$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64adab8d-a107-371f-a2d7-ebcd2191f4ec.roa File: 64adab8d-a107-371f-a2d7-ebcd2191f4ec.roa (raw, json) Hash identifier: Slz71GbH3Z3gSow9UKJ/g4SL6bUqZZFO27TC6fZu2/E= Subject key identifier: 31:DA:10:64:56:9C:3C:AD:21:EB:8D:D0:F1:DF:CE:A0:16:E4:D1:65 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3B7B11FBC1045E7A82F5CF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64adab8d-a107-371f-a2d7-ebcd2191f4ec.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 20940 IP address blocks: 23.45.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:11:fb:c1:04:5e:7a:82:f5:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=d9ec1ca2-d304-470c-bfdb-c854948b6d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6a:22:c5:fc:72:1e:96:f4:1d:a4:e5:83:3b: 16:ed:60:73:d8:65:25:77:53:38:3a:d7:bf:0c:f4: 5d:18:9c:e1:29:b4:04:38:ba:bf:ee:23:ed:08:63: 99:3f:48:ef:b1:e8:0f:30:5c:46:f0:4a:a7:7e:0d: 84:fa:34:51:af:17:fc:81:07:4a:32:d5:f8:f1:7d: 04:f1:47:7b:b2:ab:78:3f:4f:e2:89:1b:f4:c2:6b: 80:66:8a:09:44:7b:b2:05:22:2d:f8:54:dc:7a:23: 1b:d1:5a:d5:da:15:5d:87:ae:07:aa:61:0c:74:bc: 6b:37:3e:6b:bd:89:e8:bc:04:a5:35:50:a3:30:8f: 37:00:10:06:cc:62:44:9c:88:45:34:56:49:80:30: ce:b6:93:b1:2d:c4:6c:e0:8a:42:b5:20:55:59:47: 1b:43:7e:44:56:33:92:d6:41:52:94:87:4f:ac:0c: d5:19:36:14:4b:f0:63:c4:b6:2d:d7:07:0e:5f:c0: 2f:b0:84:63:b5:99:bb:ff:27:d1:71:da:1a:cd:9d: a2:57:d1:eb:c4:f3:7d:d1:8d:51:63:8b:aa:07:ff: 0c:d7:54:c3:be:37:91:36:f3:8a:1d:f5:c2:aa:ff: 40:3c:47:35:e0:4e:5e:c9:f3:05:10:30:36:5a:5a: 5d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DA:10:64:56:9C:3C:AD:21:EB:8D:D0:F1:DF:CE:A0:16:E4:D1:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64adab8d-a107-371f-a2d7-ebcd2191f4ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:81:01:15:d2:b5:9c:c9:a6:97:ab:ba:3d:2a:75:b9:90:08: 73:2d:97:2c:b8:31:64:6f:a2:c8:89:e2:c7:32:c1:e4:95:99: e9:2a:86:de:13:ab:aa:b6:60:df:d2:6f:ee:df:b5:cd:23:df: 5b:4a:5f:20:92:45:ad:ba:37:cc:50:1e:cb:17:88:fc:02:6b: 91:f0:de:ab:85:35:05:2b:e4:0d:4d:54:e8:34:40:81:58:18: 74:dd:a7:a8:99:65:72:c1:91:65:5b:e6:fd:28:e6:b1:ef:58: 58:3c:5a:7c:07:26:27:17:0e:c2:5e:61:d4:44:d4:48:33:b7: 64:ca:ce:28:80:d2:f0:79:49:4e:67:bd:a8:b8:94:d8:85:38: c4:6d:2e:a8:3a:1d:04:b3:9f:3b:72:44:0b:d7:3a:04:8c:be: 69:35:8f:bc:e2:ee:92:a2:5b:22:51:0f:56:70:25:56:b4:32: 35:3a:af:da:d3:1b:d7:79:11:86:ea:be:cf:a5:65:0e:c5:ba: 3f:27:37:1a:ef:37:44:f4:b3:13:c6:6e:17:5d:fa:8c:66:43: b0:f7:9c:46:2b:54:95:ed:2f:50:6b:c3:27:22:9f:40:f6:ea: 42:be:07:08:f5:46:1a:88:6e:8a:a5:d5:08:19:12:53:33:94: f8:9c:de:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7exH7wQReeoL1z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk ZDllYzFjYTItZDMwNC00NzBjLWJmZGItYzg1NDk0OGI2ZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWoixfxyHpb0HaTlgzsW7WBz2GUld1M4Ote/ DPRdGJzhKbQEOLq/7iPtCGOZP0jvsegPMFxG8Eqnfg2E+jRRrxf8gQdKMtX48X0E 8Ud7sqt4P0/iiRv0wmuAZooJRHuyBSIt+FTceiMb0VrV2hVdh64HqmEMdLxrNz5r vYnovASlNVCjMI83ABAGzGJEnIhFNFZJgDDOtpOxLcRs4IpCtSBVWUcbQ35EVjOS 1kFSlIdPrAzVGTYUS/BjxLYt1wcOX8AvsIRjtZm7/yfRcdoazZ2iV9HrxPN90Y1R Y4uqB/8M11TDvjeRNvOKHfXCqv9APEc14E5eyfMFEDA2WlpdPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHaEGRWnDytIeuN0PHfzqAW5NFlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjRhZGFiOGQtYTEwNy0z NzFmLWEyZDctZWJjZDIxOTFmNGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKBARXStZzJpperuj0qdbmQCHMtlyy4MWRvosiJ4scyweSVmekqht4T q6q2YN/Sb+7ftc0j31tKXyCSRa26N8xQHssXiPwCa5Hw3quFNQUr5A1NVOg0QIFY GHTdp6iZZXLBkWVb5v0o5rHvWFg8WnwHJicXDsJeYdRE1Egzt2TKziiA0vB5SU5n vai4lNiFOMRtLqg6HQSznztyRAvXOgSMvmk1j7zi7pKiWyJRD1ZwJVa0MjU6r9rT G9d5EYbqvs+lZQ7Fuj8nNxrvN0T0sxPGbhdd+oxmQ7D3nEYrVJXtL1Brwycin0D2 6kK+Bwj1RhqIboql1QgZElMzlPic3kw= -----END CERTIFICATE-----Generated at Sun Jun 29 19:12:47 2025 by rpki-client