$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c0cc7fc-546e-32dd-a62e-1a264b6ca608.roa File: 7c0cc7fc-546e-32dd-a62e-1a264b6ca608.roa (raw, json) Hash identifier: SGzP700GtEHl0bq022UkvdrmbMxQ43/TfGBVTvKe/y0= Subject key identifier: 1C:B4:84:75:A8:BE:9D:F7:A9:B7:8B:1C:69:D4:00:33:0A:41:58:AD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A43DB1165316EBEAB7C32CDC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c0cc7fc-546e-32dd-a62e-1a264b6ca608.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.52.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:11:65:31:6e:be:ab:7c:32:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=b3e44a8e-1a54-4d62-99f4-7e184ac4c78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e4:af:b7:12:a1:c7:94:35:e7:9c:e3:25:2a: fb:97:bc:4f:47:26:26:0c:e5:fa:c7:c8:f0:d2:60: d0:2a:39:4e:d6:0d:ea:50:d6:b7:9e:eb:4f:d2:46: da:e6:d8:20:f4:65:d2:02:c2:60:ba:03:47:9f:ac: 1e:21:d3:33:02:28:ba:c8:dd:b6:c5:50:72:f7:4d: 87:83:9c:c5:9a:87:c9:74:2b:85:6a:75:35:a3:bd: f4:58:10:95:64:09:40:a6:14:cd:bc:50:d2:bb:99: f2:c0:75:3e:81:f0:c6:60:af:45:01:4e:44:ec:e0: 8c:f2:be:a9:9b:28:37:16:d6:25:7b:34:bc:ab:70: 79:1c:ab:9e:45:95:08:f4:06:43:a9:92:47:8a:06: 68:ff:3e:b3:ea:91:0e:86:2f:47:d3:c0:e2:e8:34: b4:47:23:4e:7b:da:2f:bd:61:e1:a1:c1:44:4b:5e: 77:78:ed:86:f6:2a:e3:96:03:d5:85:40:71:33:d0: 08:d9:6e:ee:a0:6f:5b:b3:3f:29:bc:2f:90:f6:ae: f1:7d:7e:c2:ee:81:eb:47:3d:54:8d:a7:c4:b3:58: 42:28:97:2d:d6:f5:7c:c5:4d:ff:ff:69:48:e0:ae: d0:16:76:81:7e:5f:4a:13:6a:92:ac:e0:f1:58:b1: 1d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B4:84:75:A8:BE:9D:F7:A9:B7:8B:1C:69:D4:00:33:0A:41:58:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c0cc7fc-546e-32dd-a62e-1a264b6ca608.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:66:3c:04:f3:5e:af:f8:38:37:b9:44:4b:ca:65:5d:74:06: 8e:27:68:ea:50:92:c1:3f:88:c1:12:ea:06:b2:87:3d:f1:6f: 3f:b9:b9:30:12:1c:c9:d5:b8:8e:db:d6:8d:a3:e1:b9:ca:c1: 69:77:18:3d:1f:08:bd:3a:51:f7:00:27:f3:c7:44:a4:92:4c: 33:db:56:1b:f7:6b:25:b5:6f:91:8c:f5:2b:a6:e7:8f:9a:c8: f0:0e:4b:06:26:7b:56:c9:68:42:4a:af:3e:ad:e7:79:3b:c8: dd:d3:d3:ab:45:f3:e6:a3:d2:aa:28:52:06:f1:8a:42:1e:d1: aa:d9:96:54:cd:fa:e4:b9:ab:cf:fe:eb:d0:6a:09:1d:32:b6: f4:83:16:49:5e:28:b5:cb:b3:9a:67:22:c7:bd:55:9e:3c:f4: 6f:aa:76:b3:ca:e7:f2:83:76:01:97:e7:86:e7:5a:e0:66:f6: 04:66:83:8f:f7:99:ea:94:7c:3e:19:3e:c4:a3:5b:09:01:c1: 7c:08:f4:14:51:42:7d:d6:58:42:dc:17:4f:e5:f9:f3:b7:7c: 4b:a1:14:1c:a5:ee:d6:2a:96:51:d6:56:8d:e3:c1:0c:ec:e6: ff:ef:87:47:8d:dc:4e:73:cc:09:4a:06:2c:9e:a4:ff:dd:0e: 93:a8:6a:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2xFlMW6+q3wyzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk YjNlNDRhOGUtMWE1NC00ZDYyLTk5ZjQtN2UxODRhYzRjNzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eSvtxKhx5Q155zjJSr7l7xPRyYmDOX6x8jw 0mDQKjlO1g3qUNa3nutP0kba5tgg9GXSAsJgugNHn6weIdMzAii6yN22xVBy902H g5zFmofJdCuFanU1o730WBCVZAlAphTNvFDSu5nywHU+gfDGYK9FAU5E7OCM8r6p myg3FtYlezS8q3B5HKueRZUI9AZDqZJHigZo/z6z6pEOhi9H08Di6DS0RyNOe9ov vWHhocFES153eO2G9irjlgPVhUBxM9AI2W7uoG9bsz8pvC+Q9q7xfX7C7oHrRz1U jafEs1hCKJct1vV8xU3//2lI4K7QFnaBfl9KE2qSrODxWLEdqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBy0hHWovp33qbeLHGnUADMKQVitMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2MwY2M3ZmMtNTQ2ZS0z MmRkLWE2MmUtMWEyNjRiNmNhNjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzQDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhmPATzXq/4ODe5REvKZV10Bo4naOpQksE/iMES6gayhz3xbz+5uTAS HMnVuI7b1o2j4bnKwWl3GD0fCL06UfcAJ/PHRKSSTDPbVhv3ayW1b5GM9Sum54+a yPAOSwYme1bJaEJKrz6t53k7yN3T06tF8+aj0qooUgbxikIe0arZllTN+uS5q8/+ 69BqCR0ytvSDFkleKLXLs5pnIse9VZ489G+qdrPK5/KDdgGX54bnWuBm9gRmg4/3 meqUfD4ZPsSjWwkBwXwI9BRRQn3WWELcF0/l+fO3fEuhFByl7tYqllHWVo3jwQzs 5v/vh0eN3E5zzAlKBiyepP/dDpOoahE= -----END CERTIFICATE-----Generated at Sun Jun 29 12:45:40 2025 by rpki-client