$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/724eaedf-d166-39d4-84e6-c3434f2a41dd.roa File: 724eaedf-d166-39d4-84e6-c3434f2a41dd.roa (raw, json) Hash identifier: ImCaxrj6cViYgBALG8Uc0oc6BvDoK8BqcWS+gyz9DWo= Subject key identifier: 69:83:81:13:B1:02:E9:6B:21:C6:1B:C0:FA:63:0C:AC:AB:79:47:20 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F43285849D165034F829EAAA623745880 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/724eaedf-d166-39d4-84e6-c3434f2a41dd.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16509 IP address blocks: 23.29.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:03:4f:82:9e:aa:a6:23:74:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=86291ff8-b348-463e-a0f3-64d4d49d8396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0a:cf:ca:4b:34:78:19:25:2d:6b:53:6b:91: 84:fc:10:bb:99:9d:e3:f7:be:fc:3a:f7:4e:dd:d5: 15:4d:d7:fb:cf:f3:1b:16:02:5c:e7:04:a3:ee:13: 82:76:52:6b:89:43:46:5b:fb:c1:8f:e3:ff:b5:35: 9a:62:ca:1d:cd:89:94:4a:a0:77:2c:a0:6b:97:ec: 46:8b:b2:9b:96:47:76:ba:55:1c:d2:dd:ba:dd:c7: 9d:21:26:43:3a:e1:b5:85:82:ed:45:2c:93:5a:31: ec:a0:3c:8b:7d:6a:cf:72:5e:3f:3c:43:d7:95:ff: c7:49:0d:18:cf:b5:68:12:f1:f0:1c:43:4d:9b:0b: 95:b1:7c:cd:94:9c:fc:ae:80:0b:c9:44:55:3a:e7: e1:04:b8:e8:5d:37:cd:7d:f6:55:b0:73:6a:7b:d3: 27:00:78:be:83:5a:b3:00:c3:e1:ac:15:ff:09:78: 1e:19:b5:ff:1b:68:cc:8e:0b:da:64:e2:51:48:db: 31:a6:1f:5f:60:46:a8:e9:ec:6e:17:b4:c5:4e:c4: 03:07:08:58:56:d4:bc:25:d4:a3:5b:20:fb:86:cc: c4:c7:92:b4:ef:d3:c6:4e:90:26:d8:af:af:00:6c: bc:4c:a1:03:a4:bb:f6:44:93:b5:c9:02:90:30:cd: a2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:83:81:13:B1:02:E9:6B:21:C6:1B:C0:FA:63:0C:AC:AB:79:47:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/724eaedf-d166-39d4-84e6-c3434f2a41dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:05:0d:b8:6e:08:cc:d5:00:37:20:d5:55:91:3c:9c:bc:21: 51:08:04:e6:52:36:eb:55:3e:32:81:dc:4a:e4:89:49:1b:6f: 3f:23:62:e0:d0:ab:4b:d4:94:61:fb:0a:e3:57:02:78:3f:17: ad:9e:0a:06:5e:89:4e:80:6d:5e:51:50:00:1f:35:8a:bb:df: 6e:9a:83:42:2b:2b:3f:54:5e:27:ee:7d:43:67:54:71:b0:67: 8d:d5:e8:1f:5b:02:2d:86:98:a8:a0:2c:e9:d7:cf:67:70:c1: da:ec:f2:a6:70:5b:e2:f5:a2:96:98:8b:a5:4d:a9:ca:0c:b4: 98:c8:1c:35:f4:5c:2f:9d:e3:8a:90:a5:e3:00:5f:73:69:62: d1:a6:d6:2d:d9:0c:62:17:c2:da:52:b1:7f:29:a6:9b:3d:aa: 1d:82:46:b9:35:ab:9c:38:27:04:86:69:ad:3f:c5:b5:6a:60: f2:fe:64:4d:bf:20:bd:b9:8f:67:61:76:af:d1:a9:e3:76:4b: b6:1c:a0:8e:ad:a2:50:8c:d1:75:bb:7d:aa:cc:11:a5:3e:52: bc:ab:25:97:d6:76:dd:a1:19:86:bb:6c:8c:5b:74:b6:db:7f: 10:57:24:5a:13:cc:6f:06:d5:b9:02:fd:f6:07:65:ff:c8:b0: c1:5a:3c:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQNPgp6qpiN0WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ODYyOTFmZjgtYjM0OC00NjNlLWEwZjMtNjRkNGQ0OWQ4Mzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ArPyks0eBklLWtTa5GE/BC7mZ3j9778OvdO 3dUVTdf7z/MbFgJc5wSj7hOCdlJriUNGW/vBj+P/tTWaYsodzYmUSqB3LKBrl+xG i7Kblkd2ulUc0t263cedISZDOuG1hYLtRSyTWjHsoDyLfWrPcl4/PEPXlf/HSQ0Y z7VoEvHwHENNmwuVsXzNlJz8roALyURVOufhBLjoXTfNffZVsHNqe9MnAHi+g1qz AMPhrBX/CXgeGbX/G2jMjgvaZOJRSNsxph9fYEao6exuF7TFTsQDBwhYVtS8JdSj WyD7hszEx5K079PGTpAm2K+vAGy8TKEDpLv2RJO1yQKQMM2ipQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmDgROxAulrIcYbwPpjDKyreUcgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvNzI0ZWFlZGYtZDE2Ni0z OWQ0LTg0ZTYtYzM0MzRmMmE0MWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFx09MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUFDbhuCMzVADcg1VWRPJy8IVEIBOZSNutVPjKB3ErkiUkbbz8jYuDQ q0vUlGH7CuNXAng/F62eCgZeiU6AbV5RUAAfNYq7326ag0IrKz9UXifufUNnVHGw Z43V6B9bAi2GmKigLOnXz2dwwdrs8qZwW+L1opaYi6VNqcoMtJjIHDX0XC+d44qQ peMAX3NpYtGm1i3ZDGIXwtpSsX8ppps9qh2CRrk1q5w4JwSGaa0/xbVqYPL+ZE2/ IL25j2dhdq/RqeN2S7YcoI6tolCM0XW7farMEaU+UryrJZfWdt2hGYa7bIxbdLbb fxBXJFoTzG8G1bkC/fYHZf/IsMFaPMQ= -----END CERTIFICATE-----Generated at Sat Jun 14 06:09:40 2025 by rpki-client