$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f17b7098-ca26-3dc0-ab42-a09e0920aa0b.roa File: f17b7098-ca26-3dc0-ab42-a09e0920aa0b.roa (raw, json) Hash identifier: wetSVEYOU8WxajKiKO3qA3WMOR6CjgbNUAjm2jDb/i4= Subject key identifier: 95:BA:EA:6C:8C:52:5E:43:49:F6:B2:33:9F:20:88:A6:CF:99:13:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A1E2AB624D3FC24F282EB6D60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f17b7098-ca26-3dc0-ab42-a09e0920aa0b.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 20940 IP address blocks: 23.50.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:b6:24:d3:fc:24:f2:82:eb:6d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=ef75f475-3865-4590-be2f-fe9fc3da19ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:78:46:74:5e:e0:65:de:98:cc:24:de:9e:6a: dd:4d:09:11:b2:ff:29:a3:00:66:64:c6:e9:12:8f: a7:17:c1:35:0e:39:42:6e:aa:fa:f4:2d:37:36:67: ff:c7:38:92:fd:47:b7:1a:b9:87:7c:c2:89:fa:f4: 53:1b:a2:f1:1e:01:ea:60:e5:a1:a6:67:28:21:11: 69:6f:3f:74:6d:ce:fe:bc:c4:66:35:a4:b0:38:46: 0d:20:6a:9c:91:26:34:39:97:03:51:47:e2:7b:72: 69:cd:a6:a6:3c:f4:61:94:93:bc:dd:56:3f:ef:27: 1c:b7:15:53:77:a6:b2:77:af:96:7f:ac:c8:81:7c: b4:93:aa:de:e0:a0:e8:19:ad:cd:44:e4:7a:1c:36: 4e:5e:a3:85:fb:d0:f2:9d:a3:87:c3:04:3c:20:c8: af:8e:84:c7:a0:8f:ee:2b:44:b9:6e:eb:fc:28:4e: d7:08:b4:73:fd:8a:63:a5:fa:29:9b:01:6a:b3:2f: 4c:6e:ef:d5:ff:03:c8:c1:18:4b:72:8b:c9:cd:7c: cc:c1:40:cf:4e:38:f9:ff:49:ad:ed:66:95:39:22: b2:93:45:99:4c:02:ce:ba:60:c3:cf:3f:9b:f4:4c: 50:3a:a3:a6:c8:b0:34:cd:ba:5f:0e:3a:74:e6:4d: c4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BA:EA:6C:8C:52:5E:43:49:F6:B2:33:9F:20:88:A6:CF:99:13:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f17b7098-ca26-3dc0-ab42-a09e0920aa0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.50.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:99:db:26:42:31:12:5d:9d:85:0f:ea:e5:ee:81:e5:a8:a1: 65:75:d6:45:d5:15:db:b5:fc:33:bd:27:e6:1b:c2:ae:2c:e7: 56:9e:f1:eb:1c:bd:ef:6c:71:14:37:7d:2f:9c:43:3c:b4:65: 2f:9f:33:37:9b:b6:6e:96:b4:41:18:6d:b1:0d:6d:16:2d:73: aa:59:ed:bc:93:96:14:86:cb:1c:33:00:12:a5:d6:01:c0:66: 5b:a8:df:ee:a4:f3:46:35:36:67:69:d3:e8:22:db:4f:c0:8b: 5d:81:7d:61:35:20:81:b6:eb:5f:fb:95:e3:a9:67:c1:32:b4: 1f:81:68:a3:92:0b:6d:1f:c2:68:16:4c:b8:0a:92:e7:61:03: a7:d4:05:35:f9:df:8f:c8:30:11:15:31:79:6b:d8:1e:d1:18: f6:67:55:fd:34:f8:3e:e1:44:cf:22:49:86:84:8e:e1:60:66: 77:ea:1c:a1:8c:c4:ae:09:9c:a7:75:4a:a1:2c:6e:22:d6:1a: d4:7c:e2:06:c2:df:9b:1d:05:42:49:b0:9a:fc:68:0e:5f:ec: 56:af:55:f0:cb:0e:a6:95:c0:93:c6:1f:06:fc:88:78:78:15: 0e:d4:40:b9:89:2d:96:f9:0d:f4:54:73:52:65:39:86:4c:e3: cd:aa:a0:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKrYk0/wk8oLrbWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk ZWY3NWY0NzUtMzg2NS00NTkwLWJlMmYtZmU5ZmMzZGExOWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03hGdF7gZd6YzCTenmrdTQkRsv8powBmZMbp Eo+nF8E1DjlCbqr69C03Nmf/xziS/Ue3GrmHfMKJ+vRTG6LxHgHqYOWhpmcoIRFp bz90bc7+vMRmNaSwOEYNIGqckSY0OZcDUUfie3JpzaamPPRhlJO83VY/7ycctxVT d6ayd6+Wf6zIgXy0k6re4KDoGa3NROR6HDZOXqOF+9DynaOHwwQ8IMivjoTHoI/u K0S5buv8KE7XCLRz/YpjpfopmwFqsy9Mbu/V/wPIwRhLcovJzXzMwUDPTjj5/0mt 7WaVOSKyk0WZTALOumDDzz+b9ExQOqOmyLA0zbpfDjp05k3EYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJW66myMUl5DSfayM58giKbPmROQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjE3YjcwOTgtY2EyNi0z ZGMwLWFiNDItYTA5ZTA5MjBhYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzIyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaZ2yZCMRJdnYUP6uXugeWooWV11kXVFdu1/DO9J+Ybwq4s51ae8esc ve9scRQ3fS+cQzy0ZS+fMzebtm6WtEEYbbENbRYtc6pZ7byTlhSGyxwzABKl1gHA Zluo3+6k80Y1Nmdp0+gi20/Ai12BfWE1IIG261/7leOpZ8EytB+BaKOSC20fwmgW TLgKkudhA6fUBTX534/IMBEVMXlr2B7RGPZnVf00+D7hRM8iSYaEjuFgZnfqHKGM xK4JnKd1SqEsbiLWGtR84gbC35sdBUJJsJr8aA5f7FavVfDLDqaVwJPGHwb8iHh4 FQ7UQLmJLZb5DfRUc1JlOYZM482qoGc= -----END CERTIFICATE-----Generated at Sun Jun 15 18:51:55 2025 by rpki-client