$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03d43504-6de6-33b2-a607-18ad4ab1c63a.roa File: 03d43504-6de6-33b2-a607-18ad4ab1c63a.roa (raw, json) Hash identifier: laYYSQriYLBNcZ19Xjr6jMsZyO56mgMglRQgkpt1j2I= Subject key identifier: FF:F8:7D:73:99:E5:49:AB:89:F4:9C:8F:C9:8E:24:0C:1C:91:AE:E5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A1596E11F275E0AFDEF3740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03d43504-6de6-33b2-a607-18ad4ab1c63a.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.38.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:96:e1:1f:27:5e:0a:fd:ef:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=1a713efa-4b2d-4ba4-a7bd-42035540836e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ef:e6:7c:a3:c0:d8:3d:e5:a8:d9:7c:05:1c: 95:b8:5b:30:10:94:8c:82:43:19:70:1c:a8:a0:9d: cf:e2:be:9b:22:d6:90:5d:c7:2d:bd:dc:70:b2:14: 5f:ed:03:d0:d8:ad:ca:b7:69:9e:41:a0:67:cd:15: 42:40:cc:19:89:b5:bf:fd:27:f6:30:09:fa:11:55: cc:4e:61:cd:2a:0b:59:b6:42:67:fe:a4:03:6f:57: b6:bc:91:c3:67:8c:41:22:3f:dc:ec:8d:ed:96:86: 7d:79:c6:5d:b3:88:c5:5f:c8:f8:58:1c:76:e1:7e: 5e:9f:07:3f:9c:c1:1d:c1:b1:da:d8:46:a0:b9:44: 49:86:8f:92:d7:03:3b:cf:cb:a3:66:64:0d:59:4e: 14:02:ea:84:e9:59:39:3c:76:22:a2:b7:0c:f4:eb: e5:84:04:d8:63:24:18:37:96:98:30:57:a6:1c:09: 4f:c9:0d:06:d9:54:c3:85:c2:41:cb:2e:68:ed:d6: f9:f7:40:37:b7:ba:fe:b3:ce:1d:68:7b:4c:9a:56: 2b:fb:25:72:29:da:a6:af:64:9f:07:fd:a9:24:96: c8:75:70:bd:55:14:e0:e9:8e:2e:ae:65:13:9c:c5: 7e:b6:20:14:3e:78:78:4a:5b:54:4e:d4:8a:ed:3a: 2f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F8:7D:73:99:E5:49:AB:89:F4:9C:8F:C9:8E:24:0C:1C:91:AE:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03d43504-6de6-33b2-a607-18ad4ab1c63a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ef:8c:8a:c8:43:03:99:aa:28:77:3e:ee:31:95:a0:89:63: a7:10:5a:ba:ed:93:09:55:bc:2e:6b:21:3e:26:1e:74:8e:b8: 69:f0:89:80:08:28:cf:5f:4a:55:f3:7e:d3:1e:9f:98:6c:2d: 4b:55:46:95:24:eb:0c:be:ab:04:f0:ae:15:c0:94:34:47:6d: 17:41:d7:cb:35:0f:1e:64:31:83:e4:23:df:aa:f8:cd:c1:5a: 17:04:bc:c5:c1:d7:33:80:98:f6:81:ef:14:4e:2a:2e:27:22: f5:71:f9:c4:b3:5f:16:41:b0:55:3f:fd:9b:1c:16:63:d6:3e: 76:54:dc:7d:dc:59:8a:55:b7:38:d7:4b:8a:3b:55:32:40:f7: 1e:74:10:35:89:2c:65:43:cd:a1:15:21:40:fa:6e:05:50:74: 90:a4:7b:1b:f4:53:13:6b:80:5a:64:ba:86:70:b9:96:52:4c: a0:65:c0:fd:ca:11:78:ff:ae:df:79:a1:d3:91:2f:15:c2:1c: 4a:dd:68:0b:39:ed:44:1a:3d:7b:70:b1:04:0a:a1:46:4f:b0: c2:fa:4b:52:69:13:05:a7:e6:3d:1a:35:c9:74:08:67:7f:89: df:a8:d4:22:24:2c:e4:26:b0:6e:0d:ba:d5:a7:90:ac:8a:64: c4:f9:74:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZbhHydeCv3vN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk MWE3MTNlZmEtNGIyZC00YmE0LWE3YmQtNDIwMzU1NDA4MzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO/mfKPA2D3lqNl8BRyVuFswEJSMgkMZcByo oJ3P4r6bItaQXcctvdxwshRf7QPQ2K3Kt2meQaBnzRVCQMwZibW//Sf2MAn6EVXM TmHNKgtZtkJn/qQDb1e2vJHDZ4xBIj/c7I3tloZ9ecZds4jFX8j4WBx24X5enwc/ nMEdwbHa2EaguURJho+S1wM7z8ujZmQNWU4UAuqE6Vk5PHYiorcM9OvlhATYYyQY N5aYMFemHAlPyQ0G2VTDhcJByy5o7db590A3t7r+s84daHtMmlYr+yVyKdqmr2Sf B/2pJJbIdXC9VRTg6Y4urmUTnMV+tiAUPnh4SltUTtSK7Tov+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/4fXOZ5UmrifScj8mOJAwcka7lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDNkNDM1MDQtNmRlNi0z M2IyLWE2MDctMThhZDRhYjFjNjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyb8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLvjIrIQwOZqih3Pu4xlaCJY6cQWrrtkwlVvC5rIT4mHnSOuGnwiYAI KM9fSlXzftMen5hsLUtVRpUk6wy+qwTwrhXAlDRHbRdB18s1Dx5kMYPkI9+q+M3B WhcEvMXB1zOAmPaB7xROKi4nIvVx+cSzXxZBsFU//ZscFmPWPnZU3H3cWYpVtzjX S4o7VTJA9x50EDWJLGVDzaEVIUD6bgVQdJCkexv0UxNrgFpkuoZwuZZSTKBlwP3K EXj/rt95odORLxXCHErdaAs57UQaPXtwsQQKoUZPsML6S1JpEwWn5j0aNcl0CGd/ id+o1CIkLOQmsG4NutWnkKyKZMT5dGo= -----END CERTIFICATE-----Generated at Sun Jun 29 13:42:10 2025 by rpki-client