$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4573ad48-33b8-3c86-9577-202ad6cd64f1.roa File: 4573ad48-33b8-3c86-9577-202ad6cd64f1.roa (raw, json) Hash identifier: T5g16NnJalkrJ9EXbuVf5bdcLWg6j/3blaLhJNvmn5s= Subject key identifier: 14:72:C4:51:04:1C:A5:8C:9A:ED:B9:D7:CA:89:8A:79:1D:ED:6F:7B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3B7B40D8789E94DC095A0480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4573ad48-33b8-3c86-9577-202ad6cd64f1.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 20940 IP address blocks: 23.45.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:40:d8:78:9e:94:dc:09:5a:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=3e2637f5-721f-45fc-a8d4-2b64a6ce13ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d4:53:8e:52:e7:51:f1:ff:1d:9f:e3:9b:61: af:70:f4:e5:43:75:17:d8:42:78:ea:b6:94:6c:a7: 2f:ca:97:d1:39:ee:57:d2:86:cc:da:0f:24:7c:c4: c9:8d:5d:24:78:6d:b0:20:c8:cb:b9:fd:e0:29:3c: 27:f0:7a:44:6c:1b:23:ef:a8:30:14:7f:ab:39:a8: dc:83:a5:47:9e:0e:3c:2e:6d:09:eb:c1:8a:b9:c2: 76:fb:d7:aa:5d:dd:03:c9:98:56:3b:a4:bc:a5:73: 1f:0d:9c:ca:fc:a6:88:d8:5e:78:37:d0:69:68:9b: 11:77:27:d6:bd:ad:ee:41:18:c3:17:d4:73:50:3f: 58:4c:08:c0:9d:1c:a2:01:5e:94:e2:86:23:7c:4a: 46:1b:2a:d9:5d:37:e8:0e:25:9d:fd:24:9c:9c:54: 6d:40:ba:fe:f8:4f:0c:5a:ca:71:98:d6:0f:8f:81: 33:74:3b:33:34:3e:fc:64:4f:c8:9c:ce:33:c5:47: e9:32:68:aa:ae:fb:da:36:9f:a4:45:d2:18:46:41: 99:2c:45:6d:7d:5e:8a:ad:4b:f5:f2:86:47:12:b1: 24:dd:a1:f4:fe:5d:11:b6:98:7a:8d:cf:66:db:6e: f5:df:9a:94:8a:b8:ce:6c:d6:69:5c:53:72:36:07: 00:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:72:C4:51:04:1C:A5:8C:9A:ED:B9:D7:CA:89:8A:79:1D:ED:6F:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4573ad48-33b8-3c86-9577-202ad6cd64f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:42:a5:88:b5:c8:ec:7b:02:69:dc:b3:ea:c3:de:45:88:6e: 77:31:d4:0a:25:c4:bf:15:23:ab:d2:c9:26:d0:e0:17:c0:fd: 28:43:a8:5b:d7:c3:6a:a4:6e:94:94:cd:44:a5:8a:8b:4b:33: c4:4b:39:cf:11:e2:c0:5e:5e:1e:15:22:1d:65:dd:ea:ed:13: 00:91:9b:dc:a8:c6:53:42:fa:fb:69:67:aa:5c:dd:7e:5f:85: 5f:51:e3:4d:d0:30:49:7c:23:42:0b:fe:4e:17:0e:f9:81:3d: b6:ef:f7:8e:15:9d:a1:5d:99:47:a6:3f:bb:68:00:aa:bd:a2: 54:f7:74:5f:7e:7b:89:cb:0b:c3:b3:37:79:cd:8e:d7:61:d6: ac:ca:5e:31:40:4f:d7:b2:6e:af:94:59:91:40:8a:5c:c9:09: c9:3f:54:a3:0b:8d:0a:fe:94:47:50:48:a9:e1:f7:ab:8d:6a: 08:64:bf:0d:d3:8c:59:91:a0:c6:bc:a8:2e:7d:9f:62:61:63: e2:50:d8:c7:f4:2f:5a:45:77:60:e0:36:1a:95:ee:30:9f:2e: eb:45:6f:d8:04:87:bb:7a:72:cb:b8:70:c1:af:d3:e6:17:c3: 5d:12:c4:b7:77:38:34:03:4e:aa:14:45:7d:a6:d4:bb:da:a7: f8:84:70:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7e0DYeJ6U3AlaBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk M2UyNjM3ZjUtNzIxZi00NWZjLWE4ZDQtMmI2NGE2Y2UxM2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9RTjlLnUfH/HZ/jm2GvcPTlQ3UX2EJ46raU bKcvypfROe5X0obM2g8kfMTJjV0keG2wIMjLuf3gKTwn8HpEbBsj76gwFH+rOajc g6VHng48Lm0J68GKucJ2+9eqXd0DyZhWO6S8pXMfDZzK/KaI2F54N9BpaJsRdyfW va3uQRjDF9RzUD9YTAjAnRyiAV6U4oYjfEpGGyrZXTfoDiWd/SScnFRtQLr++E8M WspxmNYPj4EzdDszND78ZE/InM4zxUfpMmiqrvvaNp+kRdIYRkGZLEVtfV6KrUv1 8oZHErEk3aH0/l0Rtph6jc9m227135qUirjObNZpXFNyNgcABQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRyxFEEHKWMmu2518qJinkd7W97MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDU3M2FkNDgtMzNiOC0z Yzg2LTk1NzctMjAyYWQ2Y2Q2NGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy2sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElCpYi1yOx7Amncs+rD3kWIbncx1AolxL8VI6vSySbQ4BfA/ShDqFvX w2qkbpSUzUSliotLM8RLOc8R4sBeXh4VIh1l3ertEwCRm9yoxlNC+vtpZ6pc3X5f hV9R403QMEl8I0IL/k4XDvmBPbbv944VnaFdmUemP7toAKq9olT3dF9+e4nLC8Oz N3nNjtdh1qzKXjFAT9eybq+UWZFAilzJCck/VKMLjQr+lEdQSKnh96uNaghkvw3T jFmRoMa8qC59n2JhY+JQ2Mf0L1pFd2DgNhqV7jCfLutFb9gEh7t6csu4cMGv0+YX w10SxLd3ODQDTqoURX2m1Lvap/iEcAg= -----END CERTIFICATE-----Generated at Mon Jun 30 15:20:30 2025 by rpki-client