$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5d737ea-6630-3722-85dc-5d144ef4e777.roa File: a5d737ea-6630-3722-85dc-5d144ef4e777.roa (raw, json) Hash identifier: Up1WPB+exZQB/YDt2CAF7A/s8Ry9Eg4nWaIzirGC0ys= Subject key identifier: 6D:C8:E6:CD:97:74:F7:85:C7:FA:9E:FB:6C:02:7F:67:0A:92:0C:4D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3B7B3B9F9EACDC7EB68CAB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5d737ea-6630-3722-85dc-5d144ef4e777.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 20940 IP address blocks: 23.43.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:3b:9f:9e:ac:dc:7e:b6:8c:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=3344c7ed-f41b-4885-af4b-15a7f58d2bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f4:ce:83:6c:3d:a5:d1:cf:e6:55:fc:09:10: 54:da:34:1a:e5:7b:4c:0a:86:e6:ad:d6:c2:9a:b1: d7:27:bc:e1:0b:aa:d6:9b:cc:95:74:7a:df:e3:e3: 77:23:90:5c:fd:5c:1d:4c:88:53:b5:ed:a9:b9:fa: e1:3f:f7:9e:87:07:c9:82:34:69:fd:2d:d8:0b:1a: 3e:c5:5d:79:5f:e2:1e:f6:79:e0:3d:c2:ff:7e:8c: 3c:82:99:bb:7a:ae:bd:37:53:84:bb:bd:cc:ef:8f: 98:8b:79:ad:c2:a3:15:50:a7:b0:3c:80:5f:51:b3: 2f:95:de:2c:77:8b:77:9a:ac:7f:69:43:b1:f7:17: c4:44:15:69:81:49:87:2b:e1:af:75:2f:b5:1b:fb: c4:39:ef:e4:4d:b5:0e:58:fd:78:c0:e2:63:87:e1: 78:5d:77:5d:dc:82:e2:9e:ca:44:b7:0c:3b:56:89: ae:fa:a3:96:81:19:85:c8:ef:38:47:c5:9d:cd:7e: ca:ca:59:19:08:53:2d:f6:d2:0b:e5:54:e7:e9:20: 81:fb:45:02:6a:d3:c6:14:0f:c0:ea:b2:43:26:bd: 0b:e7:bf:58:92:7c:65:44:a4:b2:02:d2:8a:61:fe: 16:39:e5:d0:b0:97:c5:78:d0:83:2e:fd:d9:5b:13: 46:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C8:E6:CD:97:74:F7:85:C7:FA:9E:FB:6C:02:7F:67:0A:92:0C:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5d737ea-6630-3722-85dc-5d144ef4e777.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:de:25:f3:47:7a:f9:e0:0c:7d:01:50:2f:d0:b4:e9:ab:98: c7:a6:4b:51:fd:d5:c8:e7:a1:4a:84:9a:26:ea:5e:5e:a9:22: 95:85:19:78:67:ec:19:6f:40:ed:05:88:db:bb:d4:94:eb:c6: ef:81:1a:52:40:b4:0e:65:a4:72:3d:8d:bf:50:f0:d7:00:b5: 6f:82:38:e5:57:3c:69:de:87:1c:b5:39:d3:98:6f:51:1e:6c: 7b:39:cd:5d:f2:f3:01:a9:0b:7e:4f:b8:b0:1b:b2:1d:21:02: 98:34:25:3b:03:43:8b:ed:f4:ec:21:5d:a9:e7:b2:b4:51:6b: 43:79:d1:42:14:d1:f1:17:41:28:30:31:79:98:15:71:df:26: 3c:de:2f:fe:13:4d:58:9f:0f:20:63:f5:a0:46:53:06:a5:8f: a4:80:44:ec:07:b8:03:2d:98:a2:3a:85:c0:8a:ba:04:b0:73: cc:12:1b:01:8c:2d:7d:1a:18:d6:bc:62:5f:99:0c:ab:bc:37: e8:85:fb:f8:cf:06:78:54:68:65:e3:be:40:a8:cb:97:f9:af: 5b:18:f9:f1:3b:3e:be:fa:4e:d8:2c:bb:a0:c6:03:05:b5:8f: c3:e8:5b:b3:75:1c:7d:63:4b:90:0f:8b:10:33:49:b2:9c:c6: 1a:3b:4e:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ezufnqzcfraMqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk MzM0NGM3ZWQtZjQxYi00ODg1LWFmNGItMTVhN2Y1OGQyYmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvTOg2w9pdHP5lX8CRBU2jQa5XtMCobmrdbC mrHXJ7zhC6rWm8yVdHrf4+N3I5Bc/VwdTIhTte2pufrhP/eehwfJgjRp/S3YCxo+ xV15X+Ie9nngPcL/fow8gpm7eq69N1OEu73M74+Yi3mtwqMVUKewPIBfUbMvld4s d4t3mqx/aUOx9xfERBVpgUmHK+GvdS+1G/vEOe/kTbUOWP14wOJjh+F4XXdd3ILi nspEtww7Vomu+qOWgRmFyO84R8WdzX7KylkZCFMt9tIL5VTn6SCB+0UCatPGFA/A 6rJDJr0L579YknxlRKSyAtKKYf4WOeXQsJfFeNCDLv3ZWxNGUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3I5s2XdPeFx/qe+2wCf2cKkgxNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTVkNzM3ZWEtNjYzMC0z NzIyLTg1ZGMtNWQxNDRlZjRlNzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyt7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTeJfNHevngDH0BUC/QtOmrmMemS1H91cjnoUqEmibqXl6pIpWFGXhn 7BlvQO0FiNu71JTrxu+BGlJAtA5lpHI9jb9Q8NcAtW+COOVXPGnehxy1OdOYb1Ee bHs5zV3y8wGpC35PuLAbsh0hApg0JTsDQ4vt9OwhXannsrRRa0N50UIU0fEXQSgw MXmYFXHfJjzeL/4TTVifDyBj9aBGUwalj6SAROwHuAMtmKI6hcCKugSwc8wSGwGM LX0aGNa8Yl+ZDKu8N+iF+/jPBnhUaGXjvkCoy5f5r1sY+fE7Pr76Ttgsu6DGAwW1 j8PoW7N1HH1jS5APixAzSbKcxho7TlM= -----END CERTIFICATE-----Generated at Mon Jun 30 18:20:23 2025 by rpki-client