$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/298a200a-7e8a-38c4-b7b8-815a52c8e069.roa File: 298a200a-7e8a-38c4-b7b8-815a52c8e069.roa (raw, json) Hash identifier: wUIvzGO9hun7o4ET1uQAqb/Fj99b/OkTcliGVRSNaM0= Subject key identifier: CC:1E:4C:31:99:4D:E0:2B:5E:D7:31:AE:4E:6E:6D:FB:D4:E2:67:43 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A159CFE2AA4D8859F692000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/298a200a-7e8a-38c4-b7b8-815a52c8e069.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.49.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:9c:fe:2a:a4:d8:85:9f:69:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=911ce5f3-8e72-4d48-948c-f2d4dde18e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c6:89:b9:0d:c7:e5:fb:75:b3:9f:b5:74:ce: 94:2a:25:7a:4c:a5:c2:2f:4a:bd:ec:ed:f5:4b:fe: 30:62:e6:bb:1d:7a:40:f0:39:d6:70:58:49:26:c6: f8:1f:63:09:b4:f9:a5:2c:13:6f:04:c6:d1:49:92: 77:46:a1:7a:96:b0:83:0f:d3:7b:84:d5:f1:f1:be: 8a:00:d9:69:db:39:04:60:6c:91:95:73:86:2b:31: 37:ce:dd:9d:5c:07:46:89:da:c4:ad:72:52:4a:23: 12:08:ed:45:bc:20:15:29:db:03:3b:79:24:91:54: 71:5e:97:08:3d:6c:58:79:9b:2b:cd:09:bc:ea:c0: 2a:38:73:21:ef:90:15:e8:06:57:df:43:2a:ff:39: c9:3c:31:14:88:51:f8:5d:1d:d1:8b:8e:5c:cf:c2: 60:f9:9d:c9:aa:ae:7b:6b:01:de:2f:47:98:78:0f: c8:be:28:91:3a:31:4e:86:46:ce:b9:f6:a8:84:bc: 5c:aa:42:04:88:7c:66:32:dc:ae:cc:a0:7b:53:27: 1f:1e:15:e3:75:3a:b3:26:66:a3:c4:1f:6c:07:0e: 9f:78:b7:9b:fe:5d:a8:03:33:91:5e:be:f1:35:c6: 21:84:fa:5e:df:4c:1d:ed:1d:4b:4e:ae:fa:14:52: bc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1E:4C:31:99:4D:E0:2B:5E:D7:31:AE:4E:6E:6D:FB:D4:E2:67:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/298a200a-7e8a-38c4-b7b8-815a52c8e069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.49.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:63:81:50:c4:dc:dd:78:0f:a9:55:72:46:f2:40:d4:05:d6: 6e:8b:7b:5a:3c:0d:0a:93:22:6c:2c:8e:60:15:86:fe:86:c0: 2f:66:a3:76:d2:e0:86:97:e9:7e:94:85:f2:02:9c:22:20:e7: e5:33:d6:05:15:4e:df:9f:b7:72:4b:e2:af:63:09:f8:cd:09: 1f:0f:69:06:5f:23:91:0d:e6:09:16:5a:ed:4b:c9:b0:92:a2: 19:06:3e:01:45:93:33:6c:43:7d:45:8e:bf:97:da:34:e3:9a: 22:d1:0c:04:e0:65:bb:78:f0:b0:1b:2d:87:6f:fc:79:7f:3f: fc:52:b3:b8:c9:bf:48:51:c8:2c:a6:cc:29:21:1a:73:c7:a6: 3f:f2:30:26:59:95:2c:77:44:b9:5f:af:ca:9a:ea:50:eb:0f: e8:14:53:f4:24:ea:a8:86:d0:db:2e:68:75:c6:c8:6d:7e:10: 5f:f4:7b:f5:a2:57:4d:c0:49:16:fa:fd:d1:4f:c9:cc:40:b0: 03:b6:b3:44:f0:55:05:2f:57:d5:cb:16:2f:1d:f7:fb:54:4b: 57:40:fd:49:83:d1:32:83:f5:1f:fd:69:4b:d7:e9:81:c0:6e: 64:57:3d:78:1f:1c:3a:bd:cc:43:6b:33:e0:4a:56:75:cd:3a: 1a:f4:11:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZz+KqTYhZ9pIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk OTExY2U1ZjMtOGU3Mi00ZDQ4LTk0OGMtZjJkNGRkZTE4ZTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMaJuQ3H5ft1s5+1dM6UKiV6TKXCL0q97O31 S/4wYua7HXpA8DnWcFhJJsb4H2MJtPmlLBNvBMbRSZJ3RqF6lrCDD9N7hNXx8b6K ANlp2zkEYGyRlXOGKzE3zt2dXAdGidrErXJSSiMSCO1FvCAVKdsDO3kkkVRxXpcI PWxYeZsrzQm86sAqOHMh75AV6AZX30Mq/znJPDEUiFH4XR3Ri45cz8Jg+Z3Jqq57 awHeL0eYeA/IviiROjFOhkbOufaohLxcqkIEiHxmMtyuzKB7UycfHhXjdTqzJmaj xB9sBw6feLeb/l2oAzORXr7xNcYhhPpe30wd7R1LTq76FFK8EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMweTDGZTeArXtcxrk5ubfvU4mdDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjk4YTIwMGEtN2U4YS0z OGM0LWI3YjgtODE1YTUyYzhlMDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzE9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpjgVDE3N14D6lVckbyQNQF1m6Le1o8DQqTImwsjmAVhv6GwC9mo3bS 4IaX6X6UhfICnCIg5+Uz1gUVTt+ft3JL4q9jCfjNCR8PaQZfI5EN5gkWWu1LybCS ohkGPgFFkzNsQ31Fjr+X2jTjmiLRDATgZbt48LAbLYdv/Hl/P/xSs7jJv0hRyCym zCkhGnPHpj/yMCZZlSx3RLlfr8qa6lDrD+gUU/Qk6qiG0NsuaHXGyG1+EF/0e/Wi V03ASRb6/dFPycxAsAO2s0TwVQUvV9XLFi8d9/tUS1dA/UmD0TKD9R/9aUvX6YHA bmRXPXgfHDq9zENrM+BKVnXNOhr0Ecg= -----END CERTIFICATE-----Generated at Mon Jun 30 09:55:05 2025 by rpki-client