$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7391cab9-2424-39f9-a3ce-271f5c1fd2b0.roa File: 7391cab9-2424-39f9-a3ce-271f5c1fd2b0.roa (raw, json) Hash identifier: ITmJ2jdmun5aqa0I1R/Yh/tCpwsvzFXDbjBwK78CijU= Subject key identifier: 4B:FC:AB:E5:F0:53:0F:40:3E:42:6E:09:0B:13:59:18:B4:04:3E:1C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3B7B109EA5761E3894FA4100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7391cab9-2424-39f9-a3ce-271f5c1fd2b0.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 16625 IP address blocks: 23.44.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:10:9e:a5:76:1e:38:94:fa:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=98b92f04-c8c1-4262-b9c8-d12ed8e0a4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b8:2e:80:51:da:cb:8d:9f:f5:2d:c5:2a:79: 19:c7:fc:09:28:d2:ac:90:bb:27:95:fd:4c:57:4c: 43:8e:85:06:6d:23:9e:97:80:37:51:fd:88:36:05: e3:b8:78:32:45:67:85:bf:67:3d:77:39:ea:4b:c0: 5e:5c:a9:90:5a:30:b8:b4:cd:b4:b6:72:ce:20:5f: 7d:d7:98:4c:18:5e:24:4f:5d:2a:7c:70:0e:84:23: 84:7c:d4:d4:84:4c:1a:46:f3:3a:3f:52:73:82:5a: d3:7b:59:51:86:29:bf:af:bc:56:58:18:e7:18:9f: 78:d2:3d:05:17:ad:f4:86:81:f0:f6:58:0b:46:c3: 95:b8:e6:35:25:df:84:5c:bc:09:49:6b:f6:58:ad: 50:8b:b8:05:32:49:f2:3a:de:be:e0:57:5e:22:f2: d7:94:cb:13:18:c9:21:df:b5:ec:ee:fc:9e:ba:c8: 76:6d:38:ec:c0:9d:0f:8e:46:ab:3b:69:73:37:9a: 67:46:c0:cd:25:67:df:f8:3e:21:8a:7e:80:4e:bd: c4:2a:bb:79:f4:bf:07:15:9a:8f:53:01:1c:68:3b: a1:3c:12:ee:c9:a7:12:ab:ac:1b:66:fd:4e:75:e9: be:72:c2:66:0a:b9:f1:1f:f0:66:7f:93:4c:fe:ff: 1e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FC:AB:E5:F0:53:0F:40:3E:42:6E:09:0B:13:59:18:B4:04:3E:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7391cab9-2424-39f9-a3ce-271f5c1fd2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:e4:b8:88:a8:67:52:2b:27:cb:5b:ec:67:1a:d6:76:48:c6: 6b:40:74:fc:be:b7:76:c8:3a:53:6d:e2:dc:d3:95:9c:f6:70: 03:ec:c1:ec:f4:af:84:47:2c:49:6c:9a:52:fa:44:87:dd:61: 89:57:92:79:ea:a6:6c:30:54:2e:68:c9:e1:14:b2:65:13:80: 87:d4:03:bd:5b:b2:c8:38:1a:52:9e:80:4f:7d:12:37:be:f7: 13:45:0d:aa:6f:82:4f:6b:89:fd:8f:42:0b:bf:aa:20:33:aa: 8c:d7:5a:13:e3:64:c9:dd:f1:17:66:4c:56:c4:f8:6c:52:ab: 10:45:93:48:e4:60:6b:92:ad:5a:ca:dc:e5:85:38:ab:16:b7: f8:02:a2:13:9a:0f:73:19:8c:40:3f:c4:92:d0:ec:05:3d:63: 24:6d:e1:a3:3f:ec:1d:44:2d:85:aa:ad:f7:a3:35:bf:8b:97: 7b:6f:18:b1:74:7d:85:16:46:93:57:e8:0b:56:77:8d:36:71: 8a:68:4b:b2:b6:b3:87:0d:5a:77:19:d6:b7:e9:6f:56:e3:e7: 82:94:72:15:dd:9d:06:09:40:13:a6:1b:e7:42:78:fe:71:cd: dd:ec:99:c1:3d:ec:86:38:ae:d7:b4:f7:fd:22:bf:39:9c:f9: d8:7d:c9:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7exCepXYeOJT6QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk OThiOTJmMDQtYzhjMS00MjYyLWI5YzgtZDEyZWQ4ZTBhNGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbgugFHay42f9S3FKnkZx/wJKNKskLsnlf1M V0xDjoUGbSOel4A3Uf2INgXjuHgyRWeFv2c9dznqS8BeXKmQWjC4tM20tnLOIF99 15hMGF4kT10qfHAOhCOEfNTUhEwaRvM6P1JzglrTe1lRhim/r7xWWBjnGJ940j0F F630hoHw9lgLRsOVuOY1Jd+EXLwJSWv2WK1Qi7gFMknyOt6+4FdeIvLXlMsTGMkh 37Xs7vyeush2bTjswJ0PjkarO2lzN5pnRsDNJWff+D4hin6ATr3EKrt59L8HFZqP UwEcaDuhPBLuyacSq6wbZv1Odem+csJmCrnxH/Bmf5NM/v8e7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEv8q+XwUw9APkJuCQsTWRi0BD4cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzM5MWNhYjktMjQyNC0z OWY5LWEzY2UtMjcxZjVjMWZkMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyw8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnkuIioZ1IrJ8tb7Gca1nZIxmtAdPy+t3bIOlNt4tzTlZz2cAPswez0 r4RHLElsmlL6RIfdYYlXknnqpmwwVC5oyeEUsmUTgIfUA71bssg4GlKegE99Eje+ 9xNFDapvgk9rif2PQgu/qiAzqozXWhPjZMnd8RdmTFbE+GxSqxBFk0jkYGuSrVrK 3OWFOKsWt/gCohOaD3MZjEA/xJLQ7AU9YyRt4aM/7B1ELYWqrfejNb+Ll3tvGLF0 fYUWRpNX6AtWd402cYpoS7K2s4cNWncZ1rfpb1bj54KUchXdnQYJQBOmG+dCeP5x zd3smcE97IY4rte09/0ivzmc+dh9ycI= -----END CERTIFICATE-----Generated at Sun Jun 29 13:53:20 2025 by rpki-client