$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b76ce65e-21d0-3430-b6ef-0b07beae89fa.roa File: b76ce65e-21d0-3430-b6ef-0b07beae89fa.roa (raw, json) Hash identifier: hM5ztxP13pKgWbAtLx0R/XNO8tzYgyZqpanoh4jK5bc= Subject key identifier: BC:62:6C:70:40:02:E9:9A:EB:E6:64:97:0A:D7:87:F5:47:05:63:5C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A1595C6AEC24C526F59B880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b76ce65e-21d0-3430-b6ef-0b07beae89fa.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.38.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:95:c6:ae:c2:4c:52:6f:59:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=42d2aa71-36dd-485c-9dc9-798e0b1f743c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:60:4e:03:b2:f4:43:9f:fb:c0:0e:b9:ea:d1: 02:d8:30:c2:02:05:66:b9:03:05:26:dc:68:ab:35: d3:83:41:05:9e:e8:22:28:93:b3:a0:15:6c:a8:6a: 21:23:a7:04:e1:7d:8f:e3:9d:7f:9d:4e:46:a7:c5: b2:92:cb:71:1b:c9:d0:92:58:09:8a:92:6a:0c:e0: 21:a5:7a:a7:63:83:a2:86:cf:25:74:b7:5a:fe:9f: 67:e3:3f:40:07:ac:49:d3:82:35:79:0e:02:97:3c: e3:04:b7:3d:28:6f:e0:b4:5b:a7:e5:be:c0:c5:ab: 24:1d:c0:bb:9a:ba:74:4d:4b:0a:01:f7:44:cd:0d: e2:a6:51:86:19:f2:bb:da:eb:e7:84:72:05:23:be: 9b:82:93:0f:6c:8f:a9:4b:86:67:d9:e2:84:4a:25: a7:97:0b:cb:72:1c:ab:49:c5:a1:d8:76:9f:2d:82: e8:66:80:85:48:4f:b5:f5:be:bc:7c:12:22:58:fa: 31:eb:ec:a9:31:c4:03:27:71:d8:6b:28:22:5c:d4: 30:b5:0d:e5:36:1a:68:aa:7c:de:14:0a:6d:0c:2d: 6f:be:c6:c1:ea:60:de:1a:ae:d5:e1:a0:9f:60:b3: c4:31:90:20:ae:9a:2e:54:d7:59:d9:30:c5:4a:a7: c9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:62:6C:70:40:02:E9:9A:EB:E6:64:97:0A:D7:87:F5:47:05:63:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b76ce65e-21d0-3430-b6ef-0b07beae89fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:42:25:69:fa:c1:36:1d:c5:fd:5a:8a:06:07:a4:c5:1a:7e: 30:5c:92:0f:40:ef:36:20:bb:77:c7:f1:c1:1a:08:b8:c4:1a: 62:34:92:2b:8e:6a:20:4e:91:92:f1:53:ca:bc:c5:93:39:ff: 04:76:7d:8a:04:94:76:87:5a:bf:d3:9e:9c:10:40:02:3f:fa: d3:01:a2:b0:aa:88:87:be:7f:67:ea:ea:65:26:9d:1f:bc:80: 30:b8:f6:63:98:be:08:9a:85:e1:67:1c:57:4f:d2:64:49:71: a0:33:1d:e2:08:24:9c:16:ed:a9:06:98:48:f6:dd:e7:8d:d7: 2f:43:8b:45:21:38:6e:64:35:17:75:10:33:ae:49:ff:ca:cc: 36:09:c2:5b:cf:ba:60:60:b8:22:85:c7:04:be:c6:8d:3a:a9: 61:d7:5d:55:17:64:ed:7f:42:1d:39:ca:13:1c:97:f6:76:f7: a6:74:ab:6b:38:b8:66:a5:5e:49:4d:af:79:c4:3e:8d:77:bf: 2f:17:ae:81:5d:bb:7a:76:1d:ce:11:a6:59:91:7a:62:f3:5b: 27:c0:28:32:69:34:f0:af:66:2e:7d:6b:34:fe:34:82:41:78: 9f:4c:e7:3f:68:ff:04:59:36:f9:bd:57:ee:24:22:24:57:7a: 1a:10:73:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZXGrsJMUm9ZuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk NDJkMmFhNzEtMzZkZC00ODVjLTlkYzktNzk4ZTBiMWY3NDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmBOA7L0Q5/7wA656tEC2DDCAgVmuQMFJtxo qzXTg0EFnugiKJOzoBVsqGohI6cE4X2P451/nU5Gp8WykstxG8nQklgJipJqDOAh pXqnY4Oihs8ldLda/p9n4z9AB6xJ04I1eQ4ClzzjBLc9KG/gtFun5b7AxaskHcC7 mrp0TUsKAfdEzQ3iplGGGfK72uvnhHIFI76bgpMPbI+pS4Zn2eKESiWnlwvLchyr ScWh2HafLYLoZoCFSE+19b68fBIiWPox6+ypMcQDJ3HYaygiXNQwtQ3lNhpoqnze FAptDC1vvsbB6mDeGq7V4aCfYLPEMZAgrpouVNdZ2TDFSqfJ1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxibHBAAuma6+ZklwrXh/VHBWNcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjc2Y2U2NWUtMjFkMC0z NDMwLWI2ZWYtMGIwN2JlYWU4OWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBCJWn6wTYdxf1aigYHpMUafjBckg9A7zYgu3fH8cEaCLjEGmI0kiuO aiBOkZLxU8q8xZM5/wR2fYoElHaHWr/TnpwQQAI/+tMBorCqiIe+f2fq6mUmnR+8 gDC49mOYvgiaheFnHFdP0mRJcaAzHeIIJJwW7akGmEj23eeN1y9Di0UhOG5kNRd1 EDOuSf/KzDYJwlvPumBguCKFxwS+xo06qWHXXVUXZO1/Qh05yhMcl/Z296Z0q2s4 uGalXklNr3nEPo13vy8XroFdu3p2Hc4RplmRemLzWyfAKDJpNPCvZi59azT+NIJB eJ9M5z9o/wRZNvm9V+4kIiRXehoQc74= -----END CERTIFICATE-----Generated at Sun Jun 29 14:01:26 2025 by rpki-client