$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bdd57fe-1bf3-33b5-ada6-a95391ea3748.roa File: 6bdd57fe-1bf3-33b5-ada6-a95391ea3748.roa (raw, json) Hash identifier: 3GHgcptesf0m9crQCCJvWlRDrQNEhCLLglqkUMrQ74w= Subject key identifier: 09:4F:3A:D1:E8:B5:0E:7D:17:B8:6D:B3:3E:8E:F0:46:3F:FC:B7:8C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F2E552FC16080BFF2C113A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bdd57fe-1bf3-33b5-ada6-a95391ea3748.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.66.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:52:fc:16:08:0b:ff:2c:11:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=5246e51d-3b93-4836-b184-8c4de9a8e3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9d:ef:6c:08:bb:ff:02:93:fc:8f:91:0b:39: c0:e6:66:19:31:cf:f5:c4:09:25:d0:15:f9:16:f7: 41:f5:57:ef:99:6b:8d:a5:76:49:4c:db:5e:10:cb: 4c:14:b0:d8:8f:f9:96:82:0d:aa:39:b4:59:ad:e8: f2:f4:af:c4:9f:5d:c5:c7:f5:10:a0:65:6e:67:cc: 5a:76:da:b4:79:ac:59:87:54:08:f4:3d:fe:75:ac: 02:58:34:86:a3:4e:c0:41:ed:18:98:21:61:d8:41: d7:53:df:c3:5c:5b:a5:9a:a7:72:0e:a2:4c:25:12: 46:97:4f:cd:fb:1b:5e:fb:69:cd:f8:35:2c:b9:52: eb:9e:d4:4f:60:2d:a4:85:0a:17:bd:3c:9b:c7:18: bf:c4:6a:7c:4e:a5:65:19:a1:6e:8c:1b:88:0a:36: fc:a6:02:ad:9a:c8:8e:52:db:b3:74:0b:88:96:bb: d6:bd:94:fe:25:9b:f8:ef:dc:1a:f0:d0:8b:22:42: 38:c1:56:32:2f:d1:4f:df:89:44:3c:bb:83:77:93: bd:63:64:f7:cd:b0:21:97:f6:66:0a:1d:17:4d:75: 01:79:de:8e:ec:70:c5:37:cd:dc:f6:08:46:eb:0d: f5:a1:ee:52:61:88:b0:9f:1f:4b:13:3b:09:fd:d6: 82:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4F:3A:D1:E8:B5:0E:7D:17:B8:6D:B3:3E:8E:F0:46:3F:FC:B7:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bdd57fe-1bf3-33b5-ada6-a95391ea3748.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.66.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:1a:6d:c0:66:2a:53:40:f5:87:4b:47:52:3f:30:fe:07:77: 3d:ea:31:55:62:3d:67:2e:b4:6b:9d:7a:cd:30:c4:db:cf:0e: 03:fb:d7:1e:64:48:53:ed:ca:23:20:36:e7:48:02:63:81:bd: f3:a4:0c:f3:8c:2f:73:b3:34:f1:cd:02:98:af:5d:b9:5d:04: 2c:5f:13:06:8b:9e:7f:69:c9:82:84:0d:ed:7a:0b:c9:73:b4: 97:37:3a:84:6b:da:a2:da:b0:9f:00:25:dd:01:17:4a:45:6e: 8e:bf:07:c0:ef:aa:07:a0:12:72:4b:c7:ab:23:b9:66:29:4a: 99:55:1b:96:85:a4:40:da:d8:f2:28:83:cc:72:65:ed:ad:96: 43:30:37:d5:30:bc:59:0a:7e:ef:51:0b:31:10:fb:b3:64:a4: e1:d6:a8:6c:80:0a:e5:c5:d9:8b:d5:97:a6:96:91:8f:3c:12: 27:cf:f6:29:78:63:c5:76:cb:e3:3b:3b:34:bf:e8:e5:91:10: dd:b8:92:cf:b4:fb:6b:87:b8:ed:f2:ec:1e:7b:11:4a:dd:55: 34:c2:e8:2f:0d:93:9b:e6:0e:de:be:f8:d5:2c:ae:38:10:53: 18:5b:b3:31:85:bc:a6:04:b1:34:a1:f5:27:1d:d0:ac:9e:5c: fb:9f:bf:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5VL8FggL/ywROoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk NTI0NmU1MWQtM2I5My00ODM2LWIxODQtOGM0ZGU5YThlM2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq53vbAi7/wKT/I+RCznA5mYZMc/1xAkl0BX5 FvdB9VfvmWuNpXZJTNteEMtMFLDYj/mWgg2qObRZrejy9K/En13Fx/UQoGVuZ8xa dtq0eaxZh1QI9D3+dawCWDSGo07AQe0YmCFh2EHXU9/DXFulmqdyDqJMJRJGl0/N +xte+2nN+DUsuVLrntRPYC2khQoXvTybxxi/xGp8TqVlGaFujBuICjb8pgKtmsiO UtuzdAuIlrvWvZT+JZv479wa8NCLIkI4wVYyL9FP34lEPLuDd5O9Y2T3zbAhl/Zm Ch0XTXUBed6O7HDFN83c9ghG6w31oe5SYYiwnx9LEzsJ/daCVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlPOtHotQ59F7htsz6O8EY//LeMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmJkZDU3ZmUtMWJmMy0z M2I1LWFkYTYtYTk1MzkxZWEzNzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0J8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8abcBmKlNA9YdLR1I/MP4Hdz3qMVViPWcutGudes0wxNvPDgP71x5k SFPtyiMgNudIAmOBvfOkDPOML3OzNPHNApivXbldBCxfEwaLnn9pyYKEDe16C8lz tJc3OoRr2qLasJ8AJd0BF0pFbo6/B8DvqgegEnJLx6sjuWYpSplVG5aFpEDa2PIo g8xyZe2tlkMwN9UwvFkKfu9RCzEQ+7NkpOHWqGyACuXF2YvVl6aWkY88EifP9il4 Y8V2y+M7OzS/6OWREN24ks+0+2uHuO3y7B57EUrdVTTC6C8Nk5vmDt6++NUsrjgQ UxhbszGFvKYEsTSh9Scd0KyeXPufv24= -----END CERTIFICATE-----Generated at Sun Jun 15 18:44:21 2025 by rpki-client