$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/958e9e55-6dcb-36e0-9545-9b2ad047a1e4.roa File: 958e9e55-6dcb-36e0-9545-9b2ad047a1e4.roa (raw, json) Hash identifier: GNy663gVPhmMdL1Ko3YMMaL3YdzUfijG2hQsbLcRID0= Subject key identifier: E6:3D:9D:FA:B2:D8:88:35:A9:F7:31:D3:CD:CB:5E:B1:F8:EB:C0:25 Certificate issuer: /CN=37e69330-3024-406b-b60a-0d95e25f2334 Certificate serial: 010D0C9F4328584A1F902570BEF73BD168C95C00 Authority key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/958e9e55-6dcb-36e0-9545-9b2ad047a1e4.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 401390 IP address blocks: 23.191.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:25:70:be:f7:3b:d1:68:c9:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37e69330-3024-406b-b60a-0d95e25f2334 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=d029fca5-0f59-40c8-a10b-e8c917834919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fb:32:39:7e:30:1a:95:4b:b3:6c:d5:f8:56: 6b:e4:e6:27:c4:52:4d:2e:d1:ce:57:0c:d3:23:da: a2:47:ea:61:47:4e:9c:68:f5:a9:ec:71:c2:b8:14: 25:14:4e:bd:3d:78:32:09:ec:a1:79:a8:aa:8b:83: f6:12:98:8b:25:9e:76:06:5e:a7:44:ba:a0:84:9c: 21:0e:7d:20:31:ad:b0:c7:dd:a1:28:6e:7e:01:ec: 18:5d:52:98:c2:b2:94:94:ca:cb:e3:d2:1b:75:92: 10:fc:0f:0a:33:2d:5f:35:24:7b:0e:3b:15:24:08: 43:d7:4c:46:48:4d:bc:85:cc:77:d7:35:31:40:03: c0:14:14:a9:b3:69:e0:1a:fb:88:5d:67:0f:8c:fc: 28:af:8c:c5:06:45:12:7b:22:00:4b:81:ef:94:ee: 54:04:45:f6:60:5e:91:c7:5d:bc:c1:10:58:7a:12: 33:c1:ee:2c:82:b0:51:ae:83:68:31:f1:12:9f:b0: 38:e9:c6:be:3f:f9:9e:57:e7:c0:32:c2:93:12:85: 87:98:ce:1c:03:73:37:57:be:9f:97:ce:eb:ee:4b: 22:db:89:18:97:e6:08:39:61:97:4d:dd:c9:e2:02: 1e:fd:10:dd:0e:d1:f4:95:6e:b6:d6:7c:66:56:0d: 9c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3D:9D:FA:B2:D8:88:35:A9:F7:31:D3:CD:CB:5E:B1:F8:EB:C0:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/958e9e55-6dcb-36e0-9545-9b2ad047a1e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl X509v3 Authority Key Identifier: keyid:97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer sbgp-ipAddrBlock: critical IPv4: 23.191.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d4:98:27:62:41:65:2c:54:a4:89:c9:26:21:af:a7:7a:2d: e9:90:aa:59:79:d0:1e:f2:82:ad:60:3e:bc:c8:52:66:05:51: b9:54:a5:45:5b:38:65:c9:e3:71:f6:7e:45:95:1b:a3:ca:4b: 0e:da:28:16:ee:95:b5:99:f0:f2:d7:41:1d:71:33:df:db:e9: 35:d0:1b:c1:3d:af:76:d3:44:bb:af:02:4c:e5:88:d8:c6:c9: 14:b5:4a:48:94:1f:26:f0:7c:9e:f6:14:e2:ee:9b:ea:ad:e1: da:78:c1:05:67:08:43:af:39:5f:92:2a:c2:72:b5:5c:d9:75: a4:f5:e9:3c:82:80:2b:4d:84:28:12:6d:25:94:67:c1:51:57: 57:98:38:c6:91:52:1b:85:7b:cf:33:a3:cf:44:aa:95:2c:15: 2e:fa:4c:f2:60:b8:af:04:09:11:f5:5c:d3:93:f0:13:bd:72: 51:5e:ed:37:a3:1d:c6:9d:47:d8:64:b2:29:f4:ab:1b:b2:6f: 8a:48:4a:84:1c:3c:00:02:86:7d:d7:81:2b:3a:fc:fe:fa:70: e0:b2:c3:33:10:e3:42:99:45:b1:21:1b:c6:aa:e9:01:e5:3c: d9:e0:d9:fb:e0:d9:37:d1:d2:74:bb:2a:23:0e:29:f0:00:73: ed:94:e2:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkCVwvvc70WjJXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdlNjkzMzAtMzAyNC00MDZiLWI2MGEtMGQ5NWUyNWYy MzM0MB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk ZDAyOWZjYTUtMGY1OS00MGM4LWExMGItZThjOTE3ODM0OTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvsyOX4wGpVLs2zV+FZr5OYnxFJNLtHOVwzT I9qiR+phR06caPWp7HHCuBQlFE69PXgyCeyheaiqi4P2EpiLJZ52Bl6nRLqghJwh Dn0gMa2wx92hKG5+AewYXVKYwrKUlMrL49IbdZIQ/A8KMy1fNSR7DjsVJAhD10xG SE28hcx31zUxQAPAFBSps2ngGvuIXWcPjPwor4zFBkUSeyIAS4HvlO5UBEX2YF6R x128wRBYehIzwe4sgrBRroNoMfESn7A46ca+P/meV+fAMsKTEoWHmM4cA3M3V76f l87r7ksi24kYl+YIOWGXTd3J4gIe/RDdDtH0lW621nxmVg2c+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOY9nfqy2Ig1qfcx083LXrH468AlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zN2U2 OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1ZTI1ZjIzMzQvOTU4ZTllNTUtNmRjYi0z NmUwLTk1NDUtOWIyYWQwNDdhMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzdlNjkzMzAtMzAyNC00MDZiLWI2 MGEtMGQ5NWUyNWYyMzM0LzM3ZTY5MzMwLTMwMjQtNDA2Yi1iNjBhLTBkOTVlMjVm MjMzNC5jcmwwHwYDVR0jBBgwFoAUlxapq2aVPz8sQPwdM2OFp0XUZTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zN2U2OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1 ZTI1ZjIzMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF794MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzUmCdiQWUsVKSJySYhr6d6LemQqll50B7ygq1gPrzIUmYFUblUpUVb OGXJ43H2fkWVG6PKSw7aKBbulbWZ8PLXQR1xM9/b6TXQG8E9r3bTRLuvAkzliNjG yRS1SkiUHybwfJ72FOLum+qt4dp4wQVnCEOvOV+SKsJytVzZdaT16TyCgCtNhCgS bSWUZ8FRV1eYOMaRUhuFe88zo89EqpUsFS76TPJguK8ECRH1XNOT8BO9clFe7Tej HcadR9hksin0qxuyb4pISoQcPAAChn3XgSs6/P76cOCywzMQ40KZRbEhG8aq6QHl PNng2fvg2TfR0nS7KiMOKfAAc+2U4vw= -----END CERTIFICATE-----Generated at Tue Jul 1 20:00:24 2025 by rpki-client