$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59940b54-9c8c-3003-805b-22491174d702.roa File: 59940b54-9c8c-3003-805b-22491174d702.roa (raw, json) Hash identifier: KJG6teUPf5uJO3sr56O49T8qpB5RvC1DdwdaZSyJDIo= Subject key identifier: AE:9F:39:00:0E:2B:6C:9F:54:97:1E:B2:35:9D:15:1C:E7:84:66:EB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A43DAF4FBD95C58923637AC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59940b54-9c8c-3003-805b-22491174d702.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.11.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:da:f4:fb:d9:5c:58:92:36:37:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=889630cd-ca44-4699-a42e-64e1249f6726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:78:11:56:c9:3c:b1:8a:43:aa:26:72:10:69: d1:8c:e1:8c:38:b9:47:bf:44:b8:98:72:e9:6f:ba: 42:8b:e9:18:87:ed:6e:00:06:05:9f:d7:e7:66:a3: 47:ed:f1:a0:b1:3c:fe:11:0a:8e:d0:21:90:c1:90: 97:91:c8:1a:bd:3f:5a:64:e1:ab:5f:d0:c0:73:fd: 37:7d:cb:d3:91:6d:4f:01:e4:47:e2:ac:4c:a1:e8: 3c:fc:49:f3:cc:06:39:d0:12:a8:63:f1:61:7e:51: fc:1a:e7:c8:cb:d8:2e:00:d7:51:13:ea:9a:2b:48: 75:87:07:3d:d4:4e:3b:40:57:b6:ca:bc:9f:59:e7: f1:82:63:ed:67:99:7e:9b:de:ae:13:38:5b:9a:ed: 39:ac:2f:85:b1:bc:b5:c1:49:69:fe:c3:92:32:1c: 0e:2d:3f:fa:e0:65:05:7e:1f:b3:1c:0b:68:f4:40: af:5f:41:62:e7:c6:08:7f:8d:8e:ec:07:03:6b:00: a4:c8:88:13:6c:fc:ae:0a:d4:09:5f:d0:d7:e8:87: d1:42:e9:0d:d4:86:6b:ff:cd:01:b0:ef:7b:cf:c6: 0a:f0:4d:b5:ba:9d:05:84:95:7e:e2:61:ba:bf:9f: 8d:c1:a5:30:0b:b9:3b:fa:43:6b:b9:dd:7e:18:ba: e6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9F:39:00:0E:2B:6C:9F:54:97:1E:B2:35:9D:15:1C:E7:84:66:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59940b54-9c8c-3003-805b-22491174d702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.11.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:a9:08:87:aa:87:e4:fb:d9:36:f7:46:84:fb:0f:a0:73:db: f4:40:1b:c9:f3:3e:97:2f:97:cf:ca:e4:d5:e6:3f:cd:8f:07: b1:63:08:e2:7f:11:71:bb:6e:ff:2d:5a:72:63:12:ef:5a:f6: 6a:2a:51:cb:9e:3e:c6:78:e0:49:f0:34:5b:79:fc:46:f2:bc: 45:c2:f4:45:e2:36:dd:02:99:f0:43:af:6e:9f:44:c9:47:fe: 79:98:0f:09:14:b1:1f:5e:d7:48:db:79:5b:46:b5:15:8b:7a: e9:2a:dc:3f:72:20:91:1b:3d:8c:28:27:9c:ac:1c:e3:d3:46: 26:63:d5:e6:18:38:8f:cd:74:64:16:07:24:4a:4b:cd:a0:33: 07:a6:01:9b:e7:2a:90:bf:82:90:49:87:63:fc:e4:7d:fb:2f: 07:ee:8f:02:a0:c6:b9:3f:39:0f:46:02:0b:f2:65:f5:99:47: b1:87:f2:b5:76:7f:f6:07:9f:51:74:8c:cd:3b:53:18:f0:92: d4:a1:fd:94:25:06:82:75:76:0a:40:65:b2:12:ca:0a:02:87: 54:08:af:42:03:c5:b8:90:a4:8b:ab:52:09:d5:c9:52:c8:70: d2:0c:a0:cb:4d:47:05:04:24:a1:3c:20:c0:b8:d1:55:68:47: 85:79:2f:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2vT72VxYkjY3rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk ODg5NjMwY2QtY2E0NC00Njk5LWE0MmUtNjRlMTI0OWY2NzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3gRVsk8sYpDqiZyEGnRjOGMOLlHv0S4mHLp b7pCi+kYh+1uAAYFn9fnZqNH7fGgsTz+EQqO0CGQwZCXkcgavT9aZOGrX9DAc/03 fcvTkW1PAeRH4qxMoeg8/EnzzAY50BKoY/FhflH8GufIy9guANdRE+qaK0h1hwc9 1E47QFe2yryfWefxgmPtZ5l+m96uEzhbmu05rC+Fsby1wUlp/sOSMhwOLT/64GUF fh+zHAto9ECvX0Fi58YIf42O7AcDawCkyIgTbPyuCtQJX9DX6IfRQukN1IZr/80B sO97z8YK8E21up0FhJV+4mG6v5+NwaUwC7k7+kNrud1+GLrmvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6fOQAOK2yfVJcesjWdFRznhGbrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTk5NDBiNTQtOWM4Yy0z MDAzLTgwNWItMjI0OTExNzRkNzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwvJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+pCIeqh+T72Tb3RoT7D6Bz2/RAG8nzPpcvl8/K5NXmP82PB7FjCOJ/ EXG7bv8tWnJjEu9a9moqUcuePsZ44EnwNFt5/EbyvEXC9EXiNt0CmfBDr26fRMlH /nmYDwkUsR9e10jbeVtGtRWLeukq3D9yIJEbPYwoJ5ysHOPTRiZj1eYYOI/NdGQW ByRKS82gMwemAZvnKpC/gpBJh2P85H37LwfujwKgxrk/OQ9GAgvyZfWZR7GH8rV2 f/YHn1F0jM07UxjwktSh/ZQlBoJ1dgpAZbISygoCh1QIr0IDxbiQpIurUgnVyVLI cNIMoMtNRwUEJKE8IMC40VVoR4V5L8I= -----END CERTIFICATE-----Generated at Mon Jun 30 15:05:38 2025 by rpki-client