$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/958774b8-d9b9-3e5a-b1ec-8c33bf2b37b7.roa File: 958774b8-d9b9-3e5a-b1ec-8c33bf2b37b7.roa (raw, json) Hash identifier: NjCnr7eStDS40FvmyA+7k82GcP3QQdRh5FNiSY/2a2c= Subject key identifier: 58:56:97:E8:33:EB:B9:29:9A:BD:2C:21:38:E2:6B:95:46:9C:FE:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3FAADE05BDC9C8265F1B6740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/958774b8-d9b9-3e5a-b1ec-8c33bf2b37b7.roa Signing time: Fri 20 Jun 2025 01:00:51 +0000 ROA not before: Fri 20 Jun 2025 01:00:51 +0000 ROA not after: Thu 18 Sep 2025 01:00:51 +0000 asID: 16625 IP address blocks: 23.49.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:aa:de:05:bd:c9:c8:26:5f:1b:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 20 01:00:51 2025 GMT Not After : Sep 18 01:00:51 2025 GMT Subject: CN=d2ba5c41-a4f2-42ad-b18a-12b34da9c666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:18:a6:3b:14:40:dc:8e:64:bc:72:04:d4:62: 87:30:93:87:67:5b:b5:da:ee:ae:52:5c:d5:89:31: 57:11:81:2e:fc:93:6e:91:fa:7a:56:cd:2f:a7:9f: c1:2e:71:7b:b7:b9:78:9d:0d:44:23:77:38:92:da: 98:7e:cc:c0:d9:ec:21:1d:15:ea:ff:2b:00:07:ce: 0f:1a:d7:d1:c0:c6:36:f2:92:e9:db:4d:a2:8f:de: 9f:84:55:28:17:7c:82:23:f7:80:9c:d9:ef:95:cf: 0f:30:cd:0f:47:d8:60:f7:3d:1b:ad:d9:8c:d1:29: a3:e7:e9:da:84:18:cb:9f:55:66:c8:04:06:ab:29: 44:13:52:be:d4:fc:00:cc:01:39:96:0e:e7:c0:9a: 14:7d:6e:45:98:62:49:f2:6d:79:ab:60:ed:ae:ee: 33:ac:0a:21:88:7d:90:71:67:6a:71:be:30:ab:9f: ac:f1:a2:d1:e6:f2:73:b4:3b:5a:55:03:7e:5d:45: eb:39:8d:13:dd:9e:74:17:8e:ab:92:79:3f:84:e3: 66:c7:42:70:8e:33:de:c2:46:0c:0d:72:ab:f9:fe: 35:f4:81:9c:29:16:87:14:cb:cd:a7:db:d6:5d:e9: d1:82:f5:00:19:37:82:6b:9a:07:42:1c:1b:41:62: db:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:56:97:E8:33:EB:B9:29:9A:BD:2C:21:38:E2:6B:95:46:9C:FE:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/958774b8-d9b9-3e5a-b1ec-8c33bf2b37b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.49.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a0:f4:cd:6e:70:aa:0e:7d:5d:1a:76:85:9e:27:34:11:3e: ac:31:f5:ce:30:ac:8d:b1:16:2d:7c:c3:f7:24:e2:93:48:e2: e2:79:21:e2:db:4d:b5:d7:64:97:dc:e0:c8:ff:fa:f2:2a:2a: 37:68:1a:d1:73:d1:e9:ae:ad:50:3c:33:80:49:a7:38:22:02: 47:49:55:61:f9:29:83:92:a9:c0:ad:0a:92:2b:88:36:95:bc: 36:6e:83:6e:1d:65:a7:ba:01:03:67:00:dc:34:a9:62:fc:4c: 5a:6b:d7:ed:3a:35:f3:32:8e:59:bf:f0:23:1d:6a:85:fd:d4: 89:ac:75:f2:50:55:8a:35:a3:54:41:0c:90:2e:ad:09:14:c7: fb:f4:c8:c1:69:97:3a:72:6e:64:e1:9d:6e:bc:ff:32:5f:f5: 74:26:d5:3e:1c:06:82:03:2e:16:fa:ed:14:c1:b2:8c:68:0a: 4a:bf:43:7b:a6:39:96:ff:6c:ab:af:62:89:ac:7e:3d:22:45: e2:73:77:cb:f5:c3:d8:29:11:c7:16:8d:7e:09:25:c7:e4:68: cb:bc:00:37:be:f4:ca:c5:68:75:d6:48:d9:f7:a4:ca:83:e9: 41:ef:c6:96:47:28:b4:f4:b1:b1:18:c7:76:7f:75:06:3d:05: 82:0c:30:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo/qt4FvcnIJl8bZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyMDAxMDA1MVoXDTI1MDkxODAxMDA1MVowLzEtMCsGA1UEAxMk ZDJiYTVjNDEtYTRmMi00MmFkLWIxOGEtMTJiMzRkYTljNjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRimOxRA3I5kvHIE1GKHMJOHZ1u12u6uUlzV iTFXEYEu/JNukfp6Vs0vp5/BLnF7t7l4nQ1EI3c4ktqYfszA2ewhHRXq/ysAB84P GtfRwMY28pLp202ij96fhFUoF3yCI/eAnNnvlc8PMM0PR9hg9z0brdmM0Smj5+na hBjLn1VmyAQGqylEE1K+1PwAzAE5lg7nwJoUfW5FmGJJ8m15q2Dtru4zrAohiH2Q cWdqcb4wq5+s8aLR5vJztDtaVQN+XUXrOY0T3Z50F46rknk/hONmx0JwjjPewkYM DXKr+f419IGcKRaHFMvNp9vWXenRgvUAGTeCa5oHQhwbQWLbawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhWl+gz67kpmr0sITjia5VGnP4RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTU4Nzc0YjgtZDliOS0z ZTVhLWIxZWMtOGMzM2JmMmIzN2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzFqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICg9M1ucKoOfV0adoWeJzQRPqwx9c4wrI2xFi18w/ck4pNI4uJ5IeLb TbXXZJfc4Mj/+vIqKjdoGtFz0emurVA8M4BJpzgiAkdJVWH5KYOSqcCtCpIriDaV vDZug24dZae6AQNnANw0qWL8TFpr1+06NfMyjlm/8CMdaoX91ImsdfJQVYo1o1RB DJAurQkUx/v0yMFplzpybmThnW68/zJf9XQm1T4cBoIDLhb67RTBsoxoCkq/Q3um OZb/bKuvYomsfj0iReJzd8v1w9gpEccWjX4JJcfkaMu8ADe+9MrFaHXWSNn3pMqD 6UHvxpZHKLT0sbEYx3Z/dQY9BYIMMFw= -----END CERTIFICATE-----Generated at Sun Jun 29 13:30:45 2025 by rpki-client