$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c3394bb-af50-3551-abf4-cb863cfa9445.roa File: 9c3394bb-af50-3551-abf4-cb863cfa9445.roa (raw, json) Hash identifier: SBsKmY68FkttmMxMHwXVlCW5XJz/oaLAAt2diihaS48= Subject key identifier: DE:10:03:0A:CA:CB:B2:18:36:FE:48:1B:D4:84:36:06:B5:13:A6:5A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A43DB2FCC27422692BB62A680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c3394bb-af50-3551-abf4-cb863cfa9445.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.53.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:2f:cc:27:42:26:92:bb:62:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=b2c7bcca-ba78-4570-9b53-93c382473f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b0:87:11:30:c3:45:60:fd:8e:12:20:43:81: 15:27:d7:3f:f7:41:05:d0:97:de:02:60:33:50:44: 84:e9:82:48:1f:73:d8:88:f4:f9:e6:44:43:5a:96: 42:33:de:00:67:e3:5e:01:33:81:0a:21:dd:6b:34: a9:91:c2:03:07:2e:8d:dd:be:fa:a7:6f:a3:30:e2: 6c:10:5e:cb:09:5f:e8:d4:41:57:41:6d:e5:c8:11: 8d:c3:72:11:73:3a:3d:1a:ce:98:47:75:38:12:66: 23:e5:9d:3f:17:62:7e:d7:46:1e:e8:65:13:26:63: fe:86:67:8c:c7:00:72:41:53:53:72:a7:e0:c3:8c: 20:79:cc:9c:4f:e8:2f:a6:44:34:7d:ca:55:b3:88: c2:a9:79:c4:51:6f:f2:6e:5e:54:00:38:cf:3e:6a: 32:a5:3f:c3:a5:15:08:73:c1:80:49:a5:80:54:7e: 2e:c1:43:09:0e:87:fd:fc:8f:b1:f2:e2:6c:09:27: 21:d9:e3:bf:5e:67:f7:a7:2c:5d:97:fd:7f:b0:d8: cb:d9:62:b9:f9:f6:11:be:31:30:47:00:ad:6f:65: 57:1c:7d:21:7b:41:18:73:66:95:bc:4c:7a:9b:9b: fd:58:11:b1:9e:38:90:23:d0:79:be:59:58:65:82: 17:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:10:03:0A:CA:CB:B2:18:36:FE:48:1B:D4:84:36:06:B5:13:A6:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c3394bb-af50-3551-abf4-cb863cfa9445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:5c:60:db:83:b4:1d:42:2e:9f:79:af:0e:00:91:48:db:48: c2:75:6f:5e:a2:60:c0:1a:62:d8:73:bb:09:c5:a6:b9:78:06: 54:f6:8a:18:38:c7:d8:c8:7e:2c:53:f8:5e:47:0c:3c:93:69: 9f:81:73:46:b2:06:94:59:fb:48:e8:53:82:23:85:8f:c0:82: 39:ff:e9:f0:eb:dc:ee:58:f3:2b:2b:87:c5:6d:60:33:65:8d: f3:cc:02:62:01:f2:b8:3d:16:15:2a:1b:ef:6c:82:c0:dd:23: 4a:ce:1e:f4:b6:6e:ed:a4:cb:d6:3e:16:04:09:8b:4d:f1:b1: 70:37:8d:ca:a4:76:81:d5:10:51:59:a8:7a:06:eb:e9:c7:e4: 38:2c:f8:72:26:af:19:3d:05:b9:f9:6c:ee:f4:b1:d2:87:8c: a1:36:e7:38:ef:93:d1:4d:d2:d9:4e:0c:0b:2a:cc:f7:35:6e: 28:87:06:0f:e5:41:8f:00:1b:c2:6c:e3:69:ab:2e:22:fd:c9: 67:c1:ba:2d:67:7d:b8:b6:c5:a1:ad:fc:88:4c:34:db:07:24: 91:e6:e3:d2:c9:27:a6:1f:2b:12:5b:d8:a9:de:13:aa:f7:9c: 09:5f:18:d0:2f:6c:2c:87:90:fa:f8:18:cc:6c:dc:44:02:f1: a4:77:7d:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2y/MJ0ImkrtipoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk YjJjN2JjY2EtYmE3OC00NTcwLTliNTMtOTNjMzgyNDczZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbCHETDDRWD9jhIgQ4EVJ9c/90EF0JfeAmAz UESE6YJIH3PYiPT55kRDWpZCM94AZ+NeATOBCiHdazSpkcIDBy6N3b76p2+jMOJs EF7LCV/o1EFXQW3lyBGNw3IRczo9Gs6YR3U4EmYj5Z0/F2J+10Ye6GUTJmP+hmeM xwByQVNTcqfgw4wgecycT+gvpkQ0fcpVs4jCqXnEUW/ybl5UADjPPmoypT/DpRUI c8GASaWAVH4uwUMJDof9/I+x8uJsCSch2eO/Xmf3pyxdl/1/sNjL2WK5+fYRvjEw RwCtb2VXHH0he0EYc2aVvEx6m5v9WBGxnjiQI9B5vllYZYIXjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4QAwrKy7IYNv5IG9SENga1E6ZaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWMzMzk0YmItYWY1MC0z NTUxLWFiZjQtY2I4NjNjZmE5NDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzWkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElcYNuDtB1CLp95rw4AkUjbSMJ1b16iYMAaYthzuwnFprl4BlT2ihg4 x9jIfixT+F5HDDyTaZ+Bc0ayBpRZ+0joU4IjhY/Agjn/6fDr3O5Y8ysrh8VtYDNl jfPMAmIB8rg9FhUqG+9sgsDdI0rOHvS2bu2ky9Y+FgQJi03xsXA3jcqkdoHVEFFZ qHoG6+nH5Dgs+HImrxk9Bbn5bO70sdKHjKE25zjvk9FN0tlODAsqzPc1biiHBg/l QY8AG8Js42mrLiL9yWfBui1nfbi2xaGt/IhMNNsHJJHm49LJJ6YfKxJb2KneE6r3 nAlfGNAvbCyHkPr4GMxs3EQC8aR3fQk= -----END CERTIFICATE-----Generated at Tue Jul 1 13:18:24 2025 by rpki-client