$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d6ac857-0bd3-3afe-8969-485166cf2922.roa File: 2d6ac857-0bd3-3afe-8969-485166cf2922.roa (raw, json) Hash identifier: XxD9hYHuQ4GngTg4N9zsTljE/FRazblcS/EKknba/jQ= Subject key identifier: 9A:DD:11:45:F8:03:40:10:DB:76:0A:1E:00:54:DD:04:DD:9B:BD:8A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E5537D2CA9796EFA4960 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d6ac857-0bd3-3afe-8969-485166cf2922.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.206.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e5:53:7d:2c:a9:79:6e:fa:49:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=ba4c3a23-1a6c-40db-a581-79d35e4fb9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d2:d5:6c:45:76:22:6b:d2:0a:60:e0:82:d5: a4:8b:ed:fd:fc:f2:ee:f7:0c:ea:06:94:44:7f:02: 38:9d:11:f1:f5:b0:e0:45:2e:02:c3:91:67:ee:ce: 86:03:58:ec:c9:7d:e0:48:08:66:b9:85:47:00:d6: 22:08:56:8a:5f:82:ef:ed:f2:3c:2d:d5:b9:e8:8c: c2:a0:4e:e7:8c:1d:24:0f:6b:ff:9a:ac:d6:e8:5c: 8b:04:aa:44:44:97:fc:a4:51:bb:43:74:8a:65:db: d6:ab:90:50:9f:90:cf:73:8c:f4:93:61:56:b2:23: fc:34:9b:50:1f:df:cf:06:47:a3:5b:c5:25:bc:2f: 07:81:9e:3b:ac:97:d8:a5:fd:41:b5:56:a3:bb:57: ac:55:63:59:99:ff:10:66:bb:c5:7c:a6:de:8f:04: 95:59:88:43:24:8c:fa:99:33:63:96:6b:38:47:be: 8d:14:ac:e9:ea:a6:ff:fc:57:17:7a:f6:8d:59:03: 9d:8c:6c:dd:93:5f:85:d3:fe:27:da:52:91:ce:92: 41:73:a7:0d:be:2b:00:d3:be:02:e5:1b:f4:a4:1d: 70:47:c4:ba:10:cc:c7:4c:36:46:a1:39:6f:a3:4c: c3:68:b3:50:5a:7c:10:a8:df:6d:ac:32:77:36:ed: 06:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DD:11:45:F8:03:40:10:DB:76:0A:1E:00:54:DD:04:DD:9B:BD:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d6ac857-0bd3-3afe-8969-485166cf2922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:88:37:2b:14:3c:96:8d:0d:7a:38:6c:47:43:e1:7d:ab:f5: 02:3c:d8:fa:20:c0:f9:d1:03:81:3a:3d:5c:57:ba:6c:72:84: 0a:bf:50:59:9f:ec:9b:5f:07:74:10:36:d7:8f:75:e0:73:84: c3:81:90:9d:e5:66:e2:0b:d3:a6:fd:de:aa:b9:e1:c3:38:45: a8:dc:df:21:2e:2d:a7:e1:87:2b:c3:73:b1:56:90:f4:bc:4c: 31:46:14:02:23:02:f3:af:25:f4:e0:64:62:7d:09:7f:d4:fc: f6:90:1b:d8:c5:d4:5f:93:16:e6:fb:aa:3d:2c:18:b5:25:c7: 4b:35:ba:0e:21:08:53:af:b9:9a:03:c5:d6:b2:34:3c:f6:d8: f2:36:17:0e:f8:08:f8:e9:4d:bb:c9:30:8d:ed:98:87:a8:4c: 11:43:a7:66:5c:1b:db:fb:9a:c6:84:92:ba:89:c7:5e:04:05: cf:56:ec:63:92:df:7d:29:bb:ec:79:3d:e7:92:3d:de:9f:9a: e7:01:d3:bd:f6:ed:7a:7b:cc:02:59:a8:95:79:5d:c2:03:b4: b0:47:ef:ff:ee:db:91:d7:15:cd:b3:fc:47:b5:16:7d:dd:3f: 39:8e:86:a5:38:4d:e8:2b:f8:3c:ca:51:aa:0f:3d:a5:65:de: 6e:d0:2f:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKeVTfSypeW76SWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YmE0YzNhMjMtMWE2Yy00MGRiLWE1ODEtNzlkMzVlNGZiOWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9LVbEV2ImvSCmDggtWki+39/PLu9wzqBpRE fwI4nRHx9bDgRS4Cw5Fn7s6GA1jsyX3gSAhmuYVHANYiCFaKX4Lv7fI8LdW56IzC oE7njB0kD2v/mqzW6FyLBKpERJf8pFG7Q3SKZdvWq5BQn5DPc4z0k2FWsiP8NJtQ H9/PBkejW8UlvC8HgZ47rJfYpf1BtVaju1esVWNZmf8QZrvFfKbejwSVWYhDJIz6 mTNjlms4R76NFKzp6qb//FcXevaNWQOdjGzdk1+F0/4n2lKRzpJBc6cNvisA074C 5Rv0pB1wR8S6EMzHTDZGoTlvo0zDaLNQWnwQqN9trDJ3Nu0GPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrdEUX4A0AQ23YKHgBU3QTdm72KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmQ2YWM4NTctMGJkMy0z YWZlLTg5NjktNDg1MTY2Y2YyOTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF84wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmINysUPJaNDXo4bEdD4X2r9QI82PogwPnRA4E6PVxXumxyhAq/UFmf 7JtfB3QQNtePdeBzhMOBkJ3lZuIL06b93qq54cM4Rajc3yEuLafhhyvDc7FWkPS8 TDFGFAIjAvOvJfTgZGJ9CX/U/PaQG9jF1F+TFub7qj0sGLUlx0s1ug4hCFOvuZoD xdayNDz22PI2Fw74CPjpTbvJMI3tmIeoTBFDp2ZcG9v7msaEkrqJx14EBc9W7GOS 330pu+x5PeeSPd6fmucB07327Xp7zAJZqJV5XcIDtLBH7//u25HXFc2z/Ee1Fn3d PzmOhqU4Tegr+DzKUaoPPaVl3m7QL/s= -----END CERTIFICATE-----Generated at Sun Jun 15 19:04:58 2025 by rpki-client