$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3625d479-6dee-37df-ac13-ca69b30f113b.roa File: 3625d479-6dee-37df-ac13-ca69b30f113b.roa (raw, json) Hash identifier: fOjdZyUOkcx/OCTQduFPSw19fw3tuB7ZDbjflC/4U8E= Subject key identifier: DA:C4:85:65:08:33:86:94:70:DE:30:88:C9:47:FB:10:DB:ED:FD:EB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5765DCD197A6B02B98EE5130 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3625d479-6dee-37df-ac13-ca69b30f113b.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 24319 IP address blocks: 23.192.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:dc:d1:97:a6:b0:2b:98:ee:51:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=b29fe782-0ca1-424c-bf04-b5496457716f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c4:cc:dd:84:03:ae:c1:6e:fd:c9:55:b7:23: 8e:12:72:30:ab:66:ca:9c:72:bd:6f:7d:d0:21:cd: da:44:ce:cd:82:0d:33:93:f6:ab:d6:45:14:56:37: 61:de:27:40:b3:69:60:63:3a:1e:f0:fa:22:ab:f5: ba:be:f8:71:6d:72:83:fc:14:68:35:99:32:53:27: bd:24:44:5e:fd:68:72:11:f0:33:b7:6d:09:cc:c9: 23:21:39:42:24:f1:28:99:6e:61:25:96:44:e8:3d: e3:66:2e:1d:53:59:b3:17:8e:82:bd:d5:6d:d5:91: 57:7c:31:ef:0c:76:94:da:36:ec:5a:e9:b6:e3:83: 17:51:64:79:e8:37:3c:3c:80:48:a2:0b:d5:07:93: fc:a5:66:d3:5e:04:0d:ad:8c:49:1c:87:72:b0:e1: 6f:ac:69:57:86:d6:83:2b:94:8d:4f:3f:ed:d7:8b: db:27:8e:7a:32:03:fd:92:42:3c:a6:de:70:f8:5b: b7:62:4a:02:38:00:e7:70:f5:e5:8e:c9:d6:a5:da: 50:a1:79:73:8b:1d:4c:a5:b2:ee:be:7b:28:8e:d8: 73:55:41:2b:54:dd:13:ad:ab:42:85:ee:43:1b:b3: 8f:80:3f:21:1c:22:75:71:90:15:84:58:a1:d2:93: 8e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C4:85:65:08:33:86:94:70:DE:30:88:C9:47:FB:10:DB:ED:FD:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3625d479-6dee-37df-ac13-ca69b30f113b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.192.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:7c:c6:33:33:3a:8b:f6:c8:2b:9a:8a:0d:a4:4f:11:ee:d4: 9c:72:ab:ef:0e:3d:58:e3:73:07:31:8d:91:25:55:9f:c9:80: 22:2c:b2:1b:d3:32:8c:d0:72:db:3b:d8:06:70:75:17:78:0d: b7:88:b9:ed:88:ab:12:12:12:9f:c7:d3:80:b4:cb:06:14:10: c9:bc:16:c7:07:ad:53:4e:06:9e:78:22:97:05:77:b6:8a:0b: 21:68:90:a2:46:f0:66:48:74:46:91:b7:bf:f6:19:a6:5e:5d: 38:99:f3:d5:ac:18:22:a7:56:89:13:f9:8a:82:c6:fb:8c:75: 02:9c:4f:38:83:bb:64:9f:b4:bd:9e:2c:c9:8c:10:39:95:b0: 0d:bd:2c:74:6c:2d:d6:2d:3a:c7:65:79:aa:af:c2:79:36:5b: 99:60:8a:ff:6e:00:3b:22:c4:1d:68:08:ac:c9:14:98:c9:b7: 38:fd:01:4f:a4:e1:d0:79:5b:67:e7:32:2e:11:67:09:65:a3: c7:af:df:ae:7f:e2:f9:c8:bc:1e:1e:e0:1b:2e:f3:e7:33:11: 31:e0:54:fa:f8:05:18:5c:9f:89:b8:9d:84:1e:34:7f:ee:1b: 53:4e:6a:23:6f:17:6e:2c:87:49:a4:20:b3:55:15:47:40:98: 57:d0:5d:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZdzRl6awK5juUTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk YjI5ZmU3ODItMGNhMS00MjRjLWJmMDQtYjU0OTY0NTc3MTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsTM3YQDrsFu/clVtyOOEnIwq2bKnHK9b33Q Ic3aRM7Ngg0zk/ar1kUUVjdh3idAs2lgYzoe8Poiq/W6vvhxbXKD/BRoNZkyUye9 JERe/WhyEfAzt20JzMkjITlCJPEomW5hJZZE6D3jZi4dU1mzF46CvdVt1ZFXfDHv DHaU2jbsWum244MXUWR56Dc8PIBIogvVB5P8pWbTXgQNrYxJHIdysOFvrGlXhtaD K5SNTz/t14vbJ456MgP9kkI8pt5w+Fu3YkoCOADncPXljsnWpdpQoXlzix1MpbLu vnsojthzVUErVN0TratChe5DG7OPgD8hHCJ1cZAVhFih0pOOJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrEhWUIM4aUcN4wiMlH+xDb7f3rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzYyNWQ0NzktNmRlZS0z N2RmLWFjMTMtY2E2OWIzMGYxMTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8DZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH18xjMzOov2yCuaig2kTxHu1Jxyq+8OPVjjcwcxjZElVZ/JgCIsshvT MozQcts72AZwdRd4DbeIue2IqxISEp/H04C0ywYUEMm8FscHrVNOBp54IpcFd7aK CyFokKJG8GZIdEaRt7/2GaZeXTiZ89WsGCKnVokT+YqCxvuMdQKcTziDu2SftL2e LMmMEDmVsA29LHRsLdYtOsdleaqvwnk2W5lgiv9uADsixB1oCKzJFJjJtzj9AU+k 4dB5W2fnMi4RZwllo8ev365/4vnIvB4e4Bsu8+czETHgVPr4BRhcn4m4nYQeNH/u G1NOaiNvF24sh0mkILNVFUdAmFfQXcc= -----END CERTIFICATE-----Generated at Sun Jun 29 17:51:12 2025 by rpki-client