd:9e:51:10:9e:aa:c7:07:f1:b6:f7: 50:12:e5:64:15:65:58:cb:f9:af:a2:2d:de:02:b4: 8f:02:dc:a0:3e:21:32:23:f1:7c:22:9f:9d:4c:07: a7:de:3c:2d:c2:5c:ee:e0:73:8d:65:a4:f5:57:5d: ea:73:ad:8b:4b:30:04:2c:82:af:ba:45:b7:33:58: 11:ed:37:89:55:f3:11:51:5e:82:49:f9:3f:a0:70: 24:c3:27:8a:3b:55:e9:ca:13:08:10:cf:34:7e:ec: fe:69:14:9a:44:90:79:e9:f3:61:26:a9:2b:26:7e: f3:7f:54:18:7f:5a:4e:8c:22:17:f8:04:b8:27:3b: 69:c7:52:fa:32:83:a2:07:4c:15:01:af:36:14:1a: 68:95:84:75:95:96:9c:10:59:49:75:69:e7:8f:ab: 6e:a1:53:06:8b:8a:be:24:3d:24:97:74:b1:48:07: 68:1c:ca:a0:9c:2a:6a:61:2e:0b:6e:05:81:22:d1: c0:cc:44:ee:1b:50:15:1e:0c:3c:4d:83:bf:87:78: 9b:79:a7:1d:3c:ef:42:00:33:70:98:af:28:ba:94: 46:8a:dd:b4:07:75:b5:dd:c0:3b:e8:4e:3a:11:43: 34:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CB:50:2B:B4:43:34:C6:3C:A3:EF:4D:BB:96:31:81:57:94:8E:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2193fa72-d310-366a-a5f6-42ab920e8787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.50.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:5b:e8:3f:07:b9:12:03:65:02:2f:50:b1:0f:28:f1:ce:cd: 31:b9:c4:25:ee:f7:b7:06:a3:cd:97:99:19:dc:45:39:3e:6b: 2f:6f:9a:46:ff:5e:e3:9b:90:01:b5:a5:9b:c0:ce:d4:7f:48: 55:4f:2c:23:63:ff:e0:03:61:1f:bf:c9:76:97:96:d8:6c:06: bb:32:c1:1c:12:07:cd:04:70:5b:b8:bf:53:f5:1c:8a:bd:bb: 9f:51:59:e5:73:4f:aa:00:b0:40:71:36:8d:fd:a8:18:bc:1d: e2:13:d9:b0:3c:5e:02:aa:a1:52:98:3f:d2:c7:1c:62:df:99: 34:f7:34:e3:e9:87:d7:1e:db:48:bd:b8:85:9f:73:d0:5b:42: af:2f:9a:c2:4d:8b:12:1e:f4:a9:70:aa:58:9b:6d:4c:ee:9d: 09:60:74:f7:b4:4f:49:cc:a2:91:ae:bc:c7:7c:23:87:07:64: 0b:58:43:02:1c:b7:57:51:02:31:97:af:0a:12:7d:de:cf:86: 38:75:e3:3c:12:e0:ac:95:5e:94:ed:d0:ec:25:49:8b:2c:83: 4e:10:53:4d:f2:e9:8d:55:bc:6f:9a:2f:f4:c0:13:23:88:c8: 54:a2:a1:90:b8:35:a0:fc:c7:06:6e:de:86:b4:75:01:fd:ff: 94:53:d4:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKrZ3PP5SGJOsZSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk ZDdjNDJkMjYtZDNmNS00Njc4LWFhMDQtMzkwNTllNTJmZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAT/lVMA4u4c858KU0gitKTu3Z5REJ6qxwfx tvdQEuVkFWVYy/mvoi3eArSPAtygPiEyI/F8Ip+dTAen3jwtwlzu4HONZaT1V13q c62LSzAELIKvukW3M1gR7TeJVfMRUV6CSfk/oHAkwyeKO1XpyhMIEM80fuz+aRSa RJB56fNhJqkrJn7zf1QYf1pOjCIX+AS4Jztpx1L6MoOiB0wVAa82FBpolYR1lZac EFlJdWnnj6tuoVMGi4q+JD0kl3SxSAdoHMqgnCpqYS4LbgWBItHAzETuG1AVHgw8 TYO/h3ibeacdPO9CADNwmK8oupRGit20B3W13cA76E46EUM0xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPLUCu0QzTGPKPvTbuWMYFXlI7AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjE5M2ZhNzItZDMxMC0z NjZhLWE1ZjYtNDJhYjkyMGU4Nzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzI6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJb6D8HuRIDZQIvULEPKPHOzTG5xCXu97cGo82XmRncRTk+ay9vmkb/ XuObkAG1pZvAztR/SFVPLCNj/+ADYR+/yXaXlthsBrsywRwSB80EcFu4v1P1HIq9 u59RWeVzT6oAsEBxNo39qBi8HeIT2bA8XgKqoVKYP9LHHGLfmTT3NOPph9ce20i9 uIWfc9BbQq8vmsJNixIe9KlwqlibbUzunQlgdPe0T0nMopGuvMd8I4cHZAtYQwIc t1dRAjGXrwoSfd7Phjh14zwS4KyVXpTt0OwlSYssg04QU03y6Y1VvG+aL/TAEyOI yFSioZC4NaD8xwZu3oa0dQH9/5RT1Ow= -----END CERTIFICATE-----Generated at Sun Jun 29 14:26:17 2025 by rpki-client