$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67c09f42-5ff9-3891-b32f-be616df5f2ff.roa File: 67c09f42-5ff9-3891-b32f-be616df5f2ff.roa (raw, json) Hash identifier: l5aNDYpvlh9pWt7cQOPoT64ysJ3dmSwe5JrU6sITvVw= Subject key identifier: 13:13:32:60:42:41:E8:5E:26:5C:05:16:27:60:38:9B:8E:CE:DB:84 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A1B6019090AC108E947390500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67c09f42-5ff9-3891-b32f-be616df5f2ff.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.44.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:19:09:0a:c1:08:e9:47:39:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=6d9a7f36-4782-4d7a-9640-7fd7ab06ce21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4d:82:d7:11:f0:72:14:76:3d:4f:a8:60:88: 4c:37:98:9f:5f:4e:78:33:1a:e0:db:a9:51:7e:38: aa:b1:5b:0e:b4:bd:ba:be:c7:69:1f:d4:d6:ec:b7: 96:cb:46:f0:a2:44:da:dd:3a:e5:24:e0:d2:e5:85: 7d:36:7c:d5:95:6b:d7:35:d8:c4:5c:2f:62:70:f6: d2:7c:45:ea:e4:ae:61:bc:32:9b:ce:7e:92:cc:64: 16:03:f3:e9:54:21:c9:1a:d2:ee:ca:75:70:60:af: 87:d9:cb:02:98:fe:04:90:65:49:79:20:f8:de:1b: 18:c1:fe:ee:4c:d0:c9:fa:b8:b4:94:3f:10:43:0a: 6a:29:87:28:44:58:38:b6:de:d2:bf:0d:1c:3c:7c: 3d:f3:d8:00:0c:9c:1b:e7:5a:ff:96:36:a1:9f:ec: d2:b4:07:f6:bb:41:eb:c4:10:6c:c7:46:21:bc:b5: 0e:55:88:a2:66:66:92:fc:f0:e2:f3:21:16:29:58: 12:81:34:06:77:ea:3a:1e:80:8b:75:38:a9:f7:dd: 10:d1:31:da:5d:08:94:3a:2d:97:3d:b9:46:e5:ec: 0c:d0:48:a0:33:03:dd:6e:5a:f5:7c:e1:0e:bb:6f: 73:23:54:de:ce:23:05:f4:3f:ec:9c:54:41:01:25: 68:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:13:32:60:42:41:E8:5E:26:5C:05:16:27:60:38:9B:8E:CE:DB:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67c09f42-5ff9-3891-b32f-be616df5f2ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:91:30:33:77:3c:b4:c0:b8:26:69:5a:90:6d:dd:1d:57:39: 39:d4:05:6e:6f:00:9f:72:ba:97:a3:51:76:ed:e8:7f:3a:8d: c5:1a:aa:a5:f0:46:31:c1:dd:8e:aa:e9:b3:94:cd:cd:92:05: f4:2e:5e:9e:c5:23:54:a2:c3:a5:d9:10:16:3e:6a:7d:63:b4: e8:70:ab:20:60:ac:ad:88:58:15:eb:28:d7:d5:3d:6a:2c:33: bf:b3:0b:44:23:01:10:8d:2e:80:b1:c5:6a:a0:11:80:1d:40: e0:89:fd:70:fb:43:91:6d:df:ca:7b:c1:36:74:9d:0a:a7:d2: 76:a9:c3:e9:c7:61:1c:e9:8d:33:2f:4f:24:53:85:be:4b:2c: 47:16:0b:c8:c2:72:1a:a2:5e:e3:fd:cd:05:2a:75:42:94:36: a8:11:be:31:09:be:e2:e7:6d:34:a2:2d:86:0b:7f:47:71:ea: 3a:7f:45:c8:ee:3d:74:dc:71:c0:6a:0c:77:b8:8b:c6:27:c5: 7b:0c:5c:a0:16:a9:ec:3a:6a:81:32:52:30:dd:72:cf:1c:c5: 75:5b:27:15:cb:0e:2d:61:a3:b4:d1:9e:60:ff:34:43:e7:d7: 59:ed:16:a0:f5:b9:c1:db:ca:bd:24:48:55:39:9c:81:b0:21: 4b:2d:07:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYBkJCsEI6Uc5BQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk NmQ5YTdmMzYtNDc4Mi00ZDdhLTk2NDAtN2ZkN2FiMDZjZTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE2C1xHwchR2PU+oYIhMN5ifX054Mxrg26lR fjiqsVsOtL26vsdpH9TW7LeWy0bwokTa3TrlJODS5YV9NnzVlWvXNdjEXC9icPbS fEXq5K5hvDKbzn6SzGQWA/PpVCHJGtLuynVwYK+H2csCmP4EkGVJeSD43hsYwf7u TNDJ+ri0lD8QQwpqKYcoRFg4tt7Svw0cPHw989gADJwb51r/ljahn+zStAf2u0Hr xBBsx0YhvLUOVYiiZmaS/PDi8yEWKVgSgTQGd+o6HoCLdTip990Q0THaXQiUOi2X PblG5ewM0EigMwPdblr1fOEOu29zI1TeziMF9D/snFRBASVoDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMTMmBCQeheJlwFFidgOJuOztuEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjdjMDlmNDItNWZmOS0z ODkxLWIzMmYtYmU2MTZkZjVmMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWRMDN3PLTAuCZpWpBt3R1XOTnUBW5vAJ9yupejUXbt6H86jcUaqqXw RjHB3Y6q6bOUzc2SBfQuXp7FI1Siw6XZEBY+an1jtOhwqyBgrK2IWBXrKNfVPWos M7+zC0QjARCNLoCxxWqgEYAdQOCJ/XD7Q5Ft38p7wTZ0nQqn0napw+nHYRzpjTMv TyRThb5LLEcWC8jCchqiXuP9zQUqdUKUNqgRvjEJvuLnbTSiLYYLf0dx6jp/Rcju PXTcccBqDHe4i8YnxXsMXKAWqew6aoEyUjDdcs8cxXVbJxXLDi1ho7TRnmD/NEPn 11ntFqD1ucHbyr0kSFU5nIGwIUstB60= -----END CERTIFICATE-----Generated at Sun Jun 15 20:04:57 2025 by rpki-client