$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba44a588-b907-3aad-b2e5-1cde02465b50.roa File: ba44a588-b907-3aad-b2e5-1cde02465b50.roa (raw, json) Hash identifier: y8DeIEXTWzDpET4IXIfg39jLZ7+kOtC7yGWlaM5yXM4= Subject key identifier: 4A:1C:A4:59:48:83:67:85:EA:72:6F:DB:99:B2:61:D8:D7:12:86:2A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A15A08BCB2DC3F2C7A6E6E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba44a588-b907-3aad-b2e5-1cde02465b50.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.38.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:a0:8b:cb:2d:c3:f2:c7:a6:e6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=8c3a4fbd-70fa-4dd6-a623-2e55348ec4eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:80:90:44:5c:76:11:c8:e8:df:4d:f5:d0: dc:17:eb:b1:dd:82:6a:97:0b:71:f0:27:8f:04:a4: 4a:2e:93:30:de:6b:bd:0b:a7:13:75:b6:14:43:8b: a6:9b:7a:5a:76:eb:8c:87:35:10:8a:ee:cd:14:bd: e5:64:3d:52:f9:35:bf:72:ae:60:a1:8b:75:99:d2: e5:6e:37:cc:33:f8:6b:ba:d9:c4:4c:d9:52:79:89: 45:96:dc:90:a0:5f:4f:75:0a:a2:7f:e4:ee:b1:f5: d6:3e:01:8c:cf:66:f9:d0:dd:c0:12:f6:b2:ee:a9: cd:52:de:2c:aa:b6:df:70:46:06:a5:08:4b:75:a5: 99:f8:a9:ee:b5:96:50:86:2d:f3:0e:5f:49:71:94: 1a:bb:24:ad:7b:70:8e:dc:6a:7f:27:3c:d1:2e:4f: 2f:bf:d9:8c:a8:bc:21:6c:d4:b7:10:db:74:e8:37: d4:56:53:ad:0f:c3:ab:5a:db:45:37:48:ef:75:85: bb:71:12:31:a6:65:d1:02:1e:e0:5e:c7:df:3c:89: c6:f4:af:6c:a2:83:17:49:6a:61:3d:a1:60:b5:a4: c8:ef:b7:ee:e1:8a:bf:ae:2b:3d:ab:de:3d:4b:55: 7b:48:e8:45:9e:af:55:0b:fc:73:d3:4b:52:b4:cb: 47:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1C:A4:59:48:83:67:85:EA:72:6F:DB:99:B2:61:D8:D7:12:86:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba44a588-b907-3aad-b2e5-1cde02465b50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:0b:8a:9f:b2:cd:df:ef:1d:5e:8e:e0:38:99:ef:46:93:0d: 0b:b5:b4:33:0b:2e:a7:a4:e2:6a:38:fe:d2:88:78:50:31:6e: e4:6a:fa:5d:88:5e:1e:38:95:41:e5:99:74:05:ab:99:30:c2: 5b:04:20:06:f6:13:e9:e5:64:ff:27:5d:60:12:2c:af:f3:e3: 4b:9f:78:ee:6c:de:d3:a5:c6:b3:59:7e:ee:5c:d5:6f:59:36: c6:b0:a9:4c:32:ee:14:0e:fe:a9:e6:8b:ea:05:34:70:04:b5: 3a:48:88:65:b1:c2:92:e0:d7:0e:8e:3b:7f:93:6e:ce:6b:f7: ef:1a:6f:4c:a5:4a:b0:55:a0:11:7e:3d:89:f4:87:d0:14:9b: f3:df:95:74:df:6a:a3:09:32:63:e0:a7:6e:a4:56:c4:d0:0c: 94:b7:cc:d8:0d:50:cf:a6:f1:44:5d:45:0b:6e:74:48:9f:00: 54:28:cb:83:76:ed:81:1d:3c:4d:67:0d:93:e1:27:5e:00:33: c4:ed:5d:29:bc:a3:ce:d6:13:de:68:30:a1:e0:aa:1e:da:46: a1:02:a9:a4:a7:78:a5:d4:b9:82:7c:cd:32:90:c7:d6:fd:f1: c6:b7:a8:17:a7:56:40:05:ba:a6:19:d1:a7:1b:b4:a3:18:b7: a0:d7:82:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FaCLyy3D8sem5uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk OGMzYTRmYmQtNzBmYS00ZGQ2LWE2MjMtMmU1NTM0OGVjNGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDiAkERcdhHI6N9N9dDcF+ux3YJqlwtx8CeP BKRKLpMw3mu9C6cTdbYUQ4umm3paduuMhzUQiu7NFL3lZD1S+TW/cq5goYt1mdLl bjfMM/hrutnETNlSeYlFltyQoF9PdQqif+TusfXWPgGMz2b50N3AEvay7qnNUt4s qrbfcEYGpQhLdaWZ+KnutZZQhi3zDl9JcZQauySte3CO3Gp/JzzRLk8vv9mMqLwh bNS3ENt06DfUVlOtD8OrWttFN0jvdYW7cRIxpmXRAh7gXsffPInG9K9sooMXSWph PaFgtaTI77fu4Yq/ris9q949S1V7SOhFnq9VC/xz00tStMtHSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEocpFlIg2eF6nJv25myYdjXEoYqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmE0NGE1ODgtYjkwNy0z YWFkLWIyZTUtMWNkZTAyNDY1YjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkLip+yzd/vHV6O4DiZ70aTDQu1tDMLLqek4mo4/tKIeFAxbuRq+l2I Xh44lUHlmXQFq5kwwlsEIAb2E+nlZP8nXWASLK/z40ufeO5s3tOlxrNZfu5c1W9Z NsawqUwy7hQO/qnmi+oFNHAEtTpIiGWxwpLg1w6OO3+Tbs5r9+8ab0ylSrBVoBF+ PYn0h9AUm/PflXTfaqMJMmPgp26kVsTQDJS3zNgNUM+m8URdRQtudEifAFQoy4N2 7YEdPE1nDZPhJ14AM8TtXSm8o87WE95oMKHgqh7aRqECqaSneKXUuYJ8zTKQx9b9 8ca3qBenVkAFuqYZ0acbtKMYt6DXgrs= -----END CERTIFICATE-----Generated at Sun Jun 29 19:06:12 2025 by rpki-client