$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f824d52-ba8e-3ce3-b55d-3d6264a4e89c.roa File: 2f824d52-ba8e-3ce3-b55d-3d6264a4e89c.roa (raw, json) Hash identifier: BM5fQ2V8ej37dTQuv8H2c5BhKJDZdKJeVk94m4NHvFc= Subject key identifier: F1:89:A8:D6:6A:DB:E5:9C:52:E2:35:5C:94:4D:C8:57:F3:6E:D5:29 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A43DB11956B8365E837815744 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f824d52-ba8e-3ce3-b55d-3d6264a4e89c.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.52.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:11:95:6b:83:65:e8:37:81:57:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=ff929e35-7716-4770-a4a5-22ff3cb44ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:41:14:43:bd:fc:e9:11:74:a9:38:99:50:02: 82:93:14:ce:90:a3:cb:17:bc:3c:5c:67:02:4a:61: d7:30:cb:17:b9:7a:99:ab:fc:43:4b:79:98:53:33: 3e:0d:f6:cf:f3:5b:0b:b2:98:fb:da:e1:30:8a:26: 31:6f:e8:08:1a:49:ea:ea:ba:70:bf:57:91:d6:8a: 8a:09:6a:30:be:7c:1e:72:d9:59:b9:17:ca:34:03: c2:13:77:46:24:cd:4d:87:ba:0c:d4:51:8e:9f:d4: 76:40:55:1a:9e:97:2c:ce:8d:9f:bc:13:e7:78:61: 36:f4:16:2e:17:da:63:08:05:2b:2b:4b:24:46:41: 74:53:34:55:c0:53:22:60:08:b6:86:5f:63:ac:c9: 9a:2d:45:42:71:3e:ce:ad:2a:46:31:b5:da:38:40: 24:aa:50:9e:dd:11:0e:24:8e:28:8a:3b:db:24:94: 1b:09:e3:7e:6e:ce:c9:63:ec:08:27:88:f2:cd:06: fc:69:d1:76:2c:d0:c9:92:4e:a2:11:b9:3b:f1:51: 47:a5:1b:b3:7a:3c:0a:4b:d3:ad:d1:c4:ac:f4:d6: d3:88:bd:d6:85:b6:bb:e5:80:4f:10:ca:bd:b9:36: af:27:97:a8:aa:67:4c:c9:74:b4:35:48:76:0c:30: 6c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:89:A8:D6:6A:DB:E5:9C:52:E2:35:5C:94:4D:C8:57:F3:6E:D5:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f824d52-ba8e-3ce3-b55d-3d6264a4e89c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:4d:aa:41:97:50:8a:7a:f6:d9:6a:a0:86:d0:db:a1:80:92: f2:66:cb:61:17:6b:f7:10:57:f8:db:cb:3c:a0:ff:96:b4:71: 10:4a:a3:fb:12:b0:ee:e1:c8:0e:b9:3b:5a:a2:57:58:6a:39: db:9e:e3:5a:ad:21:78:5a:1e:e0:70:77:20:c7:9c:39:3c:f5: 62:16:57:19:1e:6f:89:4d:13:bb:7d:97:bc:0c:e4:dd:79:9c: 6f:61:35:b3:43:e2:e6:09:ab:6d:ab:05:69:2e:59:5f:9a:84: 70:65:c0:07:16:d0:bd:a1:5e:9d:32:85:73:95:d6:e7:34:f1: 65:6e:93:04:e1:2f:ab:67:12:c0:cc:1a:62:1e:24:30:f7:b2: 72:b6:a0:c4:f1:7b:fc:d3:69:b9:80:ef:30:2c:b2:1e:07:b7: 1a:8d:4e:60:a0:2b:9f:f6:b1:9e:ea:a0:8a:c3:61:4c:bd:7d: 57:2d:0e:72:db:af:2f:cb:1b:eb:25:5e:68:7a:9d:eb:9c:9f: 93:e9:ad:b2:da:42:50:6c:d7:12:b3:b5:2d:f6:66:99:bf:77: ef:72:67:9c:95:54:95:c2:7b:e0:59:0f:55:2c:2f:47:8e:31: 7a:1f:ee:63:0a:93:eb:f3:c7:b3:aa:97:2a:91:62:ce:0a:1c: 8a:da:75:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2xGVa4Nl6DeBV0QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk ZmY5MjllMzUtNzcxNi00NzcwLWE0YTUtMjJmZjNjYjQ0ZWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkEUQ7386RF0qTiZUAKCkxTOkKPLF7w8XGcC SmHXMMsXuXqZq/xDS3mYUzM+DfbP81sLspj72uEwiiYxb+gIGknq6rpwv1eR1oqK CWowvnwectlZuRfKNAPCE3dGJM1Nh7oM1FGOn9R2QFUanpcszo2fvBPneGE29BYu F9pjCAUrK0skRkF0UzRVwFMiYAi2hl9jrMmaLUVCcT7OrSpGMbXaOEAkqlCe3REO JI4oijvbJJQbCeN+bs7JY+wIJ4jyzQb8adF2LNDJkk6iEbk78VFHpRuzejwKS9Ot 0cSs9NbTiL3Whba75YBPEMq9uTavJ5eoqmdMyXS0NUh2DDBs7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGJqNZq2+WcUuI1XJRNyFfzbtUpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmY4MjRkNTItYmE4ZS0z Y2UzLWI1NWQtM2Q2MjY0YTRlODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzQNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElNqkGXUIp69tlqoIbQ26GAkvJmy2EXa/cQV/jbyzyg/5a0cRBKo/sS sO7hyA65O1qiV1hqOdue41qtIXhaHuBwdyDHnDk89WIWVxkeb4lNE7t9l7wM5N15 nG9hNbND4uYJq22rBWkuWV+ahHBlwAcW0L2hXp0yhXOV1uc08WVukwThL6tnEsDM GmIeJDD3snK2oMTxe/zTabmA7zAssh4HtxqNTmCgK5/2sZ7qoIrDYUy9fVctDnLb ry/LG+slXmh6neucn5PprbLaQlBs1xKztS32Zpm/d+9yZ5yVVJXCe+BZD1UsL0eO MXof7mMKk+vzx7OqlyqRYs4KHIradVA= -----END CERTIFICATE-----Generated at Sun Jun 29 19:19:53 2025 by rpki-client