$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aba2e2b9-cfd9-36c9-9414-48a894d0a0f8.roa File: aba2e2b9-cfd9-36c9-9414-48a894d0a0f8.roa (raw, json) Hash identifier: ixPcDC/MX1NxM9FJF6sT2WVWWq3z/o8xWrZ9nn4lIX0= Subject key identifier: 34:08:5B:1C:A4:DF:C7:24:4D:02:60:3C:72:86:BC:1D:83:23:F1:45 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A305040EFACAC80C0629F6880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aba2e2b9-cfd9-36c9-9414-48a894d0a0f8.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 23.192.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:40:ef:ac:ac:80:c0:62:9f:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=8ec44fb7-c92d-4379-87e8-1b5a60d7433a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:78:e5:4f:3e:57:43:30:cb:bd:71:78:22:71: 81:51:43:d6:be:2d:ad:54:7a:3c:01:d6:d8:f6:62: da:43:43:63:c2:1d:37:78:08:b8:fa:04:92:c1:b8: 68:28:0d:52:85:aa:71:f5:2f:2c:0b:46:3b:cc:09: 2f:0a:c1:89:b5:47:be:9a:46:9c:a5:e5:15:86:a4: b8:bb:6d:d1:91:5e:f7:67:3a:df:93:72:a8:b6:1a: a6:65:55:ba:56:70:23:c5:75:43:f1:e5:f4:fb:ed: 9b:89:02:91:44:78:70:d9:11:d9:f2:00:f2:8d:86: 62:b9:4d:05:79:dd:80:01:ff:30:5e:bc:f6:12:c4: 5d:93:0e:f7:cb:d4:27:67:96:63:fc:a0:b6:be:d5: 1e:d8:ed:c3:ae:75:ee:57:66:a0:71:aa:ce:d8:ed: 14:4f:40:b4:ad:20:25:b5:33:02:ac:2c:ad:25:0a: 0b:b8:71:09:5f:14:9f:67:06:0f:34:f0:33:e0:45: 88:60:88:f3:f6:39:b1:df:33:76:c6:25:c9:1b:cb: dc:13:aa:d7:85:86:0f:12:71:3a:7f:db:b2:42:9f: 50:e7:13:69:16:21:4e:d5:13:76:f7:07:e8:24:58: ea:d7:96:e3:a8:d3:5b:bd:72:ec:a4:96:86:99:b7: 53:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:08:5B:1C:A4:DF:C7:24:4D:02:60:3C:72:86:BC:1D:83:23:F1:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aba2e2b9-cfd9-36c9-9414-48a894d0a0f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.192.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:39:c2:cc:05:08:e6:6c:4c:40:ac:e8:aa:62:4d:44:13:20: fa:66:2b:8e:44:2e:e1:22:01:af:9a:af:ba:8e:3f:91:b1:a7: ef:ac:ef:cc:e6:ff:20:bb:15:af:76:e5:75:62:41:b2:62:ea: 5d:9c:21:4d:6b:f6:48:33:88:db:ff:96:c1:11:55:51:45:5e: 53:5e:c0:39:21:ec:7a:5e:4e:02:ec:1c:a9:75:ea:04:ab:9b: 2c:38:69:92:a7:4b:a8:dd:0a:6b:18:ec:3e:9b:78:b2:93:a5: c6:4a:35:c9:23:7f:cf:98:de:06:ed:9b:ed:3a:eb:e1:3a:10: e1:90:a6:aa:93:ef:50:c7:f8:31:1a:6b:51:92:20:f1:cc:8e: 03:15:06:53:fa:d4:7a:dd:ab:3f:ad:b7:04:13:fe:52:0a:c8: 66:87:db:68:38:77:ad:b8:7a:a0:99:80:00:ad:64:d2:d2:05: 3b:3a:f8:46:8b:bb:46:95:9f:96:af:54:9c:df:a1:7c:79:18: c8:31:1f:bb:ae:43:48:6f:6d:5b:5f:24:6b:eb:02:cf:33:94: 00:82:15:89:3f:81:18:04:14:1d:97:fb:69:64:16:c0:f4:d9: 58:00:94:59:9e:b8:88:09:c7:31:6f:07:97:51:4b:8e:a9:5f: 6c:83:f0:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEowUEDvrKyAwGKfaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk OGVjNDRmYjctYzkyZC00Mzc5LTg3ZTgtMWI1YTYwZDc0MzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinjlTz5XQzDLvXF4InGBUUPWvi2tVHo8AdbY 9mLaQ0Njwh03eAi4+gSSwbhoKA1Shapx9S8sC0Y7zAkvCsGJtUe+mkacpeUVhqS4 u23RkV73Zzrfk3KothqmZVW6VnAjxXVD8eX0++2biQKRRHhw2RHZ8gDyjYZiuU0F ed2AAf8wXrz2EsRdkw73y9QnZ5Zj/KC2vtUe2O3DrnXuV2agcarO2O0UT0C0rSAl tTMCrCytJQoLuHEJXxSfZwYPNPAz4EWIYIjz9jmx3zN2xiXJG8vcE6rXhYYPEnE6 f9uyQp9Q5xNpFiFO1RN29wfoJFjq15bjqNNbvXLspJaGmbdTWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQIWxyk38ckTQJgPHKGvB2DI/FFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWJhMmUyYjktY2ZkOS0z NmM5LTk0MTQtNDhhODk0ZDBhMGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8AUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF05wswFCOZsTECs6KpiTUQTIPpmK45ELuEiAa+ar7qOP5Gxp++s78zm /yC7Fa925XViQbJi6l2cIU1r9kgziNv/lsERVVFFXlNewDkh7HpeTgLsHKl16gSr myw4aZKnS6jdCmsY7D6beLKTpcZKNckjf8+Y3gbtm+066+E6EOGQpqqT71DH+DEa a1GSIPHMjgMVBlP61Hrdqz+ttwQT/lIKyGaH22g4d624eqCZgACtZNLSBTs6+EaL u0aVn5avVJzfoXx5GMgxH7uuQ0hvbVtfJGvrAs8zlACCFYk/gRgEFB2X+2lkFsD0 2VgAlFmeuIgJxzFvB5dRS46pX2yD8Mk= -----END CERTIFICATE-----Generated at Sun Jun 15 18:43:44 2025 by rpki-client