$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1ef919d-03e9-306b-9427-3ae21cfbf33e.roa File: a1ef919d-03e9-306b-9427-3ae21cfbf33e.roa (raw, json) Hash identifier: q/jpoBeMCaV+VkvOWA63rHBYWWLbAUm7f4f7J3drcWE= Subject key identifier: 13:62:EF:32:74:F1:92:22:39:5A:54:86:96:F8:C1:52:55:63:36:E8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3B7B1261A7F196C21119E1E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1ef919d-03e9-306b-9427-3ae21cfbf33e.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 20940 IP address blocks: 23.45.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:12:61:a7:f1:96:c2:11:19:e1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=0a37eb7e-07cf-4d2e-a987-366cf45b6d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:96:ec:c4:e9:ba:fd:58:47:40:fd:2c:e9:df: 26:cc:5f:70:8f:ec:97:16:10:82:ab:22:be:90:11: 99:86:67:21:ba:e7:42:a1:52:d7:bb:02:35:f2:65: 84:52:b4:dc:f3:53:c7:15:3a:3a:d7:d7:3d:91:39: d2:90:65:a8:23:19:01:46:c6:23:70:f5:67:33:44: 21:5d:9c:d6:c3:97:f8:cb:27:2f:47:0a:89:03:66: 20:e8:38:af:c7:ea:a9:f8:b3:98:dc:30:a9:ae:96: c3:3c:5a:da:ef:e5:c8:ce:73:bb:4f:68:e4:78:54: 88:08:05:9e:d8:e7:ce:ea:12:f6:4e:9a:1c:0e:e1: d9:37:25:2d:61:6a:21:06:9d:c7:fd:83:30:ac:aa: 76:21:e3:b8:47:72:31:cc:67:2d:3b:96:5d:47:50: 6e:7e:39:eb:e9:cb:67:08:92:53:4b:d2:23:4c:0b: 82:c5:a3:0c:e9:c3:ee:38:6e:40:d3:43:b3:0f:7b: 24:17:94:00:80:91:03:6f:7d:a9:6d:08:02:5c:bd: 33:b6:ce:95:36:07:71:10:e5:c3:6e:f5:bb:97:6b: 5f:56:f8:c6:e8:5b:39:2c:72:93:24:aa:bb:71:20: ed:27:f9:ab:62:f1:59:4c:ea:fc:a5:bf:51:e2:23: 70:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:62:EF:32:74:F1:92:22:39:5A:54:86:96:F8:C1:52:55:63:36:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1ef919d-03e9-306b-9427-3ae21cfbf33e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:70:36:30:22:6c:e3:58:80:53:92:b3:cf:7b:61:88:37:6b: 0b:94:3b:c3:4a:34:72:7d:6b:ba:d5:ae:94:15:f8:61:15:b7: 24:ee:3e:a6:fc:56:e1:84:27:53:fd:3e:ff:48:9d:be:bf:15: 22:62:ed:12:a0:13:a3:a3:18:72:48:ce:cb:11:c7:9e:7a:7d: 67:42:c4:ff:ba:ac:26:84:d8:88:2a:86:7e:00:8d:00:7f:ee: 25:47:b4:04:2d:d2:33:1c:4b:16:66:23:c4:02:8b:0c:1e:a7: 14:e5:07:2d:51:f3:0d:48:96:51:87:fd:4e:03:d7:8e:ad:48: a9:10:d0:55:2c:b2:38:25:5f:6e:a4:7c:6b:de:cc:fd:92:77: 53:61:86:04:90:82:31:2f:49:71:be:a7:7f:92:1a:9e:31:1a: 09:02:61:2c:c3:ca:f2:f3:7b:fe:c4:a6:b4:88:a0:83:ba:a3: 54:8f:39:21:dd:0d:8e:07:11:f1:fb:2c:30:81:4e:75:a4:b0: 14:3e:3b:f5:58:5c:5d:9f:06:e3:c4:6d:66:06:1c:fc:b9:cd: e7:5b:71:97:a4:30:b6:8e:97:86:f1:41:84:5c:d5:e5:6f:79: 75:63:06:7a:69:e6:0c:03:9d:a2:b3:c3:ee:6a:e7:a0:15:be: b5:65:5b:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7exJhp/GWwhEZ4eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk MGEzN2ViN2UtMDdjZi00ZDJlLWE5ODctMzY2Y2Y0NWI2ZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pbsxOm6/VhHQP0s6d8mzF9wj+yXFhCCqyK+ kBGZhmchuudCoVLXuwI18mWEUrTc81PHFTo619c9kTnSkGWoIxkBRsYjcPVnM0Qh XZzWw5f4yycvRwqJA2Yg6Divx+qp+LOY3DCprpbDPFra7+XIznO7T2jkeFSICAWe 2OfO6hL2TpocDuHZNyUtYWohBp3H/YMwrKp2IeO4R3IxzGctO5ZdR1Bufjnr6ctn CJJTS9IjTAuCxaMM6cPuOG5A00OzD3skF5QAgJEDb32pbQgCXL0zts6VNgdxEOXD bvW7l2tfVvjG6Fs5LHKTJKq7cSDtJ/mrYvFZTOr8pb9R4iNwlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNi7zJ08ZIiOVpUhpb4wVJVYzboMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTFlZjkxOWQtMDNlOS0z MDZiLTk0MjctM2FlMjFjZmJmMzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy2YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1wNjAibONYgFOSs897YYg3awuUO8NKNHJ9a7rVrpQV+GEVtyTuPqb8 VuGEJ1P9Pv9Inb6/FSJi7RKgE6OjGHJIzssRx556fWdCxP+6rCaE2Igqhn4AjQB/ 7iVHtAQt0jMcSxZmI8QCiwwepxTlBy1R8w1IllGH/U4D146tSKkQ0FUssjglX26k fGvezP2Sd1NhhgSQgjEvSXG+p3+SGp4xGgkCYSzDyvLze/7EprSIoIO6o1SPOSHd DY4HEfH7LDCBTnWksBQ+O/VYXF2fBuPEbWYGHPy5zedbcZekMLaOl4bxQYRc1eVv eXVjBnpp5gwDnaKzw+5q56AVvrVlW/k= -----END CERTIFICATE-----Generated at Sun Jun 29 19:12:42 2025 by rpki-client