$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2d5d740-cb86-3b82-ad09-3a16c9fb06c2.roa File: f2d5d740-cb86-3b82-ad09-3a16c9fb06c2.roa (raw, json) Hash identifier: 6mENgIciowP43lUCEr0l4bYo9h5wni9ezixtF4y3Ndw= Subject key identifier: 66:80:90:B9:FA:11:3E:45:37:64:A1:89:3F:1D:F4:AB:78:0E:70:80 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A159BFA7FAAC15E815EAC40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2d5d740-cb86-3b82-ad09-3a16c9fb06c2.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.42.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:9b:fa:7f:aa:c1:5e:81:5e:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=a2dc8ed4-838f-4cb3-85a5-4dc01b1982c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2d:fa:a4:02:1e:4e:0a:3e:f5:38:3d:b0:f9: 26:48:8d:14:55:bf:d4:f5:13:a6:e4:58:f7:87:f4: 94:e8:b4:46:86:f9:e1:77:56:f1:44:1f:9e:7f:22: 51:8d:ed:35:6f:e8:7c:df:79:cc:42:80:4e:be:26: bc:99:a5:5b:61:46:a9:4b:de:2f:f4:61:bc:15:ae: 41:c1:24:ac:15:c0:c9:5f:96:ef:2a:ce:c1:e8:9f: 46:d4:b7:6c:da:0f:1d:d8:f6:31:12:28:fa:70:98: 78:dc:5d:b0:5b:09:5d:0c:0b:d2:76:2d:0c:d0:e3: e3:eb:f2:bf:39:d9:f3:cb:71:74:58:7d:d8:9a:84: 5e:b0:fd:d6:e5:c0:eb:d1:82:51:be:d9:89:97:4d: 9e:60:66:8f:90:56:fc:e4:6f:3d:34:9a:dd:10:b9: 8f:92:86:0c:f2:23:9c:4f:f5:c0:0f:e6:ba:f7:47: 30:ec:0c:26:be:16:24:f5:cf:3f:c8:d9:1a:2d:f0: 3c:0b:57:69:34:80:a9:11:d4:78:fe:4a:eb:ce:7e: 1b:23:d6:68:43:ac:d7:b9:fd:4f:c1:f9:aa:91:66: b0:ce:8d:c5:6e:79:da:38:2b:15:23:01:71:d7:f1: c2:a4:25:89:b0:7e:b6:6b:82:73:ca:7e:0b:3b:c1: b9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:80:90:B9:FA:11:3E:45:37:64:A1:89:3F:1D:F4:AB:78:0E:70:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2d5d740-cb86-3b82-ad09-3a16c9fb06c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.42.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:76:a0:3e:9a:16:46:73:47:6c:65:e0:73:7b:48:0b:0f:e2: 3a:21:94:dd:58:51:31:1c:91:5a:7d:32:29:32:38:c8:1e:a3: 15:79:fd:f4:0a:3f:bb:18:56:7f:55:9d:03:9e:19:c3:4b:41: 58:f9:d2:c3:fc:07:58:d5:da:ab:c3:f2:54:87:d1:3b:85:3e: 38:18:ad:90:18:0c:7d:e4:5a:bd:ae:75:c2:a7:d1:bc:ca:bc: 13:b4:33:ca:02:68:fe:a4:24:1c:32:b6:8e:8a:a9:b8:f1:c4: 3d:0f:af:84:7c:6e:ac:a1:54:19:5c:8f:f7:9d:ba:d3:d3:c3: d6:5f:d3:73:45:be:56:f2:44:fe:0e:f6:39:19:72:45:95:c7: 2f:a1:ab:97:4f:e7:41:71:ad:d7:49:88:96:77:5a:86:6e:2a: 88:dc:4f:02:06:20:18:72:0f:04:8e:5a:f5:17:8c:94:43:79: 7b:45:cc:46:93:c5:1f:7d:ad:75:a4:3d:07:87:fb:fe:30:d0: 6d:7a:08:7f:f5:11:c5:81:bd:2c:17:68:8b:d5:94:2b:2d:22: fb:e8:fe:57:72:30:af:98:27:84:4e:6d:6b:7c:e1:c0:70:57: 0e:89:56:f0:e2:51:7c:16:10:1e:8f:7c:71:ef:58:87:a7:92: fe:9b:ef:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZv6f6rBXoFerEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk YTJkYzhlZDQtODM4Zi00Y2IzLTg1YTUtNGRjMDFiMTk4MmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS36pAIeTgo+9Tg9sPkmSI0UVb/U9ROm5Fj3 h/SU6LRGhvnhd1bxRB+efyJRje01b+h833nMQoBOvia8maVbYUapS94v9GG8Fa5B wSSsFcDJX5bvKs7B6J9G1Lds2g8d2PYxEij6cJh43F2wWwldDAvSdi0M0OPj6/K/ Odnzy3F0WH3YmoResP3W5cDr0YJRvtmJl02eYGaPkFb85G89NJrdELmPkoYM8iOc T/XAD+a690cw7AwmvhYk9c8/yNkaLfA8C1dpNICpEdR4/krrzn4bI9ZoQ6zXuf1P wfmqkWawzo3FbnnaOCsVIwFx1/HCpCWJsH62a4Jzyn4LO8G5AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaAkLn6ET5FN2ShiT8d9Kt4DnCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjJkNWQ3NDAtY2I4Ni0z YjgyLWFkMDktM2ExNmM5ZmIwNmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyqVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB92oD6aFkZzR2xl4HN7SAsP4johlN1YUTEckVp9MikyOMgeoxV5/fQK P7sYVn9VnQOeGcNLQVj50sP8B1jV2qvD8lSH0TuFPjgYrZAYDH3kWr2udcKn0bzK vBO0M8oCaP6kJBwyto6KqbjxxD0Pr4R8bqyhVBlcj/edutPTw9Zf03NFvlbyRP4O 9jkZckWVxy+hq5dP50FxrddJiJZ3WoZuKojcTwIGIBhyDwSOWvUXjJRDeXtFzEaT xR99rXWkPQeH+/4w0G16CH/1EcWBvSwXaIvVlCstIvvo/ldyMK+YJ4RObWt84cBw Vw6JVvDiUXwWEB6PfHHvWIenkv6b7yM= -----END CERTIFICATE-----Generated at Sun Jun 29 19:30:46 2025 by rpki-client