$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/483652e2-689d-3906-bb40-49fcdd0a3ca4.roa File: 483652e2-689d-3906-bb40-49fcdd0a3ca4.roa (raw, json) Hash identifier: oxdkOvgHoMV/KsuDW53Ix5t822F6wc4NDtuVPUpa2q4= Subject key identifier: 2A:DB:11:83:38:87:35:AE:48:2D:0A:C1:75:65:03:1B:53:AE:1E:E6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A159736390265AAE72936C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/483652e2-689d-3906-bb40-49fcdd0a3ca4.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.39.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:97:36:39:02:65:aa:e7:29:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=f22c0696-4136-418a-b5d4-d3db5de30fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7a:bb:8e:bb:ed:23:dc:15:00:2f:f6:54:2d: e5:f7:b5:74:54:d6:6f:29:46:ea:b0:14:4b:96:7d: ac:44:fe:f1:7e:1d:9f:6a:27:67:43:6f:69:3a:f1: 67:ec:34:68:c9:82:7e:8f:5d:14:ab:e1:8c:78:42: 7f:f9:2f:e9:2d:58:93:f4:cf:82:57:da:d7:83:21: 5e:c2:85:d2:53:ca:64:77:0f:1d:a8:e8:61:2b:ae: 32:aa:24:4a:42:27:9e:59:04:ac:32:ba:85:54:a6: c9:d1:af:5d:73:72:92:fd:50:77:01:77:1d:5c:05: de:44:6f:0e:c0:ec:09:2f:ad:11:62:91:28:f1:9f: ae:1a:73:3a:72:cf:46:c4:26:73:8f:c3:72:d2:7e: 56:d2:4d:8c:21:a1:0d:6e:6a:44:70:05:fd:dd:7f: 2c:90:94:11:c0:cd:4e:4c:09:4f:8a:a3:7f:43:37: bd:25:c2:88:ed:81:e4:1b:ee:a7:b4:63:58:80:86: 61:66:ee:8a:80:78:71:0a:9a:ce:bf:df:74:3a:3e: 9c:1e:7a:0c:1a:c3:85:e3:9a:07:ba:69:1b:91:23: 3b:33:9c:b7:40:10:61:33:33:a0:a2:bb:59:c6:36: 7c:72:0e:27:f3:93:71:bb:03:a1:be:ae:55:42:c5: 65:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DB:11:83:38:87:35:AE:48:2D:0A:C1:75:65:03:1B:53:AE:1E:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/483652e2-689d-3906-bb40-49fcdd0a3ca4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:e3:32:e0:b6:b6:80:6f:51:df:4c:b2:06:8d:6b:98:93:a5: 93:6b:7a:1e:d3:eb:70:cf:a9:9a:2d:06:db:d8:a2:c7:9c:38: de:87:cd:b7:3b:28:b4:ff:26:ae:ce:3e:cf:1a:8d:d4:6c:9c: e5:1e:47:f0:1b:4e:35:c1:44:0e:0c:cd:76:33:3d:bc:c6:e7: 35:93:73:ee:7c:bd:c1:29:a0:32:1f:d4:06:b4:18:c9:1d:a9: f9:86:87:56:4f:4c:71:6b:20:bf:f8:0b:d6:82:69:23:8b:df: 86:ea:0e:a2:93:fe:89:93:19:5e:2b:18:a9:a5:70:88:99:fd: 1d:27:79:67:c8:f5:04:df:09:12:5b:b2:55:7b:84:c3:f0:76: e8:86:b2:04:ce:17:2e:e4:e2:f3:84:68:28:bb:9e:99:c2:59: 25:b6:cb:5c:83:d4:bb:53:9a:00:04:5b:19:d3:7a:b1:d4:b2: 3b:07:c7:b0:d6:6a:27:4c:29:14:a0:19:67:ef:9b:d0:90:4e: c5:6b:54:bf:c6:2b:12:86:c1:54:04:1b:c3:71:41:0a:a9:ef: 47:f6:46:bf:b8:10:5d:be:31:a8:0d:8c:aa:f6:65:5d:6f:41: e0:e3:56:90:51:bf:1b:cb:07:49:5c:96:30:11:9b:bb:66:8f: 29:b0:b3:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZc2OQJlqucpNsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk ZjIyYzA2OTYtNDEzNi00MThhLWI1ZDQtZDNkYjVkZTMwZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03q7jrvtI9wVAC/2VC3l97V0VNZvKUbqsBRL ln2sRP7xfh2faidnQ29pOvFn7DRoyYJ+j10Uq+GMeEJ/+S/pLViT9M+CV9rXgyFe woXSU8pkdw8dqOhhK64yqiRKQieeWQSsMrqFVKbJ0a9dc3KS/VB3AXcdXAXeRG8O wOwJL60RYpEo8Z+uGnM6cs9GxCZzj8Ny0n5W0k2MIaENbmpEcAX93X8skJQRwM1O TAlPiqN/Qze9JcKI7YHkG+6ntGNYgIZhZu6KgHhxCprOv990Oj6cHnoMGsOF45oH umkbkSM7M5y3QBBhMzOgortZxjZ8cg4n85NxuwOhvq5VQsVlDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrbEYM4hzWuSC0KwXVlAxtTrh7mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDgzNjUyZTItNjg5ZC0z OTA2LWJiNDAtNDlmY2RkMGEzY2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFycwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrjMuC2toBvUd9MsgaNa5iTpZNreh7T63DPqZotBtvYosecON6Hzbc7 KLT/Jq7OPs8ajdRsnOUeR/AbTjXBRA4MzXYzPbzG5zWTc+58vcEpoDIf1Aa0GMkd qfmGh1ZPTHFrIL/4C9aCaSOL34bqDqKT/omTGV4rGKmlcIiZ/R0neWfI9QTfCRJb slV7hMPwduiGsgTOFy7k4vOEaCi7npnCWSW2y1yD1LtTmgAEWxnTerHUsjsHx7DW aidMKRSgGWfvm9CQTsVrVL/GKxKGwVQEG8NxQQqp70f2Rr+4EF2+MagNjKr2ZV1v QeDjVpBRvxvLB0lcljARm7tmjymws4o= -----END CERTIFICATE-----Generated at Mon Jun 30 16:10:41 2025 by rpki-client