$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f8bdf3d-8436-3e6b-88ba-302ea845ac32.roa File: 3f8bdf3d-8436-3e6b-88ba-302ea845ac32.roa (raw, json) Hash identifier: 2SEO2a1MrUAQpNHcNFJlTueR9HgPYO5f+9gW/Strot0= Subject key identifier: E4:DB:A0:84:70:0E:A7:3F:AE:D8:4E:D0:73:B6:47:C8:36:51:75:B2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3B7B4087AAE7EA2A1F7C8040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f8bdf3d-8436-3e6b-88ba-302ea845ac32.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 16625 IP address blocks: 23.45.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:40:87:aa:e7:ea:2a:1f:7c:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=38d572d7-6af7-4825-89ea-da270162d175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:91:20:ca:49:b5:7b:bc:43:c7:95:20:db:76: 3e:39:62:ca:e0:ab:42:a8:e5:bb:ed:b8:d4:40:a4: 49:0a:6d:59:8d:22:df:19:dd:09:ab:99:56:8c:22: 26:3c:ca:60:ee:04:96:a5:fb:17:8b:62:13:c3:03: 5d:8b:5a:e3:04:d5:64:f0:80:6b:24:25:fc:76:c9: 6b:1e:4a:7d:5f:fa:3a:ee:2b:2f:66:a2:9c:d5:cd: 63:f8:1a:85:ae:5a:62:e9:a5:27:39:75:66:a5:02: 4d:7c:05:a9:4d:6a:10:6d:f5:63:70:ca:1b:2a:49: 6e:7e:75:4b:51:ef:8d:91:73:44:68:13:8c:46:fc: 75:74:54:75:b1:82:36:3f:7c:91:b3:bc:36:e4:d9: 00:da:b1:4e:0c:65:c5:c7:11:3b:7f:2c:8e:f9:a9: 03:e2:47:7d:06:cd:04:be:dc:45:9a:7c:91:53:4a: d9:0e:d7:b7:f7:94:a1:35:97:bb:ab:d5:c9:5f:fb: 02:76:bf:aa:35:ab:d3:83:e1:06:21:04:b2:20:9c: 1c:0f:1e:cc:4e:b3:30:ae:e7:68:0e:3f:52:50:87: 48:fe:a8:a0:c3:46:cc:3d:d0:86:16:5b:90:31:1c: e0:a1:4a:f2:2a:13:96:ae:66:09:44:4c:68:76:98: 0e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DB:A0:84:70:0E:A7:3F:AE:D8:4E:D0:73:B6:47:C8:36:51:75:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f8bdf3d-8436-3e6b-88ba-302ea845ac32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:bb:61:a7:d2:ac:8a:cb:00:91:bd:d9:09:d1:e6:3d:0e:19: da:7b:72:1b:e9:1e:e9:c8:cc:9e:8f:65:f3:85:16:f4:71:bf: 7d:6b:cd:af:4f:76:68:c2:e1:d3:2b:40:de:ed:4a:74:34:3b: 83:94:9b:dd:20:54:8a:54:d7:b2:11:d6:5d:24:37:63:09:35: 8b:ab:72:62:46:63:f0:6a:0a:a3:df:7f:ff:84:50:69:20:6e: 8e:31:91:3b:77:ed:34:14:1a:81:1e:5b:1b:59:31:35:e4:66: c7:49:b1:a7:2f:f7:14:fb:0b:16:2f:e9:c7:10:2a:47:0d:f3: 69:9e:1d:8b:79:2e:45:90:89:de:cd:0c:22:4c:d9:ae:69:a7: 75:3b:4f:8c:75:e0:78:8a:84:3a:c5:50:e8:f3:68:99:3f:5d: b0:3a:bd:d3:4c:71:7b:ca:44:cd:90:3c:2d:ab:45:0d:75:61: ab:aa:20:f5:71:8e:30:f5:f1:e8:e4:79:fe:a7:8f:87:70:2a: 35:22:3f:60:c5:31:9a:1d:62:af:2f:79:c4:fb:00:01:8f:34: bb:21:0a:f2:50:3f:09:a6:43:ca:cd:94:e7:a4:35:b7:7b:7a: bd:10:8b:cf:01:09:0f:20:ce:7d:95:a6:5d:64:19:d3:15:96: 8a:1b:91:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7e0CHqufqKh98gEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk MzhkNTcyZDctNmFmNy00ODI1LTg5ZWEtZGEyNzAxNjJkMTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JEgykm1e7xDx5Ug23Y+OWLK4KtCqOW77bjU QKRJCm1ZjSLfGd0Jq5lWjCImPMpg7gSWpfsXi2ITwwNdi1rjBNVk8IBrJCX8dslr Hkp9X/o67isvZqKc1c1j+BqFrlpi6aUnOXVmpQJNfAWpTWoQbfVjcMobKklufnVL Ue+NkXNEaBOMRvx1dFR1sYI2P3yRs7w25NkA2rFODGXFxxE7fyyO+akD4kd9Bs0E vtxFmnyRU0rZDte395ShNZe7q9XJX/sCdr+qNavTg+EGIQSyIJwcDx7MTrMwrudo Dj9SUIdI/qigw0bMPdCGFluQMRzgoUryKhOWrmYJRExodpgOZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTboIRwDqc/rthO0HO2R8g2UXWyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Y4YmRmM2QtODQzNi0z ZTZiLTg4YmEtMzAyZWE4NDVhYzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFy2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADW7YafSrIrLAJG92QnR5j0OGdp7chvpHunIzJ6PZfOFFvRxv31rza9P dmjC4dMrQN7tSnQ0O4OUm90gVIpU17IR1l0kN2MJNYurcmJGY/BqCqPff/+EUGkg bo4xkTt37TQUGoEeWxtZMTXkZsdJsacv9xT7CxYv6ccQKkcN82meHYt5LkWQid7N DCJM2a5pp3U7T4x14HiKhDrFUOjzaJk/XbA6vdNMcXvKRM2QPC2rRQ11YauqIPVx jjD18ejkef6nj4dwKjUiP2DFMZodYq8vecT7AAGPNLshCvJQPwmmQ8rNlOekNbd7 er0Qi88BCQ8gzn2Vpl1kGdMVloobkSQ= -----END CERTIFICATE-----Generated at Sun Jun 29 18:02:37 2025 by rpki-client