$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e86b7d19-dbb1-3c47-aeda-47d54f226f62.roa File: e86b7d19-dbb1-3c47-aeda-47d54f226f62.roa (raw, json) Hash identifier: 1ovxV1UpulydwcpnNuytx9AAtntMRffDQGc1d+pdel4= Subject key identifier: 53:D3:B3:C8:00:37:BA:F9:84:FB:E8:EF:03:01:AA:A8:B6:BA:BE:E5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A43DB14D9EDD812FD19C97A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e86b7d19-dbb1-3c47-aeda-47d54f226f62.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.53.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:14:d9:ed:d8:12:fd:19:c9:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=0f1fa27a-711f-4d03-9159-b1737040ba34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:da:2c:a3:fe:77:10:3e:ce:cf:0f:fc:1e:81: b1:c2:6c:05:d0:52:1f:bb:ea:a5:85:7c:5e:8c:da: 85:4b:d1:ae:d5:14:53:7d:82:d3:05:eb:54:7c:2e: ba:50:38:b4:4a:85:ac:7c:d4:75:53:6c:82:55:01: 75:e5:9a:bc:15:5c:39:39:78:60:a9:3c:f3:0b:44: 41:cb:50:d7:6a:8f:47:fd:50:9b:fb:cd:9c:72:ba: 84:45:32:99:d7:9b:47:e5:53:72:49:17:d4:a3:b8: 16:ae:ae:f7:83:a5:ae:7c:c0:8e:78:47:4c:e2:d7: 95:ce:21:fb:b8:42:f6:fd:2e:7c:e5:f2:24:63:46: 7e:39:7a:f1:09:78:89:2e:db:b5:33:75:11:9a:93: ae:93:f3:76:f3:e6:06:1f:0c:51:e1:d5:a4:3c:14: f0:cd:be:70:4e:b0:00:92:ca:ed:b1:48:de:20:af: 91:a7:5f:24:51:a5:83:46:78:28:9a:24:08:4a:a8: cb:e8:09:1a:23:19:ee:d2:75:e3:1d:0d:67:92:eb: eb:5a:2c:69:c1:1c:35:6f:8e:f6:ab:ec:1a:36:02: d0:85:0f:2c:2a:c6:dd:04:49:cb:88:cf:9c:f1:8e: 7e:b9:dd:30:36:79:24:11:c7:2d:b7:3c:5d:95:70: a4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D3:B3:C8:00:37:BA:F9:84:FB:E8:EF:03:01:AA:A8:B6:BA:BE:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e86b7d19-dbb1-3c47-aeda-47d54f226f62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:db:47:19:5a:46:86:b3:70:c7:ac:e4:cd:66:df:91:8e:c6: fb:ed:23:69:10:e1:1b:19:88:b1:ab:ea:1c:26:5c:36:55:7f: df:f1:ae:45:84:04:93:66:7a:d9:ad:6e:e0:e0:1b:4b:aa:bd: 24:15:37:29:74:38:ae:42:3e:19:a6:f4:0b:34:62:ff:71:e5: 9e:70:5e:61:c4:88:a5:72:0c:6b:72:9d:36:a1:fd:d9:c4:9f: c6:ea:d7:c1:0f:66:9c:b2:55:b7:ba:e9:5c:38:7f:ac:c0:1e: cb:a0:c2:f9:02:cf:98:18:a6:75:c1:09:c6:de:b4:cd:27:d6: 13:eb:1f:69:e7:0c:ab:df:f4:ea:48:a4:14:da:b2:6a:60:70: 6c:a3:6a:32:3b:71:c9:e7:35:dc:5b:13:ea:49:8c:c4:b7:a8: b4:c3:37:b7:4a:2b:01:17:4c:ad:3c:8b:ee:b3:b0:10:c6:e8: 84:c8:c1:d6:70:ba:8b:59:f3:ba:8f:50:61:bd:44:c1:f0:3f: bc:c3:92:f5:6b:fe:01:35:b0:33:a8:ff:06:4f:08:d5:ec:57: 72:9c:82:9b:18:97:b3:95:d0:51:67:b1:6f:89:b0:c8:4c:e3: d5:57:84:61:ea:79:4e:07:68:af:c6:d2:a5:26:6b:69:e3:5a: d9:2d:a6:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2xTZ7dgS/RnJeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk MGYxZmEyN2EtNzExZi00ZDAzLTkxNTktYjE3MzcwNDBiYTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltoso/53ED7Ozw/8HoGxwmwF0FIfu+qlhXxe jNqFS9Gu1RRTfYLTBetUfC66UDi0SoWsfNR1U2yCVQF15Zq8FVw5OXhgqTzzC0RB y1DXao9H/VCb+82ccrqERTKZ15tH5VNySRfUo7gWrq73g6WufMCOeEdM4teVziH7 uEL2/S585fIkY0Z+OXrxCXiJLtu1M3URmpOuk/N28+YGHwxR4dWkPBTwzb5wTrAA ksrtsUjeIK+Rp18kUaWDRngomiQISqjL6AkaIxnu0nXjHQ1nkuvrWixpwRw1b472 q+waNgLQhQ8sKsbdBEnLiM+c8Y5+ud0wNnkkEccttzxdlXCkyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPTs8gAN7r5hPvo7wMBqqi2ur7lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTg2YjdkMTktZGJiMS0z YzQ3LWFlZGEtNDdkNTRmMjI2ZjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXbRxlaRoazcMes5M1m35GOxvvtI2kQ4RsZiLGr6hwmXDZVf9/xrkWE BJNmetmtbuDgG0uqvSQVNyl0OK5CPhmm9As0Yv9x5Z5wXmHEiKVyDGtynTah/dnE n8bq18EPZpyyVbe66Vw4f6zAHsugwvkCz5gYpnXBCcbetM0n1hPrH2nnDKvf9OpI pBTasmpgcGyjajI7ccnnNdxbE+pJjMS3qLTDN7dKKwEXTK08i+6zsBDG6ITIwdZw uotZ87qPUGG9RMHwP7zDkvVr/gE1sDOo/wZPCNXsV3KcgpsYl7OV0FFnsW+JsMhM 49VXhGHqeU4HaK/G0qUma2njWtktpgE= -----END CERTIFICATE-----Generated at Sun Jun 29 12:26:39 2025 by rpki-client