$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28589eea-d9fc-3e97-8cf9-a8fd7e89f550.roa File: 28589eea-d9fc-3e97-8cf9-a8fd7e89f550.roa (raw, json) Hash identifier: Cc3lT3pAaSu/jCkV0Xi/8VBOMQmtE/S2CajWXJ42Zow= Subject key identifier: E5:1F:EF:44:82:9D:7D:AD:BE:34:8E:01:71:4A:51:68:DA:86:BC:DA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A2C2028FCF9AB0DAD6AAA1500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28589eea-d9fc-3e97-8cf9-a8fd7e89f550.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.32.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:28:fc:f9:ab:0d:ad:6a:aa:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=2995b7bd-9c17-4c65-85fc-ed5be22eba43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9e:83:3a:ac:73:8c:c8:05:c6:2f:4a:a7:63: 7d:b9:76:ea:9c:0a:06:2e:f0:4b:e9:a4:b6:57:a8: 89:5e:e1:59:33:9c:4f:a5:d2:e2:82:a6:7a:e7:c0: e1:d8:f5:f2:72:64:f3:ab:b6:4c:c6:db:72:41:ad: 3b:9e:df:45:8c:f3:96:9b:5c:71:73:de:1a:b1:3a: 45:f2:cf:ac:8c:83:e4:01:18:d9:b1:45:d0:7f:e5: 64:f7:a7:93:66:c0:8b:cc:0a:b4:56:be:bd:a3:c5: fb:87:81:e4:76:03:a0:d9:f9:8e:45:04:55:d1:95: be:17:51:a3:c6:40:9b:5e:83:9a:a2:6c:c3:c1:54: 41:32:df:41:13:4c:0e:a0:15:f6:48:1b:98:a7:86: 9a:4f:53:85:5e:47:91:f2:b9:d7:c7:fc:a0:84:c5: 7e:9d:60:61:d0:b9:65:88:a3:6b:b4:0c:a2:07:61: 3d:82:a4:88:7f:75:6a:de:51:68:47:7e:86:03:40: ff:d5:be:ee:c6:f0:b2:e4:fb:f2:dc:d8:3a:00:53: 09:bf:24:2d:06:2e:3a:fc:a9:59:bc:13:6c:33:f4: 42:e9:75:da:1e:a2:15:aa:b8:c5:af:3b:08:b5:0d: 56:be:39:8f:4d:b6:6b:92:ce:d7:5e:8e:87:52:25: cc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1F:EF:44:82:9D:7D:AD:BE:34:8E:01:71:4A:51:68:DA:86:BC:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28589eea-d9fc-3e97-8cf9-a8fd7e89f550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:8b:67:ec:b4:55:99:2e:53:bc:44:c5:a7:cc:65:6a:cd:d8: a0:ea:bd:b2:d3:52:bd:81:17:8d:4c:fb:77:4d:2a:c9:5b:34: a2:6f:2a:4c:01:0a:da:0f:13:ec:1d:d4:15:16:97:c4:8c:d2: fc:b7:4f:89:8a:06:2b:dc:77:0f:1b:45:af:66:b1:b0:9a:11: 50:75:ed:eb:b8:b7:e6:af:d8:38:1a:25:92:1e:01:e5:74:60: e1:4e:69:9d:f3:ae:2f:6d:a9:4c:20:c3:06:19:d8:0b:91:20: 5c:42:0d:2c:a5:d5:76:4d:7d:10:3f:52:01:12:57:c2:25:79: 2e:9b:c1:b6:f2:3b:e3:79:5f:16:bb:aa:31:62:df:d7:48:aa: f7:3a:0e:80:ce:a6:44:b8:f1:b3:39:6f:c9:62:68:2f:90:fb: 45:83:db:9b:5b:7b:29:98:54:5d:61:3c:9f:67:95:c8:18:c1: 59:dc:c4:10:0d:d3:41:37:f3:42:79:ff:39:59:8e:37:cb:05: be:76:a0:90:f6:49:d7:03:75:11:2a:3a:51:e7:a4:93:f8:ae: b0:a0:ea:60:b7:be:c7:3d:98:c1:71:f7:48:2c:af:22:2a:59: 61:2a:cf:0d:f2:bc:b0:5d:65:03:7a:fd:40:53:44:d0:09:18: 04:f7:e7:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosICj8+asNrWqqFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk Mjk5NWI3YmQtOWMxNy00YzY1LTg1ZmMtZWQ1YmUyMmViYTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp6DOqxzjMgFxi9Kp2N9uXbqnAoGLvBL6aS2 V6iJXuFZM5xPpdLigqZ658Dh2PXycmTzq7ZMxttyQa07nt9FjPOWm1xxc94asTpF 8s+sjIPkARjZsUXQf+Vk96eTZsCLzAq0Vr69o8X7h4HkdgOg2fmORQRV0ZW+F1Gj xkCbXoOaomzDwVRBMt9BE0wOoBX2SBuYp4aaT1OFXkeR8rnXx/yghMV+nWBh0Lll iKNrtAyiB2E9gqSIf3Vq3lFoR36GA0D/1b7uxvCy5Pvy3Ng6AFMJvyQtBi46/KlZ vBNsM/RC6XXaHqIVqrjFrzsItQ1WvjmPTbZrks7XXo6HUiXMkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUf70SCnX2tvjSOAXFKUWjahrzaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjg1ODllZWEtZDlmYy0z ZTk3LThjZjktYThmZDdlODlmNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESLZ+y0VZkuU7xExafMZWrN2KDqvbLTUr2BF41M+3dNKslbNKJvKkwB CtoPE+wd1BUWl8SM0vy3T4mKBivcdw8bRa9msbCaEVB17eu4t+av2DgaJZIeAeV0 YOFOaZ3zri9tqUwgwwYZ2AuRIFxCDSyl1XZNfRA/UgESV8IleS6bwbbyO+N5Xxa7 qjFi39dIqvc6DoDOpkS48bM5b8liaC+Q+0WD25tbeymYVF1hPJ9nlcgYwVncxBAN 00E380J5/zlZjjfLBb52oJD2SdcDdREqOlHnpJP4rrCg6mC3vsc9mMFx90gsryIq WWEqzw3yvLBdZQN6/UBTRNAJGAT3524= -----END CERTIFICATE-----Generated at Sun Jun 15 18:49:49 2025 by rpki-client