$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/890df6bd-b24b-34af-aeb4-0c3a30601a5e.roa File: 890df6bd-b24b-34af-aeb4-0c3a30601a5e.roa (raw, json) Hash identifier: gOMxahd6Snw5kdIr1ly/h9JmHN65h+qmCXIIW2i9bgA= Subject key identifier: F0:34:20:D9:44:D5:86:C6:C6:6B:A9:3D:20:63:89:64:87:9D:E8:97 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849FE100846D6F637D59346B520 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/890df6bd-b24b-34af-aeb4-0c3a30601a5e.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 3786 IP address blocks: 23.74.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:08:46:d6:f6:37:d5:93:46:b5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=8d88dab3-d907-41d7-90cc-9c57801665f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:03:c6:f8:0f:ba:5b:2b:d5:3a:9c:65:c1:ae: c0:54:58:ad:bd:ff:68:19:34:e0:d5:81:80:62:98: b6:43:44:b0:07:30:5f:65:78:ed:e1:d0:72:57:66: b9:56:ff:b7:59:25:8f:90:a1:72:1c:f5:11:06:ca: 03:54:f7:41:e0:f1:af:a1:f4:a1:3e:99:55:8d:d8: ab:8e:a0:86:9d:83:f3:f2:d7:a1:3c:fb:11:4c:2d: 83:3f:24:48:99:ab:65:94:92:94:f5:49:ed:5e:a7: 10:ff:95:15:8b:8a:10:03:f7:18:e7:c6:bc:16:37: 47:dd:a4:78:64:ae:9b:85:72:d4:1e:93:31:60:28: 30:ae:4c:61:ca:bf:54:65:16:c5:d3:5d:68:b6:35: da:5c:4f:36:ce:53:18:43:df:db:fd:71:31:09:99: db:d7:f9:74:d1:72:f1:a0:a1:1c:aa:ad:07:21:ad: a4:cf:20:bb:05:cf:c0:26:57:09:2d:dd:c3:a1:6d: 4c:f8:cc:4d:67:4f:45:ea:df:60:f8:be:86:f9:b4: 55:83:3d:e5:25:3f:55:a1:d4:a8:98:f8:40:69:fe: c7:b9:75:9f:33:22:31:3f:b3:42:1f:36:32:29:03: 16:6e:2f:98:00:d3:ce:f1:90:e7:a4:55:6e:23:de: d3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:34:20:D9:44:D5:86:C6:C6:6B:A9:3D:20:63:89:64:87:9D:E8:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/890df6bd-b24b-34af-aeb4-0c3a30601a5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.74.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f6:3a:29:99:d6:ab:2d:b9:94:c5:84:33:b3:53:59:47:a4: 22:a1:99:09:9e:28:e7:8a:9b:df:a8:7f:a6:42:ab:1f:05:28: a3:04:45:0a:70:9e:05:08:73:50:be:ae:6c:e7:c1:fa:9e:23: 55:81:1e:1c:8d:cb:c8:cb:7a:43:b1:49:a1:23:f2:a5:57:28: ec:4b:ae:5c:56:49:7d:95:47:77:35:4a:9a:a6:2d:4b:3c:86: 75:94:49:b7:61:a9:7b:4d:3f:8f:84:5e:87:81:dd:57:e9:e5: 12:b6:db:f9:d4:17:f1:88:df:60:b4:63:d2:23:27:80:a5:8d: bb:69:6c:47:7a:b5:8d:27:10:8e:04:68:a7:76:b1:46:c8:d5: b0:ed:6d:d7:a8:c0:62:06:43:c0:09:80:67:dc:87:42:99:8d: 1e:59:d6:f9:a4:29:b9:da:7d:86:dd:17:f8:bf:05:0e:00:f0: e8:21:c9:e3:85:9b:0c:a6:28:35:d6:ea:9e:5c:54:94:71:3b: 7e:91:80:d2:8f:a1:c9:fb:de:72:46:b0:98:ad:ea:8b:6f:7f: b5:52:e2:a3:83:d1:5d:77:6b:f2:ea:46:6a:c0:f5:e2:06:60: d0:ce:ed:51:1e:62:b1:54:17:a7:c7:67:d8:c7:5e:fa:c8:c2: e3:66:10:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+EAhG1vY31ZNGtSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk OGQ4OGRhYjMtZDkwNy00MWQ3LTkwY2MtOWM1NzgwMTY2NWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwPG+A+6WyvVOpxlwa7AVFitvf9oGTTg1YGA Ypi2Q0SwBzBfZXjt4dByV2a5Vv+3WSWPkKFyHPURBsoDVPdB4PGvofShPplVjdir jqCGnYPz8tehPPsRTC2DPyRImatllJKU9UntXqcQ/5UVi4oQA/cY58a8FjdH3aR4 ZK6bhXLUHpMxYCgwrkxhyr9UZRbF011otjXaXE82zlMYQ9/b/XExCZnb1/l00XLx oKEcqq0HIa2kzyC7Bc/AJlcJLd3DoW1M+MxNZ09F6t9g+L6G+bRVgz3lJT9VodSo mPhAaf7HuXWfMyIxP7NCHzYyKQMWbi+YANPO8ZDnpFVuI97TeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPA0INlE1YbGxmupPSBjiWSHneiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODkwZGY2YmQtYjI0Yi0z NGFmLWFlYjQtMGMzYTMwNjAxYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF0oQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL2OimZ1qstuZTFhDOzU1lHpCKhmQmeKOeKm9+of6ZCqx8FKKMERQpw ngUIc1C+rmznwfqeI1WBHhyNy8jLekOxSaEj8qVXKOxLrlxWSX2VR3c1SpqmLUs8 hnWUSbdhqXtNP4+EXoeB3Vfp5RK22/nUF/GI32C0Y9IjJ4CljbtpbEd6tY0nEI4E aKd2sUbI1bDtbdeowGIGQ8AJgGfch0KZjR5Z1vmkKbnafYbdF/i/BQ4A8OghyeOF mwymKDXW6p5cVJRxO36RgNKPocn73nJGsJit6otvf7VS4qOD0V13a/LqRmrA9eIG YNDO7VEeYrFUF6fHZ9jHXvrIwuNmELI= -----END CERTIFICATE-----Generated at Mon Jun 16 02:09:36 2025 by rpki-client