$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d95cfdf7-08cd-3d99-b68c-603dc053f1a2.roa File: d95cfdf7-08cd-3d99-b68c-603dc053f1a2.roa (raw, json) Hash identifier: WG1rmnaXeA0qu+ZPfBi4xJqwc5bkbSqnFM0JN7i3IsU= Subject key identifier: 07:5B:E0:71:A8:32:5E:D6:3D:03:D0:F0:7D:B2:18:C8:CC:2F:7B:F4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4F05E299632921349AC9AC20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d95cfdf7-08cd-3d99-b68c-603dc053f1a2.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.200.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:e2:99:63:29:21:34:9a:c9:ac:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=0abe3095-19c6-4044-babd-ebdba591d289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:79:7c:86:1d:f9:3a:f7:7b:a7:7c:b2:41: 4c:58:fb:53:cc:ba:55:b7:bf:d2:19:04:15:ef:f1: 05:7e:7b:f2:94:fa:34:38:54:0e:4f:58:2b:8d:d4: cd:0b:8a:cf:67:18:00:45:f8:61:08:10:61:09:66: 64:d3:2e:ef:26:cb:bf:48:09:41:02:0e:2a:2f:cc: eb:29:90:7f:30:b7:d2:cb:73:69:81:01:ef:0e:81: d7:e1:6b:66:23:cb:1c:09:a1:f9:da:9e:da:ea:40: 60:ba:eb:63:d2:64:a6:db:9c:19:2b:c5:8c:1c:f9: 26:4e:57:31:06:fa:cb:d2:e7:d9:f9:8c:f6:63:3e: 88:04:7e:88:1e:61:5a:36:bc:03:e4:9e:cb:49:4d: 43:8f:78:5b:a9:22:32:80:aa:31:d2:01:25:7f:67: 01:32:c6:6d:b4:d7:f2:eb:de:b5:c6:b3:8d:24:b5: 7d:05:ea:2a:4c:16:5e:77:57:93:0c:d3:5f:ec:4b: 9f:d3:01:87:ab:ea:d4:23:c1:b2:45:1b:06:40:83: 1c:28:06:62:76:bd:c6:37:a9:bd:a5:89:75:1b:bd: 63:f1:40:a1:6e:e2:dc:96:84:58:09:2e:a6:cc:6c: 0e:d4:72:4e:b3:e9:96:8a:66:ef:18:e5:23:bc:2a: bc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5B:E0:71:A8:32:5E:D6:3D:03:D0:F0:7D:B2:18:C8:CC:2F:7B:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d95cfdf7-08cd-3d99-b68c-603dc053f1a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:86:f7:78:2c:ae:b2:96:18:3e:ea:c8:02:ac:19:10:4c:af: e9:7b:93:0a:02:8f:a3:b6:2c:cd:57:2f:17:a3:9f:e1:60:ff: 3a:61:f3:04:93:65:60:a1:5e:43:e0:a2:6e:8c:2c:d8:56:44: 6e:ba:bf:ba:fe:2a:00:d6:b6:7f:5f:46:23:73:e8:0c:fa:65: a3:e9:b9:1e:ea:4b:01:03:f8:c6:e4:17:40:70:22:63:f6:81: b3:35:55:42:d4:c6:64:30:06:0c:bf:e0:06:50:11:63:14:54: 62:26:f6:c7:8f:a4:56:4e:78:1c:20:3e:06:a5:79:30:3a:8b: af:14:87:a7:96:1d:4f:ae:36:79:20:bd:c9:7a:95:88:61:7f: d9:a3:65:be:9a:35:8a:23:d9:ab:29:b5:b0:c7:67:af:e5:05: 42:3b:fe:0f:7b:4f:09:23:42:e4:cb:3b:9f:47:52:43:fc:fc: 07:98:4c:eb:a6:15:b9:17:99:b5:fa:f4:a6:ac:8c:6b:b9:94: a6:ab:27:c0:6f:00:31:83:b8:13:87:09:09:e4:f3:12:cf:c7: eb:ab:01:3a:9c:ef:8a:c1:6b:9e:b7:e8:40:f6:83:d9:44:77: 57:81:fc:c9:f6:3e:03:db:eb:91:86:eb:ac:e2:aa:a8:8d:78: 1f:1f:44:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBeKZYykhNJrJrCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk MGFiZTMwOTUtMTljNi00MDQ0LWJhYmQtZWJkYmE1OTFkMjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto95fIYd+Tr3e6d8skFMWPtTzLpVt7/SGQQV 7/EFfnvylPo0OFQOT1grjdTNC4rPZxgARfhhCBBhCWZk0y7vJsu/SAlBAg4qL8zr KZB/MLfSy3NpgQHvDoHX4WtmI8scCaH52p7a6kBguutj0mSm25wZK8WMHPkmTlcx BvrL0ufZ+Yz2Yz6IBH6IHmFaNrwD5J7LSU1Dj3hbqSIygKox0gElf2cBMsZttNfy 6961xrONJLV9BeoqTBZed1eTDNNf7Euf0wGHq+rUI8GyRRsGQIMcKAZidr3GN6m9 pYl1G71j8UChbuLcloRYCS6mzGwO1HJOs+mWimbvGOUjvCq8JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdb4HGoMl7WPQPQ8H2yGMjML3v0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDk1Y2ZkZjctMDhjZC0z ZDk5LWI2OGMtNjAzZGMwNTNmMWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8giMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOG93gsrrKWGD7qyAKsGRBMr+l7kwoCj6O2LM1XLxejn+Fg/zph8wST ZWChXkPgom6MLNhWRG66v7r+KgDWtn9fRiNz6Az6ZaPpuR7qSwED+MbkF0BwImP2 gbM1VULUxmQwBgy/4AZQEWMUVGIm9sePpFZOeBwgPgaleTA6i68Uh6eWHU+uNnkg vcl6lYhhf9mjZb6aNYoj2asptbDHZ6/lBUI7/g97TwkjQuTLO59HUkP8/AeYTOum FbkXmbX69KasjGu5lKarJ8BvADGDuBOHCQnk8xLPx+urATqc74rBa5636ED2g9lE d1eB/Mn2PgPb65GG66ziqqiNeB8fRJk= -----END CERTIFICATE-----Generated at Sun Jun 29 12:30:15 2025 by rpki-client