$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28ca0ec3-cf89-3903-ae70-73d97ebab43b.roa File: 28ca0ec3-cf89-3903-ae70-73d97ebab43b.roa (raw, json) Hash identifier: gP8xo6/TtvZyxXy1fQ9D/bnRmbpNxJUJFpHHz4kwtLI= Subject key identifier: 3C:C0:F8:65:F8:8A:C1:B1:8B:F8:07:3F:A4:83:EB:C0:CF:0E:0E:2D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A1CC55F81B73519536B299828 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28ca0ec3-cf89-3903-ae70-73d97ebab43b.roa Signing time: Sat 07 Jun 2025 13:01:02 +0000 ROA not before: Sat 07 Jun 2025 13:01:02 +0000 ROA not after: Fri 05 Sep 2025 13:01:02 +0000 asID: 20940 IP address blocks: 23.32.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1c:c5:5f:81:b7:35:19:53:6b:29:98:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 7 13:01:02 2025 GMT Not After : Sep 5 13:01:02 2025 GMT Subject: CN=c52c0fd2-1cd3-4a24-a214-cf5eed8b91d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b7:31:21:1f:13:75:82:74:00:80:d6:c7:ca: 6b:5c:42:41:d3:fa:18:cf:51:50:e2:13:9d:5a:74: fa:5d:53:cc:24:22:d4:5e:a6:98:bf:a3:46:8b:c9: 28:91:79:e2:ef:b8:41:23:df:ea:3a:ce:44:cd:47: 72:cc:52:ef:86:57:5a:b0:3e:27:d1:6f:ad:9c:d6: 8b:9a:32:12:3a:03:1f:65:6a:1d:80:e0:fd:47:73: 69:14:fb:3d:78:14:1d:9e:c5:1c:89:43:9d:ff:3c: c2:31:da:d5:ca:84:bd:bc:a7:d9:64:51:e4:2a:61: ad:1b:70:ee:69:67:e7:a2:dd:a5:ed:0f:ca:b3:15: 05:3e:12:dc:68:26:a9:31:a8:8e:c3:37:a4:8f:2c: 55:12:79:4a:f4:7c:35:da:64:1b:57:da:83:5c:63: 3f:9e:8b:75:c2:1d:d7:35:ec:fe:e2:34:d6:d2:99: 16:4d:fd:9a:20:82:a5:09:7d:b5:3d:bf:aa:5f:10: 64:7b:c6:3d:aa:3b:a9:f0:f7:22:93:48:b2:5e:ba: 44:4f:f4:5d:08:0b:4f:8b:73:15:8c:b6:33:3a:0b: 0f:2c:72:52:69:dd:c6:4b:36:10:ea:64:f0:b8:d3: 07:9e:5d:98:f1:a6:67:74:7a:78:12:7a:99:58:e6: dd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C0:F8:65:F8:8A:C1:B1:8B:F8:07:3F:A4:83:EB:C0:CF:0E:0E:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28ca0ec3-cf89-3903-ae70-73d97ebab43b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:6e:5e:45:75:3d:b8:8e:1a:53:4e:2f:4f:20:7e:21:b6:74: bb:e0:e4:cd:24:3f:0b:bf:1a:24:d2:80:46:75:b8:ab:b3:ab: 05:f1:00:15:8c:55:b3:45:a6:67:31:7d:37:6e:2e:bf:28:6e: 42:e7:3b:b2:e4:22:c0:03:1d:ed:b8:a7:d1:43:62:2b:70:77: 45:ea:63:d1:5c:8f:73:70:02:a0:83:a5:26:6f:2a:c6:78:0f: 40:94:80:9c:72:ba:00:62:8a:1b:2f:f1:12:bc:e1:aa:d5:0a: 29:3b:0a:7d:31:22:11:ac:eb:f9:37:1a:6a:81:60:f6:fc:4f: 32:81:08:b2:e1:eb:f1:2d:32:29:63:f3:56:a1:e6:04:fe:7e: a5:fd:fc:79:ea:32:ab:4d:63:76:2d:9f:d6:b6:13:a7:c6:9e: 5b:e2:44:98:c1:af:ee:88:a9:92:41:a3:5a:18:4f:b7:e1:71: fc:a2:1c:8b:e4:3a:eb:da:e0:f5:05:0a:27:3c:d8:af:2f:6e: e7:86:07:00:d3:48:13:6c:61:84:a4:6b:3e:88:9e:d8:70:8b: 20:40:7e:aa:37:c1:35:81:37:80:5d:e7:b3:8c:79:6f:0e:5a: 7a:45:c5:23:b3:b2:e2:0e:47:be:d8:4f:ca:e5:da:e3:73:00: 82:70:df:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEocxV+BtzUZU2spmCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNzEzMDEwMloXDTI1MDkwNTEzMDEwMlowLzEtMCsGA1UEAxMk YzUyYzBmZDItMWNkMy00YTI0LWEyMTQtY2Y1ZWVkOGI5MWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrcxIR8TdYJ0AIDWx8prXEJB0/oYz1FQ4hOd WnT6XVPMJCLUXqaYv6NGi8kokXni77hBI9/qOs5EzUdyzFLvhldasD4n0W+tnNaL mjISOgMfZWodgOD9R3NpFPs9eBQdnsUciUOd/zzCMdrVyoS9vKfZZFHkKmGtG3Du aWfnot2l7Q/KsxUFPhLcaCapMaiOwzekjyxVEnlK9Hw12mQbV9qDXGM/not1wh3X Nez+4jTW0pkWTf2aIIKlCX21Pb+qXxBke8Y9qjup8Pcik0iyXrpET/RdCAtPi3MV jLYzOgsPLHJSad3GSzYQ6mTwuNMHnl2Y8aZndHp4EnqZWObd8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzA+GX4isGxi/gHP6SD68DPDg4tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjhjYTBlYzMtY2Y4OS0z OTAzLWFlNzAtNzNkOTdlYmFiNDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyAuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpuXkV1PbiOGlNOL08gfiG2dLvg5M0kPwu/GiTSgEZ1uKuzqwXxABWM VbNFpmcxfTduLr8obkLnO7LkIsADHe24p9FDYitwd0XqY9Fcj3NwAqCDpSZvKsZ4 D0CUgJxyugBiihsv8RK84arVCik7Cn0xIhGs6/k3GmqBYPb8TzKBCLLh6/EtMilj 81ah5gT+fqX9/HnqMqtNY3Ytn9a2E6fGnlviRJjBr+6IqZJBo1oYT7fhcfyiHIvk Ouva4PUFCic82K8vbueGBwDTSBNsYYSkaz6InthwiyBAfqo3wTWBN4Bd57OMeW8O WnpFxSOzsuIOR77YT8rl2uNzAIJw3+I= -----END CERTIFICATE-----Generated at Sun Jun 15 18:51:26 2025 by rpki-client