$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c28aa2fa-0174-3f2d-8372-0f5f869a4d76.roa File: c28aa2fa-0174-3f2d-8372-0f5f869a4d76.roa (raw, json) Hash identifier: cs30+VEpU97Co7KWCkNsWen9GA5HqNeza+Ow7I3Fgdk= Subject key identifier: DA:20:AC:FB:3F:2F:41:B3:B6:73:DE:02:7F:C8:F2:72:4B:0E:99:67 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3B7B3B6F5B68366F52417BE4 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c28aa2fa-0174-3f2d-8372-0f5f869a4d76.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 20940 IP address blocks: 23.43.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:3b:6f:5b:68:36:6f:52:41:7b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=22e7440f-0b2d-4385-b391-609c05b99ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bb:53:91:d4:bf:79:9f:9a:f5:40:ca:c0:e0: 72:23:7b:3c:02:d3:bf:ca:41:52:da:e3:80:9c:9c: 54:23:59:18:b6:93:a0:d4:35:ed:50:a6:c7:08:b9: ba:a2:61:92:c0:14:a0:a8:7d:ee:57:55:33:08:5b: 42:e2:a9:f8:97:22:98:30:11:97:d1:f0:17:12:63: 95:42:23:7c:ef:2f:5b:8e:e2:30:29:e2:68:43:99: 3d:83:5b:45:06:08:70:89:cf:7a:0d:44:e5:01:e2: 0e:c4:7a:aa:09:5e:fe:04:a1:ad:d3:e9:88:d2:fb: 16:1a:27:18:36:1f:c5:69:54:6f:3b:a3:80:00:39: 1f:5e:89:55:41:0e:9b:54:d0:f8:a7:a8:20:a9:90: 9e:9f:2f:f3:1e:37:45:11:af:dc:62:3b:bb:49:65: 68:a8:87:f5:93:69:ef:40:4a:b2:99:27:30:33:4a: 4d:a3:c1:dc:12:22:19:63:99:4f:fe:de:42:b2:80: a7:b0:89:67:32:80:71:0a:56:5d:a3:d6:4d:e8:f0: f6:85:35:e1:72:ab:f5:03:c0:aa:80:ca:91:0a:4e: a1:c1:3d:aa:1d:f7:06:5f:62:98:e8:57:29:1b:2d: 3d:cc:08:53:f0:08:76:45:49:5a:63:6c:56:3b:66: cf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:20:AC:FB:3F:2F:41:B3:B6:73:DE:02:7F:C8:F2:72:4B:0E:99:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c28aa2fa-0174-3f2d-8372-0f5f869a4d76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ae:a9:ca:1d:ea:3d:d9:1c:44:40:bb:2b:dc:e3:d8:27:aa: 8e:2a:39:48:27:5e:bd:be:4d:7d:e3:d2:7d:ed:77:c5:cb:05: 90:07:1f:ac:c8:4f:9e:f2:f3:93:ea:47:ba:6e:7b:8f:be:30: c9:25:aa:ad:73:b6:17:7b:66:ee:02:b2:ed:ca:0d:d2:4c:18: e8:2e:bd:83:f6:80:b5:63:7b:2e:40:c5:33:48:41:f8:1b:af: 2b:fa:81:f7:fc:fa:b2:05:7c:20:86:3d:0d:c9:60:03:46:30: d6:b0:1a:93:83:12:b7:06:50:41:e9:61:df:8c:70:8e:19:a9: 2e:99:a3:cf:e7:11:a4:e7:15:c6:42:a1:78:c3:8b:47:18:4e: b5:02:41:bf:92:e6:d7:58:c9:25:be:bf:5b:ef:b1:1e:16:e2: 44:07:db:28:4a:24:74:65:59:87:de:7b:30:b8:e2:5b:11:7f: 9d:e0:c0:e9:28:b5:b8:6e:46:b8:74:1f:cb:eb:ab:f5:4f:3f: f1:9b:f8:be:31:fb:e3:47:a9:97:2a:6f:6d:c8:10:64:f0:18: 9c:72:4a:ad:74:8c:3c:98:1a:2f:34:3e:7b:df:ee:4c:b1:bf: ab:83:1f:2b:f5:0a:9b:4d:83:45:2d:a6:2b:ff:27:dd:52:69: d2:c3:ae:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7eztvW2g2b1JBe+QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk MjJlNzQ0MGYtMGIyZC00Mzg1LWIzOTEtNjA5YzA1Yjk5ZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbtTkdS/eZ+a9UDKwOByI3s8AtO/ykFS2uOA nJxUI1kYtpOg1DXtUKbHCLm6omGSwBSgqH3uV1UzCFtC4qn4lyKYMBGX0fAXEmOV QiN87y9bjuIwKeJoQ5k9g1tFBghwic96DUTlAeIOxHqqCV7+BKGt0+mI0vsWGicY Nh/FaVRvO6OAADkfXolVQQ6bVND4p6ggqZCeny/zHjdFEa/cYju7SWVoqIf1k2nv QEqymScwM0pNo8HcEiIZY5lP/t5CsoCnsIlnMoBxClZdo9ZN6PD2hTXhcqv1A8Cq gMqRCk6hwT2qHfcGX2KY6FcpGy09zAhT8Ah2RUlaY2xWO2bP5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNogrPs/L0GztnPeAn/I8nJLDplnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzI4YWEyZmEtMDE3NC0z ZjJkLTgzNzItMGY1Zjg2OWE0ZDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFytmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiuqcod6j3ZHERAuyvc49gnqo4qOUgnXr2+TX3j0n3td8XLBZAHH6zI T57y85PqR7pue4++MMklqq1zthd7Zu4Csu3KDdJMGOguvYP2gLVjey5AxTNIQfgb ryv6gff8+rIFfCCGPQ3JYANGMNawGpODErcGUEHpYd+McI4ZqS6Zo8/nEaTnFcZC oXjDi0cYTrUCQb+S5tdYySW+v1vvsR4W4kQH2yhKJHRlWYfeezC44lsRf53gwOko tbhuRrh0H8vrq/VPP/Gb+L4x++NHqZcqb23IEGTwGJxySq10jDyYGi80Pnvf7kyx v6uDHyv1CptNg0Utpiv/J91SadLDrsw= -----END CERTIFICATE-----Generated at Sun Jun 29 13:16:57 2025 by rpki-client