$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c023405-e30c-3f94-a89b-98a745767f6a.roa File: 3c023405-e30c-3f94-a89b-98a745767f6a.roa (raw, json) Hash identifier: pHOaeFR45uPAGhcqUYoAixsCpH1jXUin8TefCzPfkWQ= Subject key identifier: 29:2C:CC:DF:AB:EE:C2:88:7A:55:DF:04:81:23:2E:FA:E9:40:C1:00 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A15A58AA0B601E25536AEC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c023405-e30c-3f94-a89b-98a745767f6a.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.41.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:a5:8a:a0:b6:01:e2:55:36:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=72e3aab9-d2bd-4bf8-a314-fc8b84e5ed49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:41:5a:90:19:51:13:6b:da:d1:0c:2e:2d:45: 5f:5b:59:c1:6e:43:46:e6:d8:ab:f3:44:8d:b3:8c: 7b:25:a8:4d:51:81:61:97:f9:00:5f:cc:a8:74:ce: 5c:da:43:a6:59:00:99:2b:c0:09:70:fe:45:86:de: e7:3f:b3:bc:3d:85:5b:97:67:97:72:11:62:b8:ee: ef:a9:5c:d0:18:b2:34:ba:45:83:a9:5a:17:52:0a: d4:5e:42:0b:8e:fb:93:1e:5b:66:61:7f:a5:99:dc: 1e:a9:89:63:fd:fc:ac:0d:a3:9f:c4:0b:84:73:d2: 1a:13:44:c4:2b:47:58:a8:9d:5d:3b:c1:06:69:a8: c5:86:c0:8f:3e:70:f9:d2:a8:65:46:e8:97:a1:1a: f7:5d:5a:e7:17:6d:2b:1d:71:31:ad:d4:ac:db:20: c0:33:af:40:3a:1c:4b:66:4d:9a:6f:ad:67:35:62: 6b:4e:cb:a1:0a:5b:33:29:e6:83:3a:49:be:c5:71: 32:e1:5a:9e:dc:03:6f:47:58:f2:dc:e2:44:62:63: 8e:7b:5f:97:9f:c6:99:e7:54:43:89:1f:0e:ec:c8: 2a:58:65:c8:e0:99:00:f5:6f:0e:27:75:31:d9:e9: 57:a5:3f:35:26:b3:b1:71:5b:9c:b8:4c:3d:ef:6d: 72:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2C:CC:DF:AB:EE:C2:88:7A:55:DF:04:81:23:2E:FA:E9:40:C1:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c023405-e30c-3f94-a89b-98a745767f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:7e:7f:f8:23:22:21:17:70:0e:fd:fa:14:02:35:1a:e1:63: e0:6e:99:5f:8b:b9:af:6d:10:c5:89:a2:18:16:89:ff:d2:83: a9:24:06:01:84:12:a2:73:26:db:9a:d9:3e:22:a6:c9:45:e7: 1a:84:49:0c:af:fe:7b:06:ac:0a:24:f5:b9:80:9e:f4:b5:b1: d6:ad:82:af:18:e1:5c:c0:90:0e:30:9a:4c:24:d4:2e:a1:54: 46:10:07:25:89:c9:c8:46:88:75:d2:24:26:db:ea:30:ad:e5: 05:71:a3:e3:5b:83:b0:b3:c3:23:0f:3d:e5:0a:d4:2f:6d:45: 51:6f:3e:d7:e8:4a:74:f4:2d:cf:fb:83:96:40:c7:7d:1a:cf: b5:6f:aa:11:eb:7f:25:50:d9:16:3d:c0:21:03:51:d2:d6:81: b5:61:84:0c:a2:97:ae:2e:68:2f:8e:c7:49:81:4b:ad:7b:51: 0c:81:59:75:ee:08:ee:43:e0:40:f3:f4:e4:f9:b4:27:2e:27: 32:30:51:d4:4f:b3:6c:fb:69:0b:c2:53:46:3f:76:6a:85:47: 24:85:35:36:27:dd:ca:b0:14:1c:df:05:e9:bf:93:d7:01:a6: 00:7a:6e:25:db:23:d4:27:e6:9f:67:8a:8c:61:0b:14:69:27: c1:de:35:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FaWKoLYB4lU2rsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk NzJlM2FhYjktZDJiZC00YmY4LWEzMTQtZmM4Yjg0ZTVlZDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEFakBlRE2va0QwuLUVfW1nBbkNG5tir80SN s4x7JahNUYFhl/kAX8yodM5c2kOmWQCZK8AJcP5Fht7nP7O8PYVbl2eXchFiuO7v qVzQGLI0ukWDqVoXUgrUXkILjvuTHltmYX+lmdweqYlj/fysDaOfxAuEc9IaE0TE K0dYqJ1dO8EGaajFhsCPPnD50qhlRuiXoRr3XVrnF20rHXExrdSs2yDAM69AOhxL Zk2ab61nNWJrTsuhClszKeaDOkm+xXEy4Vqe3ANvR1jy3OJEYmOOe1+Xn8aZ51RD iR8O7MgqWGXI4JkA9W8OJ3Ux2elXpT81JrOxcVucuEw9721ypQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkszN+r7sKIelXfBIEjLvrpQMEAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2MwMjM0MDUtZTMwYy0z Zjk0LWE4OWItOThhNzQ1NzY3ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFynQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJ+f/gjIiEXcA79+hQCNRrhY+BumV+Lua9tEMWJohgWif/Sg6kkBgGE EqJzJtua2T4ipslF5xqESQyv/nsGrAok9bmAnvS1sdatgq8Y4VzAkA4wmkwk1C6h VEYQByWJychGiHXSJCbb6jCt5QVxo+Nbg7CzwyMPPeUK1C9tRVFvPtfoSnT0Lc/7 g5ZAx30az7VvqhHrfyVQ2RY9wCEDUdLWgbVhhAyil64uaC+Ox0mBS617UQyBWXXu CO5D4EDz9OT5tCcuJzIwUdRPs2z7aQvCU0Y/dmqFRySFNTYn3cqwFBzfBem/k9cB pgB6biXbI9Qn5p9nioxhCxRpJ8HeNY8= -----END CERTIFICATE-----Generated at Sun Jun 29 13:59:00 2025 by rpki-client