$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48443691-e9c4-3cee-b4a0-c15e161ccecc.roa File: 48443691-e9c4-3cee-b4a0-c15e161ccecc.roa (raw, json) Hash identifier: rPoZqN81NKS151KbvOJm64lGVKu4AGauwwvA3tHbXdw= Subject key identifier: 5D:29:4B:D3:A4:4B:D8:0F:77:1F:EF:4A:C7:8C:11:F9:45:7E:33:8A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A15A57B6ECBD83E65F991C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48443691-e9c4-3cee-b4a0-c15e161ccecc.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.41.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:a5:7b:6e:cb:d8:3e:65:f9:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=fdf12eaa-28d1-4ef5-bdfa-a1fb1c7b059f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:13:5b:59:74:5a:35:74:fd:3f:0a:90:e3:d1: 28:bb:cb:98:8d:9e:ca:76:ac:b0:db:d7:db:e8:2a: 77:e5:12:b5:01:90:b7:6e:02:5f:2a:96:4e:76:ad: d0:4d:ea:69:a8:af:16:60:22:ce:4c:0e:6d:03:57: 52:9d:12:2f:b9:7b:5c:f7:8a:4e:1a:01:4d:51:19: 49:48:20:c8:6b:c8:da:49:e5:7d:9d:aa:ad:4e:6b: e0:f7:e2:f7:95:e3:de:30:1e:1f:ba:ce:99:67:86: 17:ae:74:ad:cb:47:b5:35:9c:c2:7d:3a:18:31:dc: c1:f0:d2:4b:eb:0c:91:a4:0b:3d:f9:2b:29:e1:37: 68:f5:88:1e:8d:ae:60:0c:d4:d6:94:ed:77:b3:91: 7e:ad:21:bf:21:c7:18:71:86:d7:2f:4f:1c:62:38: 38:8e:3f:aa:af:04:9d:4e:95:2d:c3:cc:d7:1e:ce: 5c:64:5a:3a:78:40:b1:71:dd:c5:c8:6b:4f:96:3e: 1f:fd:01:82:b8:6a:ab:e7:80:bb:59:45:07:6c:61: b6:8e:e0:3e:bf:f4:2d:b6:b2:bf:6a:00:aa:7a:e4: 17:79:32:19:fd:cd:f4:00:40:35:80:10:76:c4:e9: 0c:24:1b:9a:34:3b:37:84:41:50:82:09:5f:14:d4: 72:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:29:4B:D3:A4:4B:D8:0F:77:1F:EF:4A:C7:8C:11:F9:45:7E:33:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48443691-e9c4-3cee-b4a0-c15e161ccecc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:72:c3:91:d7:e5:80:b2:3a:c1:86:66:fe:0f:70:73:fd:c7: 45:87:76:0b:0f:20:a7:74:24:51:e4:32:e6:55:15:00:89:0f: 46:3f:58:c8:3a:5f:b1:f9:ef:68:88:39:90:d9:71:46:79:16: b5:cd:57:ed:c8:cc:0b:77:ac:32:22:a4:b1:43:4a:65:9a:74: c4:98:ec:4d:3f:9f:ad:16:7c:1b:ee:44:66:8e:af:33:e0:20: 59:bb:b0:cb:c0:5c:e6:f1:83:17:0a:c7:2a:2f:c4:1d:63:74: 85:e6:fd:aa:dd:5a:38:e9:6f:1a:9b:b1:45:cd:2c:0d:80:ae: 43:0c:d1:3e:5f:b3:9d:a8:8b:c2:f5:2b:dc:69:39:e2:30:54: 39:9e:ae:74:a1:f9:10:6d:03:5d:d1:c5:e9:1c:bf:fc:eb:fb: 38:ab:cd:a8:db:73:66:3a:08:76:4a:2b:bc:63:22:0e:90:3d: af:a8:ca:bd:2a:eb:bc:72:2e:dc:2d:1f:29:81:de:97:d8:36: a5:9a:14:76:bf:69:a8:5e:67:38:62:ab:33:a8:d3:53:ca:7a: f6:3d:e5:55:5e:d4:09:c2:7b:b9:77:7e:e3:6e:0c:2b:50:42: 62:0f:91:80:97:c0:3c:0b:02:ba:7b:ec:e1:39:cc:07:65:31: 5a:da:df:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FaV7bsvYPmX5kcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk ZmRmMTJlYWEtMjhkMS00ZWY1LWJkZmEtYTFmYjFjN2IwNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhNbWXRaNXT9PwqQ49Eou8uYjZ7Kdqyw29fb 6Cp35RK1AZC3bgJfKpZOdq3QTeppqK8WYCLOTA5tA1dSnRIvuXtc94pOGgFNURlJ SCDIa8jaSeV9naqtTmvg9+L3lePeMB4fus6ZZ4YXrnSty0e1NZzCfToYMdzB8NJL 6wyRpAs9+Ssp4Tdo9Ygeja5gDNTWlO13s5F+rSG/IccYcYbXL08cYjg4jj+qrwSd TpUtw8zXHs5cZFo6eECxcd3FyGtPlj4f/QGCuGqr54C7WUUHbGG2juA+v/QttrK/ agCqeuQXeTIZ/c30AEA1gBB2xOkMJBuaNDs3hEFQgglfFNRyMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0pS9OkS9gPdx/vSseMEflFfjOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDg0NDM2OTEtZTljNC0z Y2VlLWI0YTAtYzE1ZTE2MWNjZWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFym7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFyw5HX5YCyOsGGZv4PcHP9x0WHdgsPIKd0JFHkMuZVFQCJD0Y/WMg6 X7H572iIOZDZcUZ5FrXNV+3IzAt3rDIipLFDSmWadMSY7E0/n60WfBvuRGaOrzPg IFm7sMvAXObxgxcKxyovxB1jdIXm/ardWjjpbxqbsUXNLA2ArkMM0T5fs52oi8L1 K9xpOeIwVDmernSh+RBtA13Rxekcv/zr+zirzajbc2Y6CHZKK7xjIg6QPa+oyr0q 67xyLtwtHymB3pfYNqWaFHa/aaheZzhiqzOo01PKevY95VVe1AnCe7l3fuNuDCtQ QmIPkYCXwDwLArp77OE5zAdlMVra3xQ= -----END CERTIFICATE-----Generated at Sun Jun 29 13:48:29 2025 by rpki-client