$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e41193fe-3c80-38de-8036-33e171733292.roa File: e41193fe-3c80-38de-8036-33e171733292.roa (raw, json) Hash identifier: nwBlEEaRa8QHXiWhJpSvIO0EbiKRZvTY19DuYBAvfjI= Subject key identifier: 35:FD:71:B5:78:A7:F2:40:81:AE:EA:22:01:39:DD:4B:10:F8:69:6F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A549B15A4EEA8CAD388887640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e41193fe-3c80-38de-8036-33e171733292.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 16625 IP address blocks: 23.1.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:15:a4:ee:a8:ca:d3:88:88:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=15cc0087-611c-4510-9d2f-9785823aed06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:26:11:c2:69:f7:d3:7a:6a:4a:ec:17:bd:7e: 1a:34:dd:6b:72:a2:08:a7:01:c3:31:8d:87:0a:55: 03:51:67:a5:42:2f:da:32:bc:9b:8e:31:1e:57:69: f8:41:c6:38:d0:2c:05:ab:2a:3f:30:d5:cb:42:bf: eb:41:ee:4e:c2:02:c6:83:2e:90:33:1e:76:91:a9: f1:3b:83:00:79:2e:65:ee:88:aa:aa:35:2c:72:19: 71:55:01:c2:b3:e0:0c:a6:73:51:1a:e7:44:04:d1: a0:6d:3e:e9:cb:16:ec:b5:1e:69:6e:38:0e:55:06: 29:f0:de:4c:36:98:b6:b7:59:f2:d5:68:56:22:69: ec:6f:42:35:37:b1:c3:f9:b8:a3:0c:fb:e8:a2:b8: f7:2c:a5:fb:38:9c:3f:af:d3:40:df:6c:45:ee:e0: 18:74:ee:12:7f:bd:30:2d:91:cc:9d:69:6a:87:dc: cf:90:ee:7d:9e:d2:3c:e3:e1:57:e7:1e:7a:2d:65: 87:90:8a:3c:8b:55:a1:15:95:a8:23:96:46:43:d5: 1b:75:85:f1:7e:6a:5c:7c:f8:d1:a9:55:9d:0b:73: 22:16:f9:45:cd:e8:b1:b7:f1:ab:c0:59:f7:dc:da: d2:bf:45:96:e9:f0:5c:b6:36:b6:08:6b:7f:02:d0: 42:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FD:71:B5:78:A7:F2:40:81:AE:EA:22:01:39:DD:4B:10:F8:69:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e41193fe-3c80-38de-8036-33e171733292.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:5e:53:ae:dc:9f:1f:c2:28:57:9b:32:f5:7b:b1:01:b6:65: d3:d2:26:cb:59:5d:27:9e:42:f9:1d:7f:ca:ff:e7:c6:77:82: cd:c7:ff:01:83:8e:bd:b7:d2:bd:66:be:35:02:24:c9:51:0f: 6e:1f:c3:ad:00:6a:c4:96:b1:dc:1c:f1:a4:3c:6e:12:a1:83: 6a:38:62:3b:f4:d0:95:b4:4e:ea:0d:9a:3a:7e:5e:58:20:13: b7:5b:9f:da:bc:66:7e:2c:4f:81:f1:39:83:76:17:61:46:1b: 34:bd:f3:ed:de:a4:e2:ba:60:36:74:ad:cb:fc:37:61:18:36: 9c:45:86:5b:7a:ac:ca:f9:4d:fd:00:01:c2:31:c3:f8:6c:fd: 02:aa:26:39:f4:a1:be:58:a5:4f:00:a4:3b:90:32:2b:b5:27: ed:a4:b0:21:15:d8:1c:fa:b6:d7:47:5d:e0:03:44:0b:03:b8: 4f:83:0b:90:c2:61:4d:a8:b9:e3:2d:5a:fc:91:49:08:6d:c3: 6b:90:b1:e2:f0:08:e4:be:4f:19:ae:52:4d:2b:00:ab:00:61: 44:72:d0:68:18:b7:98:80:18:9c:92:df:27:5a:c2:ee:35:c1: 6f:4d:ad:62:ff:d9:10:6d:18:01:ed:70:6f:b2:23:13:cf:62: c1:3c:aa:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmxWk7qjK04iIdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk MTVjYzAwODctNjExYy00NTEwLTlkMmYtOTc4NTgyM2FlZDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiYRwmn303pqSuwXvX4aNN1rcqIIpwHDMY2H ClUDUWelQi/aMrybjjEeV2n4QcY40CwFqyo/MNXLQr/rQe5OwgLGgy6QMx52kanx O4MAeS5l7oiqqjUschlxVQHCs+AMpnNRGudEBNGgbT7pyxbstR5pbjgOVQYp8N5M Npi2t1ny1WhWImnsb0I1N7HD+bijDPvoorj3LKX7OJw/r9NA32xF7uAYdO4Sf70w LZHMnWlqh9zPkO59ntI84+FX5x56LWWHkIo8i1WhFZWoI5ZGQ9UbdYXxfmpcfPjR qVWdC3MiFvlFzeixt/GrwFn33NrSv0WW6fBctja2CGt/AtBCXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDX9cbV4p/JAga7qIgE53UsQ+GlvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTQxMTkzZmUtM2M4MC0z OGRlLTgwMzYtMzNlMTcxNzMzMjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABheU67cnx/CKFebMvV7sQG2ZdPSJstZXSeeQvkdf8r/58Z3gs3H/wGD jr230r1mvjUCJMlRD24fw60AasSWsdwc8aQ8bhKhg2o4Yjv00JW0TuoNmjp+Xlgg E7dbn9q8Zn4sT4HxOYN2F2FGGzS98+3epOK6YDZ0rcv8N2EYNpxFhlt6rMr5Tf0A AcIxw/hs/QKqJjn0ob5YpU8ApDuQMiu1J+2ksCEV2Bz6ttdHXeADRAsDuE+DC5DC YU2oueMtWvyRSQhtw2uQseLwCOS+TxmuUk0rAKsAYURy0GgYt5iAGJyS3ydawu41 wW9NrWL/2RBtGAHtcG+yIxPPYsE8qkA= -----END CERTIFICATE-----Generated at Tue Jul 1 00:58:28 2025 by rpki-client