$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de4fbbd9-4444-35f7-b157-2e704c52e4c9.roa File: de4fbbd9-4444-35f7-b157-2e704c52e4c9.roa (raw, json) Hash identifier: lDeIXjlNx9C/6TK0p7P3xW418apI1VeCh0WyDh/m3o8= Subject key identifier: 25:6A:99:30:AD:93:0F:4D:54:A3:10:A9:3E:4E:53:96:78:40:8B:3A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5765D7B01402E42BABD7EB38 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de4fbbd9-4444-35f7-b157-2e704c52e4c9.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 16625 IP address blocks: 23.192.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:d7:b0:14:02:e4:2b:ab:d7:eb:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=7173b614-125d-41e1-b7b8-35a87673e233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4f:7b:c7:b4:dd:80:30:2e:92:b9:55:ee:a3: ba:39:ef:c9:ec:45:c5:77:1d:71:90:2c:18:9a:97: 03:a3:11:fd:fa:fa:26:65:3e:cc:f6:78:8e:1f:b4: 28:3f:52:19:90:25:44:a4:3c:bf:19:00:25:60:30: df:a3:d3:99:34:02:c7:7b:cd:6e:46:85:04:ec:fb: 68:9f:30:a7:5f:d3:3e:5f:39:92:3b:8c:ce:8e:55: 73:b2:10:b9:ff:22:ae:fa:1d:8e:90:09:ca:62:ce: be:75:af:a5:db:f1:89:c5:22:d5:9d:7e:f7:42:b8: 86:10:26:e4:0b:2e:5e:fa:fd:0a:f7:0d:4a:2c:f8: db:c8:ec:89:22:58:82:56:73:b6:91:12:4f:71:24: ca:6f:b2:93:74:6c:05:b8:1c:a3:87:a5:65:6d:6f: fa:9d:a6:1d:60:8e:15:1a:ca:01:e5:2a:0a:ca:e1: ed:3e:ca:23:19:4c:15:94:76:03:45:b4:50:cc:4b: ff:73:dc:7b:9f:e7:b7:25:89:cf:64:9b:76:ed:6d: 13:2a:15:6e:ec:96:92:69:d8:bf:f6:54:2a:46:7e: 1d:d8:11:1f:e7:63:92:ff:ad:06:fa:15:ea:ba:35: 89:e9:25:60:d8:ce:88:f2:ef:54:5b:9d:79:c8:9a: d2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6A:99:30:AD:93:0F:4D:54:A3:10:A9:3E:4E:53:96:78:40:8B:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de4fbbd9-4444-35f7-b157-2e704c52e4c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.192.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:05:ba:4c:14:8e:79:57:8f:d2:63:31:48:85:03:f4:e2:5a: 27:b2:73:ef:b3:28:36:47:0b:05:0d:f2:ca:1b:69:06:cc:7e: ac:06:bb:87:73:5d:12:28:97:d1:73:7d:1b:05:4f:a3:88:bb: fe:70:31:b2:14:44:b0:97:ae:31:89:c5:ea:6d:a3:07:8b:6c: 7a:e3:9f:e9:bd:dc:67:72:a2:a9:7c:bd:4f:67:25:f3:7a:82: be:5e:08:2e:9c:58:9e:57:a2:4a:a7:c3:89:32:3b:70:cc:71: ea:c0:45:68:ab:f6:82:34:5c:79:3e:2e:fe:c6:5a:a3:b7:9b: 32:d9:e7:c8:d3:78:4d:1e:43:68:9a:46:3b:bd:0a:fe:6a:3e: c3:29:ff:3b:3a:11:19:38:5c:64:31:7f:d1:84:83:11:e1:48: 11:fc:89:02:ec:ab:ed:22:82:77:24:60:ca:f7:35:bf:49:de: 99:0c:46:53:fe:f0:9d:24:cb:78:a3:3d:0a:d3:84:87:9f:1e: 56:a3:ba:dc:09:5b:d4:aa:e9:b1:d1:b8:70:e5:46:ff:91:93: 54:ed:26:06:14:4e:c2:9e:31:7d:17:95:bd:40:1e:d0:fb:aa: a3:f7:ec:2a:00:ba:f7:64:91:2e:46:fb:53:36:d9:40:aa:15: ed:d7:0c:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZdewFALkK6vX6zgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk NzE3M2I2MTQtMTI1ZC00MWUxLWI3YjgtMzVhODc2NzNlMjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU97x7TdgDAukrlV7qO6Oe/J7EXFdx1xkCwY mpcDoxH9+vomZT7M9niOH7QoP1IZkCVEpDy/GQAlYDDfo9OZNALHe81uRoUE7Pto nzCnX9M+XzmSO4zOjlVzshC5/yKu+h2OkAnKYs6+da+l2/GJxSLVnX73QriGECbk Cy5e+v0K9w1KLPjbyOyJIliCVnO2kRJPcSTKb7KTdGwFuByjh6VlbW/6naYdYI4V GsoB5SoKyuHtPsojGUwVlHYDRbRQzEv/c9x7n+e3JYnPZJt27W0TKhVu7JaSadi/ 9lQqRn4d2BEf52OS/60G+hXqujWJ6SVg2M6I8u9UW515yJrSLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVqmTCtkw9NVKMQqT5OU5Z4QIs6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGU0ZmJiZDktNDQ0NC0z NWY3LWIxNTctMmU3MDRjNTJlNGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8CcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0FukwUjnlXj9JjMUiFA/TiWieyc++zKDZHCwUN8sobaQbMfqwGu4dz XRIol9FzfRsFT6OIu/5wMbIURLCXrjGJxeptoweLbHrjn+m93Gdyoql8vU9nJfN6 gr5eCC6cWJ5Xokqnw4kyO3DMcerARWir9oI0XHk+Lv7GWqO3mzLZ58jTeE0eQ2ia Rju9Cv5qPsMp/zs6ERk4XGQxf9GEgxHhSBH8iQLsq+0ignckYMr3Nb9J3pkMRlP+ 8J0ky3ijPQrThIefHlajutwJW9Sq6bHRuHDlRv+Rk1TtJgYUTsKeMX0Xlb1AHtD7 qqP37CoAuvdkkS5G+1M22UCqFe3XDJU= -----END CERTIFICATE-----Generated at Sun Jun 29 17:45:53 2025 by rpki-client