$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea4e563f-67aa-33c4-b7c7-2151a9d645e5.roa File: ea4e563f-67aa-33c4-b7c7-2151a9d645e5.roa (raw, json) Hash identifier: PoLmvsmsRrChQ76t2RScrGnPtkXsZJH2teb27lRz6RE= Subject key identifier: 66:5E:84:F8:3F:A9:BA:A7:05:61:77:74:B4:10:54:21:45:F0:4B:C0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3B7B3E31C3B4EF079F3AFD80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea4e563f-67aa-33c4-b7c7-2151a9d645e5.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 20940 IP address blocks: 23.44.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:3e:31:c3:b4:ef:07:9f:3a:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=be7ee66f-416f-4a24-b7aa-12756af0a169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:56:b9:bb:43:ee:6f:f5:19:65:99:c8:50:25: a4:18:06:29:a3:8f:27:27:c0:42:6e:b9:5f:f5:1c: 2b:0b:a1:04:ab:ec:0e:ab:79:20:82:d4:66:0b:89: 35:22:ac:b0:38:34:64:64:f3:92:6f:3e:8f:e1:5d: e5:bb:0f:93:a5:1d:a0:78:48:3f:44:d9:40:9e:37: 87:3f:1b:77:c3:57:a9:58:82:a9:2c:09:34:69:6a: 85:b2:82:88:25:ba:93:d4:00:d5:96:3d:4a:d8:96: 4d:34:90:9a:e3:05:66:07:06:8c:9a:25:6c:83:9d: 81:0e:bb:b6:81:ff:d1:21:3a:b7:e3:9d:f6:d8:a7: 95:b7:c1:63:02:46:43:9f:0b:c6:a5:89:6d:15:5f: f1:b7:27:e3:e5:48:02:72:f2:90:ab:6d:c5:a7:25: 25:86:15:c8:32:ad:6f:d6:81:bc:9c:6b:28:3b:dc: 7a:69:c0:c9:62:29:1b:09:42:c4:c0:a3:d2:de:ce: 10:56:52:96:b5:6d:05:bb:0c:98:d4:66:6f:08:33: da:85:e8:a5:01:bd:51:95:79:06:c6:66:36:64:15: 00:f3:09:84:ee:07:b1:b9:7a:14:fc:f8:b3:6d:c9: 5c:75:ed:3f:0e:b5:e7:cd:7f:d3:d0:d7:44:60:28: d8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5E:84:F8:3F:A9:BA:A7:05:61:77:74:B4:10:54:21:45:F0:4B:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea4e563f-67aa-33c4-b7c7-2151a9d645e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:34:fb:ef:f1:50:0e:50:6d:41:c6:b0:bb:9c:ab:33:e7:3b: fa:fb:53:0c:9c:da:5a:97:61:72:3b:ca:e1:74:5c:08:d3:f6: 93:21:b0:02:eb:75:9a:c4:9b:aa:95:49:5b:a6:23:06:43:74: d2:af:e7:ed:27:6b:5a:e2:01:1e:d8:a8:6b:da:05:ae:36:88: e1:07:cb:7b:08:b6:26:13:0c:82:0b:15:d8:df:1f:ac:31:2a: 50:7b:e5:69:35:4d:2c:e3:a3:22:99:9a:26:3b:82:0b:86:f6: 6d:73:f7:e6:64:44:5e:7c:14:e6:4f:ec:2a:25:f9:02:8e:a8: 4b:4b:e0:cb:75:3f:83:02:f0:5b:3a:96:7f:c3:a0:79:a6:7e: 56:b1:52:22:90:0d:e6:c1:b6:29:68:87:7b:7c:24:c0:48:bb: 5e:78:87:37:82:df:dd:ec:70:43:b6:44:d3:09:61:58:2e:36: 06:dc:7d:0e:bc:85:ce:42:0f:00:6a:c4:55:77:ef:94:c6:e1: 38:63:1d:09:40:56:76:c3:e6:49:b3:bb:cb:13:ed:da:5a:ea: 02:b1:cc:ed:d1:28:41:74:c7:6b:34:e9:27:21:5e:de:49:30: 74:5c:78:e9:7e:ef:3b:b0:21:b9:f4:4b:f3:a9:c9:9f:26:23: ce:98:75:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ez4xw7TvB586/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk YmU3ZWU2NmYtNDE2Zi00YTI0LWI3YWEtMTI3NTZhZjBhMTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVa5u0Pub/UZZZnIUCWkGAYpo48nJ8BCbrlf 9RwrC6EEq+wOq3kggtRmC4k1IqywODRkZPOSbz6P4V3luw+TpR2geEg/RNlAnjeH Pxt3w1epWIKpLAk0aWqFsoKIJbqT1ADVlj1K2JZNNJCa4wVmBwaMmiVsg52BDru2 gf/RITq345322KeVt8FjAkZDnwvGpYltFV/xtyfj5UgCcvKQq23FpyUlhhXIMq1v 1oG8nGsoO9x6acDJYikbCULEwKPS3s4QVlKWtW0FuwyY1GZvCDPaheilAb1RlXkG xmY2ZBUA8wmE7gexuXoU/Pizbclcde0/DrXnzX/T0NdEYCjYcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZehPg/qbqnBWF3dLQQVCFF8EvAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWE0ZTU2M2YtNjdhYS0z M2M0LWI3YzctMjE1MWE5ZDY0NWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyzLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFE0++/xUA5QbUHGsLucqzPnO/r7Uwyc2lqXYXI7yuF0XAjT9pMhsALr dZrEm6qVSVumIwZDdNKv5+0na1riAR7YqGvaBa42iOEHy3sItiYTDIILFdjfH6wx KlB75Wk1TSzjoyKZmiY7gguG9m1z9+ZkRF58FOZP7Col+QKOqEtL4Mt1P4MC8Fs6 ln/DoHmmflaxUiKQDebBtiloh3t8JMBIu154hzeC393scEO2RNMJYVguNgbcfQ68 hc5CDwBqxFV375TG4ThjHQlAVnbD5kmzu8sT7dpa6gKxzO3RKEF0x2s06SchXt5J MHRceOl+7zuwIbn0S/OpyZ8mI86YdWk= -----END CERTIFICATE-----Generated at Sun Jun 29 13:46:29 2025 by rpki-client