$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/914a24de-1b19-373a-a9cd-9b262e73e488.roa File: 914a24de-1b19-373a-a9cd-9b262e73e488.roa (raw, json) Hash identifier: SM8Z+UQOTQv+TEMmCAkfVfDSPrAI9V0w8A/D8e4+NEw= Subject key identifier: 8D:3B:AA:C0:DF:30:2E:32:3C:BB:1B:4B:A4:55:FE:B1:29:06:A4:0F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A15A5E2F7F4D57FD6C8E720 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/914a24de-1b19-373a-a9cd-9b262e73e488.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.41.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:a5:e2:f7:f4:d5:7f:d6:c8:e7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=3993b755-d655-4ef0-be46-d81fc882ce82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:50:24:64:00:22:8e:53:8f:2a:86:a4:a3:c1: e6:42:79:62:c1:f3:8e:47:04:1f:99:1a:cd:a8:ca: 3e:06:0d:8b:6b:42:0a:b8:c9:0a:67:fc:8e:ca:1a: d5:e6:38:56:79:20:a7:86:64:9e:4e:70:cc:ea:19: f2:42:af:eb:47:2b:09:99:d3:e2:4e:c0:f1:f8:5a: 3a:47:10:f1:2c:c0:84:a3:79:ec:91:69:e2:6c:02: 36:4b:c5:04:10:61:94:8d:d6:a8:5b:de:81:20:d9: 9a:9f:a3:f5:7b:68:4a:c2:47:fa:20:c0:ff:1d:74: 97:a0:7c:76:af:ed:90:48:4b:96:bb:7d:63:11:98: 16:0a:9d:9b:21:41:ca:c7:95:6f:21:fb:54:e6:6c: 04:aa:b7:30:d0:aa:eb:e3:9f:6a:b4:f8:2e:7d:d9: d6:05:45:21:c5:e8:1a:61:80:2c:98:32:55:23:5a: 72:37:06:b3:e3:1b:38:41:11:2e:ab:8f:71:bd:1c: 99:15:4a:e4:a1:3e:a6:be:21:40:cb:88:1f:ed:64: 9a:09:24:79:59:fa:31:df:47:b9:6f:ea:85:d5:f8: 59:5c:21:3c:21:3e:75:60:5c:25:2a:be:07:5a:2d: 86:10:5c:d4:c4:8f:d3:6d:7e:91:7d:3b:14:47:33: 55:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3B:AA:C0:DF:30:2E:32:3C:BB:1B:4B:A4:55:FE:B1:29:06:A4:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/914a24de-1b19-373a-a9cd-9b262e73e488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:11:8b:95:4b:88:f6:f1:da:db:35:77:25:65:5c:f1:30:d1: 71:99:0e:9c:1c:ed:e6:e2:20:13:df:fd:ba:c4:01:73:64:05: c6:e7:d4:36:71:80:fe:1e:bf:7b:f7:5e:b5:97:92:60:c0:21: 54:dd:0f:c2:95:43:e1:33:70:98:3f:31:ef:97:a2:d4:67:08: 50:62:a0:1d:bf:2a:69:27:26:35:06:48:d5:cc:51:d7:8b:35: a3:a9:76:ea:39:af:dd:60:2b:63:1e:ca:ca:ac:1f:7d:17:6d: 45:cf:55:d2:16:0d:12:0b:bc:2d:b2:91:ee:9b:8d:b5:e8:35: 1a:49:49:60:e4:fa:d8:87:9a:4a:d7:20:20:9f:7a:07:68:8c: fd:8d:48:0a:8e:45:51:fa:26:2c:a6:cb:69:5b:07:ad:d6:22: a0:0a:35:e1:22:65:9b:51:4a:03:3b:0e:8d:06:f2:5f:5d:24: 56:77:0f:6c:b2:a4:22:5f:23:98:4e:0a:0f:32:65:d6:dd:b7: 52:46:3c:97:70:e8:f6:3a:c2:66:f4:5f:1e:71:3f:b7:83:42: 4a:ff:3a:ec:b2:05:d6:f3:3c:67:88:12:cc:2b:78:d8:1c:53: 56:b7:b0:b8:e5:86:6c:1f:8c:2f:0a:cd:10:9e:b7:c9:1e:24: c1:f9:83:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FaXi9/TVf9bI5yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk Mzk5M2I3NTUtZDY1NS00ZWYwLWJlNDYtZDgxZmM4ODJjZTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71AkZAAijlOPKoako8HmQnliwfOORwQfmRrN qMo+Bg2La0IKuMkKZ/yOyhrV5jhWeSCnhmSeTnDM6hnyQq/rRysJmdPiTsDx+Fo6 RxDxLMCEo3nskWnibAI2S8UEEGGUjdaoW96BINman6P1e2hKwkf6IMD/HXSXoHx2 r+2QSEuWu31jEZgWCp2bIUHKx5VvIftU5mwEqrcw0Krr459qtPgufdnWBUUhxega YYAsmDJVI1pyNwaz4xs4QREuq49xvRyZFUrkoT6mviFAy4gf7WSaCSR5Wfox30e5 b+qF1fhZXCE8IT51YFwlKr4HWi2GEFzUxI/TbX6RfTsURzNVhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI07qsDfMC4yPLsbS6RV/rEpBqQPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTE0YTI0ZGUtMWIxOS0z NzNhLWE5Y2QtOWIyNjJlNzNlNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyn+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgRi5VLiPbx2ts1dyVlXPEw0XGZDpwc7ebiIBPf/brEAXNkBcbn1DZx gP4ev3v3XrWXkmDAIVTdD8KVQ+EzcJg/Me+XotRnCFBioB2/KmknJjUGSNXMUdeL NaOpduo5r91gK2MeysqsH30XbUXPVdIWDRILvC2yke6bjbXoNRpJSWDk+tiHmkrX ICCfegdojP2NSAqORVH6Jiymy2lbB63WIqAKNeEiZZtRSgM7Do0G8l9dJFZ3D2yy pCJfI5hOCg8yZdbdt1JGPJdw6PY6wmb0Xx5xP7eDQkr/OuyyBdbzPGeIEswreNgc U1a3sLjlhmwfjC8KzRCet8keJMH5gzc= -----END CERTIFICATE-----Generated at Sun Jun 29 13:35:19 2025 by rpki-client