$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/890f1dd5-e07e-3eaf-ad58-1e15d6ebd587.roa File: 890f1dd5-e07e-3eaf-ad58-1e15d6ebd587.roa (raw, json) Hash identifier: wu1QnRt4xZmmmdayX7dgeFTwNwLiF7iQNN3u8jOEPqc= Subject key identifier: 4B:CC:6C:37:65:6A:3B:44:D4:66:04:EC:AA:1F:54:A0:82:76:FF:07 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5765DB18DC3444D52ACB4128 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/890f1dd5-e07e-3eaf-ad58-1e15d6ebd587.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 16625 IP address blocks: 23.192.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:db:18:dc:34:44:d5:2a:cb:41:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=8312f6f3-559e-4121-9ca9-c900e9a8e74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b0:ef:24:97:a0:52:6b:79:d2:6e:20:c9:6b: cf:41:c0:ac:ab:6a:87:da:19:5d:f3:df:0d:13:5b: ab:a0:6b:4e:1a:44:b7:d0:0f:c3:a5:71:bf:5a:28: e5:7d:27:2e:cd:94:31:21:82:ed:92:ca:56:df:81: 48:63:7f:4e:a6:76:22:bc:59:44:21:6b:dd:22:38: 59:37:05:39:03:08:2c:fd:df:56:0f:04:3a:e6:4b: 73:02:9f:90:ba:63:09:f9:e4:3d:81:2f:97:6b:b8: 1e:01:84:b7:f7:18:51:54:de:89:a0:69:35:23:11: 12:eb:af:55:18:f3:25:5a:9b:0a:2c:cd:6b:3a:03: f9:dc:68:65:d8:72:08:ba:96:1b:cf:e9:67:de:4b: dc:b1:e9:2c:37:5e:38:ea:ca:e8:29:ea:02:0c:03: d1:b7:a7:5d:ed:ef:b8:08:85:7e:2c:18:50:42:74: 85:86:5b:70:4b:32:67:a4:43:2d:8e:68:68:a3:9f: e5:6e:25:70:48:e5:d6:a0:e5:b2:46:f8:31:53:31: 05:e1:d7:0e:fc:a1:03:78:dc:8c:1e:1d:a3:ad:bc: 2d:10:96:27:9f:72:96:40:9b:45:40:a6:9c:09:a8: 2f:f8:bf:81:3a:c6:ce:ae:42:a6:11:b6:b7:34:10: 28:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CC:6C:37:65:6A:3B:44:D4:66:04:EC:AA:1F:54:A0:82:76:FF:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/890f1dd5-e07e-3eaf-ad58-1e15d6ebd587.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.192.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:13:66:1e:dc:ea:f8:46:19:5c:af:8d:4c:dd:ca:3d:d8:4c: e4:b8:df:a2:cf:93:e1:e6:7f:45:52:80:cc:ed:43:6a:3c:40: f9:5a:71:3d:e4:57:de:5f:91:30:54:c1:3d:f1:35:4d:5d:ac: de:84:e0:37:71:27:aa:c7:a8:b8:f4:a8:d5:dc:34:e9:48:c1: 94:b7:1a:f1:ac:fc:75:35:f7:57:85:97:59:ef:be:b0:0e:ec: 16:0a:58:4a:ec:b2:d1:ed:87:a6:d0:e5:ac:24:ee:cf:87:51: 29:25:bc:6d:ab:f6:43:8a:5d:e9:7c:21:7a:5b:3a:15:bf:27: eb:15:e4:a0:43:cf:ac:b3:b9:80:d1:18:61:75:55:ad:da:aa: 8a:da:9b:67:e7:ed:b9:78:25:28:37:47:4f:10:d2:6f:af:c4: b4:5b:c6:3c:b2:2d:91:b8:64:92:89:dd:0d:cd:df:2f:60:e8: bc:cd:ff:23:85:f5:36:f6:ee:a3:5d:a2:85:0c:90:26:b1:73: 20:c4:e5:8f:cc:94:5a:ea:9c:a9:c9:8c:16:82:f5:fd:4d:03: de:54:1c:ee:01:2e:93:80:07:a4:71:af:20:75:0d:92:11:29: 6c:0c:68:c0:f5:56:7c:ce:4b:11:37:62:41:2c:43:36:e5:e9: 26:01:f8:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZdsY3DRE1SrLQSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk ODMxMmY2ZjMtNTU5ZS00MTIxLTljYTktYzkwMGU5YThlNzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbDvJJegUmt50m4gyWvPQcCsq2qH2hld898N E1uroGtOGkS30A/DpXG/WijlfScuzZQxIYLtkspW34FIY39OpnYivFlEIWvdIjhZ NwU5Awgs/d9WDwQ65ktzAp+QumMJ+eQ9gS+Xa7geAYS39xhRVN6JoGk1IxES669V GPMlWpsKLM1rOgP53Ghl2HIIupYbz+ln3kvcseksN1446sroKeoCDAPRt6dd7e+4 CIV+LBhQQnSFhltwSzJnpEMtjmhoo5/lbiVwSOXWoOWyRvgxUzEF4dcO/KEDeNyM Hh2jrbwtEJYnn3KWQJtFQKacCagv+L+BOsbOrkKmEba3NBAowwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvMbDdlajtE1GYE7KofVKCCdv8HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODkwZjFkZDUtZTA3ZS0z ZWFmLWFkNTgtMWUxNWQ2ZWJkNTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8AmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHETZh7c6vhGGVyvjUzdyj3YTOS436LPk+Hmf0VSgMztQ2o8QPlacT3k V95fkTBUwT3xNU1drN6E4DdxJ6rHqLj0qNXcNOlIwZS3GvGs/HU191eFl1nvvrAO 7BYKWErsstHth6bQ5awk7s+HUSklvG2r9kOKXel8IXpbOhW/J+sV5KBDz6yzuYDR GGF1Va3aqoram2fn7bl4JSg3R08Q0m+vxLRbxjyyLZG4ZJKJ3Q3N3y9g6LzN/yOF 9Tb27qNdooUMkCaxcyDE5Y/MlFrqnKnJjBaC9f1NA95UHO4BLpOAB6RxryB1DZIR KWwMaMD1VnzOSxE3YkEsQzbl6SYB+Jg= -----END CERTIFICATE-----Generated at Sun Jun 29 19:28:53 2025 by rpki-client