$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf7bc701-51d9-329a-b777-5896850f1bae.roa File: bf7bc701-51d9-329a-b777-5896850f1bae.roa (raw, json) Hash identifier: jRFnnBikBA1J6oB/3eq8s7HPcW2OdMZha9idb8cd2Pw= Subject key identifier: F2:E7:83:E6:70:1C:9F:FA:54:B3:F3:B4:E7:F9:72:76:86:DE:FF:7C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B33373A37B464E141EE40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf7bc701-51d9-329a-b777-5896850f1bae.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.56.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:33:37:3a:37:b4:64:e1:41:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=4ea74a48-e6fa-4d88-915a-5879b1b6a4f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:60:21:40:83:dd:6f:3f:35:df:21:46:20: f2:5f:0b:88:9b:c3:96:08:3c:29:fc:32:4b:da:91: ec:2f:5f:66:64:62:3f:93:d4:41:ba:b6:de:4f:fe: e3:e0:8d:84:b4:52:54:ac:e8:ed:3f:5f:22:eb:1b: a7:ce:a8:62:e6:83:74:4f:9a:2a:66:18:77:93:dd: 5f:e9:88:da:47:cf:a7:2e:81:bc:5a:7f:1f:d2:a8: 5f:f0:65:5d:0f:20:2d:94:96:09:f6:0e:61:12:8e: a9:3b:09:d5:34:08:ec:91:06:3a:20:79:f9:2e:74: 44:1d:d8:a4:90:8a:f6:39:3a:5c:a6:f2:d7:12:df: d6:18:a7:1d:5c:d2:59:79:d3:77:b2:40:7a:a9:6a: a0:d2:e9:a8:66:3c:49:60:34:18:e3:51:f5:c9:14: 86:f6:b0:0b:fa:82:8b:f7:8a:1d:14:43:82:86:1a: f1:55:27:eb:9d:bf:04:83:ed:85:db:c9:ef:8f:f6: 8d:06:93:d7:79:9f:dd:a4:20:36:64:8e:5f:a6:9c: cc:b3:4c:98:33:90:f8:d9:8e:b3:94:fb:1d:e3:7f: 85:57:cf:d6:e2:1c:e4:de:7a:af:7d:c1:80:a7:45: 7f:c6:fc:d7:c8:03:de:47:59:3c:3f:dc:28:dd:b1: 35:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E7:83:E6:70:1C:9F:FA:54:B3:F3:B4:E7:F9:72:76:86:DE:FF:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf7bc701-51d9-329a-b777-5896850f1bae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.56.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:4f:ff:c0:8f:3a:93:3f:be:7c:b6:16:21:a4:07:4e:bd:89: ab:ef:54:ad:5c:3c:4c:26:30:97:5d:72:55:18:98:e7:21:63: 8f:91:1f:70:5b:c2:d3:5e:8e:58:d7:10:8b:19:04:43:d7:cb: ec:50:42:fd:57:e2:00:d3:98:f9:b9:9c:46:61:44:ef:ef:3e: 90:f7:6d:56:14:9e:91:55:98:02:50:02:6d:d3:56:42:f9:b6: ef:c1:55:a9:76:23:d6:17:6e:13:1b:a0:1f:35:04:7e:06:b8: 23:ce:b2:70:d9:09:1c:50:49:23:54:4d:7c:51:32:18:2a:cb: 21:61:25:77:eb:15:2e:d3:40:af:57:de:29:fc:8a:04:6b:73: 3a:72:bc:02:f6:5e:cf:37:4f:4d:39:39:7d:c2:5d:fe:fe:2c: 89:5d:63:12:c1:f9:c0:1c:36:49:bd:e6:7f:5d:74:be:e6:47: 3f:31:73:99:a3:ff:31:15:ca:80:b2:f8:8e:9a:4c:19:4d:24: 46:bf:9b:45:a6:7e:26:39:12:fd:aa:c1:9e:1e:b4:9e:2d:65: 84:36:f4:fd:99:39:ee:d7:ca:5e:ba:a5:99:1a:52:d6:ad:8a: 4c:33:56:b1:dd:eb:b9:6d:b8:bc:5b:de:77:7b:5d:90:7c:85: 0e:94:bc:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOzM3Oje0ZOFB7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk NGVhNzRhNDgtZTZmYS00ZDg4LTkxNWEtNTg3OWIxYjZhNGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArupgIUCD3W8/Nd8hRiDyXwuIm8OWCDwp/DJL 2pHsL19mZGI/k9RBurbeT/7j4I2EtFJUrOjtP18i6xunzqhi5oN0T5oqZhh3k91f 6YjaR8+nLoG8Wn8f0qhf8GVdDyAtlJYJ9g5hEo6pOwnVNAjskQY6IHn5LnREHdik kIr2OTpcpvLXEt/WGKcdXNJZedN3skB6qWqg0umoZjxJYDQY41H1yRSG9rAL+oKL 94odFEOChhrxVSfrnb8Eg+2F28nvj/aNBpPXeZ/dpCA2ZI5fppzMs0yYM5D42Y6z lPsd43+FV8/W4hzk3nqvfcGAp0V/xvzXyAPeR1k8P9wo3bE1MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLng+ZwHJ/6VLPztOf5cnaG3v98MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmY3YmM3MDEtNTFkOS0z MjlhLWI3NzctNTg5Njg1MGYxYmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFziOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpP/8CPOpM/vny2FiGkB069iavvVK1cPEwmMJddclUYmOchY4+RH3Bb wtNejljXEIsZBEPXy+xQQv1X4gDTmPm5nEZhRO/vPpD3bVYUnpFVmAJQAm3TVkL5 tu/BVal2I9YXbhMboB81BH4GuCPOsnDZCRxQSSNUTXxRMhgqyyFhJXfrFS7TQK9X 3in8igRrczpyvAL2Xs83T005OX3CXf7+LIldYxLB+cAcNkm95n9ddL7mRz8xc5mj /zEVyoCy+I6aTBlNJEa/m0WmfiY5Ev2qwZ4etJ4tZYQ29P2ZOe7Xyl66pZkaUtat ikwzVrHd67ltuLxb3nd7XZB8hQ6UvGE= -----END CERTIFICATE-----Generated at Tue Jul 1 00:25:39 2025 by rpki-client