$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47c2e2f8-4d86-3efb-b628-38cdf5cc2845.roa File: 47c2e2f8-4d86-3efb-b628-38cdf5cc2845.roa (raw, json) Hash identifier: Sj9woAYDCs4uS+yySqYPMtnmavBTEBKI3y9mJrHVwYE= Subject key identifier: 5D:34:3F:DA:06:83:80:27:47:EE:42:50:3B:E0:CA:BD:6D:65:87:7F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3E45BA762219E28437270080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47c2e2f8-4d86-3efb-b628-38cdf5cc2845.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 20940 IP address blocks: 23.48.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:ba:76:22:19:e2:84:37:27:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=80e06a23-4f91-4d8a-aa7f-fed0d7b9667a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:20:fa:3b:48:d2:7d:95:25:ad:ef:31:5e:45: db:74:46:93:11:1d:71:c7:57:6b:5d:2d:e2:88:90: b4:f9:d1:39:2b:94:0c:dc:d6:39:3e:66:99:75:14: e1:54:4b:51:4b:e4:10:c5:87:c5:e9:bc:c0:5f:96: 68:59:80:da:c6:9d:0b:24:99:de:1e:d9:85:57:54: c2:f9:08:a5:1b:ee:26:f4:89:73:26:6e:57:0b:ab: bc:0d:f5:ce:48:ad:f6:72:cd:89:e6:7e:29:39:cf: 2e:f6:bc:af:b0:0f:03:36:4e:47:8f:43:84:62:5e: 2b:0e:a8:c9:5a:f9:77:61:90:6b:84:7f:4a:4b:01: 20:b7:d4:62:03:34:82:54:ad:fa:27:44:d1:1a:7d: c5:3c:61:51:d8:3b:cc:2a:ba:13:0d:f1:73:62:95: bd:12:cc:1c:4c:86:c1:91:fb:18:83:f1:a5:1d:54: 08:96:bc:3a:05:02:e1:45:84:87:bc:5f:ff:61:fc: 44:48:ad:cb:c3:cc:dd:de:72:c4:5c:6c:04:99:64: be:60:5d:ca:62:51:53:ab:9a:61:10:54:60:6e:1e: 13:ca:30:f8:b0:70:b7:31:cd:70:b9:fd:f0:e9:fb: 6c:98:82:2b:69:fb:1c:52:d6:41:27:d1:35:87:5e: f6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:34:3F:DA:06:83:80:27:47:EE:42:50:3B:E0:CA:BD:6D:65:87:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47c2e2f8-4d86-3efb-b628-38cdf5cc2845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:9c:1a:b2:0f:8e:a4:27:cd:88:eb:7d:53:e4:c8:45:a6:5d: f4:ec:22:58:43:ce:70:a6:96:df:a0:4e:73:fe:5f:53:c5:b8: 78:9e:b8:1c:66:a2:ef:19:db:05:f1:ff:c0:b4:04:f6:3b:ff: 72:d0:8a:51:d0:c6:36:7d:4f:1b:b5:02:db:7f:e1:af:64:37: 2f:8c:7b:8b:f7:98:14:d2:31:6d:c6:28:cf:2a:47:60:0c:33: c7:73:cd:75:3a:d5:00:54:4d:e3:5c:1a:62:a8:2e:2a:38:7f: 9d:62:90:23:fd:2e:e1:49:7e:ee:a6:39:23:73:e7:4e:91:7a: a9:53:72:e2:9d:56:68:57:9f:37:20:10:e6:d2:79:73:e7:28: be:ba:b3:66:f3:4d:bc:9c:25:24:97:e0:87:70:1c:45:30:7d: d7:0b:d3:56:8c:82:72:ca:d9:dc:f4:76:81:3e:37:74:e1:60: 50:d1:f4:51:73:dc:2d:38:21:19:77:0d:f6:bd:b2:6f:06:aa: e1:51:35:cd:40:38:95:e5:56:5f:b1:7a:b7:e5:81:51:07:2e: 99:91:1b:63:db:3a:ae:f1:8c:b8:2a:f1:18:fa:fb:71:89:67: 6e:af:6b:08:72:bb:94:a2:91:66:61:a5:4e:7a:61:f6:58:28: db:20:7f:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+Rbp2IhnihDcnAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk ODBlMDZhMjMtNGY5MS00ZDhhLWFhN2YtZmVkMGQ3Yjk2NjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyD6O0jSfZUlre8xXkXbdEaTER1xx1drXS3i iJC0+dE5K5QM3NY5PmaZdRThVEtRS+QQxYfF6bzAX5ZoWYDaxp0LJJneHtmFV1TC +QilG+4m9IlzJm5XC6u8DfXOSK32cs2J5n4pOc8u9ryvsA8DNk5Hj0OEYl4rDqjJ Wvl3YZBrhH9KSwEgt9RiAzSCVK36J0TRGn3FPGFR2DvMKroTDfFzYpW9EswcTIbB kfsYg/GlHVQIlrw6BQLhRYSHvF//YfxESK3Lw8zd3nLEXGwEmWS+YF3KYlFTq5ph EFRgbh4TyjD4sHC3Mc1wuf3w6ftsmIIrafscUtZBJ9E1h172swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF00P9oGg4AnR+5CUDvgyr1tZYd/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDdjMmUyZjgtNGQ4Ni0z ZWZiLWI2MjgtMzhjZGY1Y2MyODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCcGrIPjqQnzYjrfVPkyEWmXfTsIlhDznCmlt+gTnP+X1PFuHieuBxm ou8Z2wXx/8C0BPY7/3LQilHQxjZ9Txu1Att/4a9kNy+Me4v3mBTSMW3GKM8qR2AM M8dzzXU61QBUTeNcGmKoLio4f51ikCP9LuFJfu6mOSNz506ReqlTcuKdVmhXnzcg EObSeXPnKL66s2bzTbycJSSX4IdwHEUwfdcL01aMgnLK2dz0doE+N3ThYFDR9FFz 3C04IRl3Dfa9sm8GquFRNc1AOJXlVl+xerflgVEHLpmRG2PbOq7xjLgq8Rj6+3GJ Z26vawhyu5SikWZhpU56YfZYKNsgf+M= -----END CERTIFICATE-----Generated at Sun Jun 29 14:26:24 2025 by rpki-client