$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79d27040-f27a-3660-8ec6-4aa5dfa9f8ab.roa File: 79d27040-f27a-3660-8ec6-4aa5dfa9f8ab.roa (raw, json) Hash identifier: CF5K7fI7okJ0HTKIrs6zIsck6aMLW2zVINiqpULxMqA= Subject key identifier: 9D:A2:33:36:E8:73:42:10:F6:63:E5:74:87:C1:94:88:57:65:DA:AE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A43DB2E9E36B949AEEAE04200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79d27040-f27a-3660-8ec6-4aa5dfa9f8ab.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.53.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:2e:9e:36:b9:49:ae:ea:e0:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=2ef9ccb4-4b08-47cb-907a-a1239fb93f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2e:97:88:42:a6:c2:e8:e7:9c:4e:b4:e7:13: d4:3e:a9:64:9f:87:53:62:0e:1a:00:4a:bb:48:d3: 37:64:87:7f:8f:4c:fa:a5:3d:68:95:2e:a9:c0:76: c2:31:ac:c9:64:fb:2b:ef:73:b4:01:3f:b2:8b:1e: c2:cd:3f:3b:fc:28:db:99:8e:0f:b0:9d:20:f9:f3: 27:d4:af:e6:d0:5a:09:05:c4:3c:33:d1:7b:d3:e7: fb:d6:a3:68:27:02:0c:01:fa:34:a0:4c:1e:a5:c6: 80:0e:70:95:0d:4a:34:00:25:de:09:e1:80:53:6e: a7:26:0f:b5:c7:f3:8e:8a:0a:d5:7a:75:eb:cd:47: b2:f6:be:05:c4:af:b7:55:be:92:99:96:d9:9b:28: 3c:4c:9f:80:62:47:6b:8d:eb:b9:3f:40:0e:7a:85: 54:e7:89:4b:32:fc:56:f9:b1:1f:99:af:94:a2:f7: dc:0b:8a:d1:b1:11:84:94:e7:d4:8f:32:1f:c8:c1: 56:b2:74:d7:e9:88:be:44:45:73:1f:fe:7d:b6:82: 05:cb:43:be:e6:08:0d:80:8a:5b:67:50:02:7b:43: 3d:fd:e2:40:8e:c2:5e:8e:f1:93:26:af:cf:c3:b7: 14:b8:8e:b2:7d:77:c3:b3:14:0e:b7:14:73:c9:b5: 09:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A2:33:36:E8:73:42:10:F6:63:E5:74:87:C1:94:88:57:65:DA:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79d27040-f27a-3660-8ec6-4aa5dfa9f8ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:6c:4a:4f:e9:73:a5:9b:b8:06:22:15:26:58:93:4c:f5:9b: db:bf:a2:a0:d1:62:65:c3:14:cd:36:23:cd:79:1b:0d:75:87: 3e:58:db:72:9d:4e:54:30:33:b5:6d:32:2f:76:8d:88:83:79: 73:c1:a2:00:29:29:a2:fe:6d:bd:20:04:34:f0:3c:f3:3f:c8: f5:ec:f3:9c:94:e4:eb:de:5e:cd:6f:80:21:9c:80:03:77:b0: 72:25:d1:7a:0c:10:ce:c3:67:a2:1e:41:f7:31:1d:41:f3:e2: 93:e3:c6:5a:21:f8:2f:fe:c0:2d:24:ec:b7:fd:96:52:88:03: ca:ff:b3:6f:f5:ec:d2:23:44:c5:01:cd:7b:61:e9:05:a1:31: f8:5a:6b:d4:ae:09:73:aa:01:db:df:13:92:cd:21:17:82:6f: 9c:50:cd:8d:68:34:0b:dd:42:70:df:47:42:3e:60:f6:95:7f: c6:0a:c0:ba:11:b5:d8:f0:27:c9:07:5c:a9:36:cb:be:1b:1c: 09:70:36:df:d8:57:56:71:a7:68:b8:e6:4e:7c:aa:a4:89:47: 31:bd:20:bc:9b:ba:70:a3:72:4f:c9:7a:3e:a4:b6:21:91:c7: 83:b8:fe:1c:9e:b8:b6:f2:b6:08:76:7f:ff:6e:5c:36:d7:1a: 40:21:d1:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2y6eNrlJrurgQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk MmVmOWNjYjQtNGIwOC00N2NiLTkwN2EtYTEyMzlmYjkzZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS6XiEKmwujnnE605xPUPqlkn4dTYg4aAEq7 SNM3ZId/j0z6pT1olS6pwHbCMazJZPsr73O0AT+yix7CzT87/CjbmY4PsJ0g+fMn 1K/m0FoJBcQ8M9F70+f71qNoJwIMAfo0oEwepcaADnCVDUo0ACXeCeGAU26nJg+1 x/OOigrVenXrzUey9r4FxK+3Vb6SmZbZmyg8TJ+AYkdrjeu5P0AOeoVU54lLMvxW +bEfma+UovfcC4rRsRGElOfUjzIfyMFWsnTX6Yi+REVzH/59toIFy0O+5ggNgIpb Z1ACe0M9/eJAjsJejvGTJq/Pw7cUuI6yfXfDsxQOtxRzybUJMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2iMzboc0IQ9mPldIfBlIhXZdquMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzlkMjcwNDAtZjI3YS0z NjYwLThlYzYtNGFhNWRmYTlmOGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzUCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBsSk/pc6WbuAYiFSZYk0z1m9u/oqDRYmXDFM02I815Gw11hz5Y23Kd TlQwM7VtMi92jYiDeXPBogApKaL+bb0gBDTwPPM/yPXs85yU5OveXs1vgCGcgAN3 sHIl0XoMEM7DZ6IeQfcxHUHz4pPjxloh+C/+wC0k7Lf9llKIA8r/s2/17NIjRMUB zXth6QWhMfhaa9SuCXOqAdvfE5LNIReCb5xQzY1oNAvdQnDfR0I+YPaVf8YKwLoR tdjwJ8kHXKk2y74bHAlwNt/YV1Zxp2i45k58qqSJRzG9ILybunCjck/Jej6ktiGR x4O4/hyeuLbytgh2f/9uXDbXGkAh0W8= -----END CERTIFICATE-----Generated at Sun Jun 29 13:44:41 2025 by rpki-client