$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ea18f78-f475-3a34-a688-e4c46578ff08.roa File: 4ea18f78-f475-3a34-a688-e4c46578ff08.roa (raw, json) Hash identifier: YKu6w9dxLkKutRVNJJX4Nzv1AlTU7lGGWo+vh8jj18I= Subject key identifier: 98:81:B1:FE:51:96:0A:50:1A:86:20:60:C1:21:28:E0:9B:D1:B7:C1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A43DB155607396C42D4FE6E70 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ea18f78-f475-3a34-a688-e4c46578ff08.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 45899 IP address blocks: 23.53.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:15:56:07:39:6c:42:d4:fe:6e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=f39122ec-c2ea-4376-880d-3db4bae3c74f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fe:18:54:6b:b0:c4:50:7e:cd:c6:f6:22:38: ac:e8:6c:94:e8:c1:5e:be:ef:95:50:73:fb:98:6d: 4a:24:c4:a4:e8:cd:c6:77:aa:5f:1c:34:dc:7e:7b: 73:a4:9c:02:b3:5a:8f:00:9b:28:f1:56:1c:a2:d5: 3a:93:d9:52:7f:4e:d0:a9:65:d0:e9:2f:00:bc:ca: 1f:b9:30:ed:83:23:66:b5:72:dc:9c:e3:c9:d0:b3: cd:90:af:a1:be:8c:df:b5:28:3a:f3:84:ef:f4:cd: 9b:3c:11:fc:26:8d:0c:ce:1b:d5:2a:b8:ff:76:4a: bd:a7:ad:1b:16:68:92:aa:06:9b:a6:45:cd:b6:ec: 27:b6:85:ff:5b:09:e8:0b:5b:d4:48:df:be:d9:4e: 36:d5:0f:96:95:2f:d2:df:2b:68:fa:1a:05:a9:71: 45:03:a1:93:5e:53:35:90:b1:b2:42:1d:24:68:71: 00:db:92:d3:68:0d:2c:8b:91:16:2a:e6:9c:08:25: f3:ce:24:79:a7:2f:7b:c4:b4:0e:6c:99:5e:5f:dc: 05:8c:32:4c:c3:20:ea:cc:92:bc:57:d2:da:6c:48: cf:d9:99:11:00:bf:f4:55:e2:11:70:f6:c9:fb:e7: 08:9d:52:a8:8d:1b:d4:06:39:7f:8f:45:76:d6:eb: b0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:81:B1:FE:51:96:0A:50:1A:86:20:60:C1:21:28:E0:9B:D1:B7:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ea18f78-f475-3a34-a688-e4c46578ff08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:17:46:34:ad:59:d9:e5:f2:a4:59:6b:f6:d2:ea:b5:dc:f4: 08:d3:32:d6:a0:0f:ea:11:1c:53:1e:af:ae:b4:d1:8f:53:4e: 1a:d3:ac:bf:99:0e:cb:d5:9d:7b:32:62:38:4d:b6:fd:4b:45: dc:8f:55:0a:14:24:db:1c:8d:44:eb:ea:02:33:2b:49:b5:ab: ec:f1:e5:c7:5c:7e:a8:e0:5d:a9:72:b1:91:b8:0f:e6:6f:e5: 86:ba:87:20:ad:58:d8:63:99:d5:d0:86:30:25:fc:2b:41:ee: c6:bb:b9:68:84:82:36:58:1f:9b:fc:0e:4c:91:40:a2:fa:07: ac:69:6c:12:61:6c:7b:39:fe:b2:03:2d:c1:02:68:00:40:73: 13:cb:b4:44:a0:05:88:f1:23:1c:85:58:f9:0b:4d:3b:7b:d9: 8d:02:1e:7c:67:3c:3b:8d:cf:b2:69:b5:ea:76:30:1b:bc:4f: 04:81:a4:fd:d4:24:e9:fe:3e:00:92:dd:c2:46:c8:94:70:bc: e5:c4:5d:83:ae:f9:a2:6e:92:2d:aa:ca:d3:57:d3:da:b9:8f: ec:49:6a:30:7d:46:86:e9:31:45:9e:6f:28:a1:f6:6f:62:11: c3:8f:09:f6:11:eb:7a:4f:7a:09:6e:d1:d5:33:0e:02:10:11: d9:3f:d4:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2xVWBzlsQtT+bnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk ZjM5MTIyZWMtYzJlYS00Mzc2LTg4MGQtM2RiNGJhZTNjNzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv4YVGuwxFB+zcb2Ijis6GyU6MFevu+VUHP7 mG1KJMSk6M3Gd6pfHDTcfntzpJwCs1qPAJso8VYcotU6k9lSf07QqWXQ6S8AvMof uTDtgyNmtXLcnOPJ0LPNkK+hvozftSg684Tv9M2bPBH8Jo0MzhvVKrj/dkq9p60b FmiSqgabpkXNtuwntoX/WwnoC1vUSN++2U421Q+WlS/S3yto+hoFqXFFA6GTXlM1 kLGyQh0kaHEA25LTaA0si5EWKuacCCXzziR5py97xLQObJleX9wFjDJMwyDqzJK8 V9LabEjP2ZkRAL/0VeIRcPbJ++cInVKojRvUBjl/j0V21uuwZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiBsf5RlgpQGoYgYMEhKOCb0bfBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGVhMThmNzgtZjQ3NS0z YTM0LWE2ODgtZTRjNDY1NzhmZjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAXRjStWdnl8qRZa/bS6rXc9AjTMtagD+oRHFMer6600Y9TThrTrL+Z DsvVnXsyYjhNtv1LRdyPVQoUJNscjUTr6gIzK0m1q+zx5cdcfqjgXalysZG4D+Zv 5Ya6hyCtWNhjmdXQhjAl/CtB7sa7uWiEgjZYH5v8DkyRQKL6B6xpbBJhbHs5/rID LcECaABAcxPLtESgBYjxIxyFWPkLTTt72Y0CHnxnPDuNz7Jptep2MBu8TwSBpP3U JOn+PgCS3cJGyJRwvOXEXYOu+aJuki2qytNX09q5j+xJajB9RobpMUWebyih9m9i EcOPCfYR63pPeglu0dUzDgIQEdk/1Hw= -----END CERTIFICATE-----Generated at Sun Jun 29 13:36:11 2025 by rpki-client