$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a31eb50-2fcf-308b-a424-403240a2d905.roa File: 0a31eb50-2fcf-308b-a424-403240a2d905.roa (raw, json) Hash identifier: BRxWdSI90CJ+vo4PuJktugs2Pns7aP8cQ4RKOpRGLrU= Subject key identifier: D5:B2:A6:16:B4:E4:F8:AC:FF:9E:A1:30:3F:0D:8C:69:F2:62:93:19 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A15934560C5B7DC209B9A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a31eb50-2fcf-308b-a424-403240a2d905.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.36.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:93:45:60:c5:b7:dc:20:9b:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=2af58974-898e-42e7-90e2-9b3250bbbf76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fd:72:b2:7a:51:2d:d4:88:73:b7:e4:73:de: 02:de:de:42:e4:7a:3b:3c:91:ac:21:25:12:f0:1d: f8:6a:a2:67:3f:6f:b2:3c:73:ae:bd:16:b0:b5:ad: 8c:51:11:84:0f:49:c5:bd:bc:37:bb:29:2f:67:10: 28:a6:6c:d8:5e:21:58:53:59:0f:b7:bf:69:57:ef: 73:33:4b:61:9f:cb:c3:79:cb:77:68:ee:91:6b:13: 54:e8:84:97:bd:05:f5:2a:80:fd:f9:85:29:aa:ee: cc:c7:a1:04:c2:62:1b:3f:a7:dc:1f:9e:02:21:96: 98:bf:35:29:e8:c1:b3:0f:eb:e3:7c:b3:de:2e:72: 99:ff:31:55:51:d3:c6:2d:4c:b8:88:51:67:d0:53: d3:3c:c3:b6:af:b7:af:ce:e1:b8:78:a6:88:72:d1: ee:67:f0:d0:2a:24:9a:83:b1:dc:ac:04:fa:6d:d9: 0c:76:15:75:cc:92:4d:14:8d:c5:b3:69:40:f0:72: 38:61:55:a9:2c:a8:90:b1:87:9a:58:43:8c:08:9c: 41:85:5d:f7:5a:f1:3f:ea:c8:d0:d1:2e:74:e8:29: 3e:82:0c:6c:c8:d5:2d:58:78:52:06:fe:01:35:8c: aa:a5:99:06:c8:c0:e5:1c:d2:5e:ce:4e:35:af:29: f0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B2:A6:16:B4:E4:F8:AC:FF:9E:A1:30:3F:0D:8C:69:F2:62:93:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a31eb50-2fcf-308b-a424-403240a2d905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:b8:de:14:cc:34:cd:e6:3b:31:56:4d:a3:60:be:4e:12:53: fa:3f:0f:f7:22:df:58:99:1b:fa:d3:39:16:0e:71:0b:bd:c5: c7:38:4b:aa:a0:37:f8:a9:24:4d:d9:73:39:01:d4:6e:14:40: ad:0b:05:e2:12:3b:6e:85:91:9e:69:62:48:f1:4a:98:bb:6f: 8c:db:ed:e9:02:bf:be:ea:0d:37:d2:63:78:a2:6e:95:43:a6: 8d:68:85:fd:2d:db:2e:4e:60:de:b4:f8:1b:e4:70:a8:20:3a: 87:a2:63:a0:73:77:ea:de:bc:bc:0b:35:49:11:17:43:47:ac: d7:1e:0d:96:7e:0e:89:fb:06:70:a7:0b:da:77:cb:5c:bd:c3: c3:c1:15:c9:a1:f2:3a:6b:0b:34:14:ae:e3:73:69:3a:e2:a0: 45:1d:35:1f:8f:5b:75:44:c5:d1:00:a2:87:57:91:d6:99:07: cc:84:36:cb:3a:86:fd:46:4c:c7:18:94:59:31:82:77:31:f2: 38:1c:8f:b4:bc:2f:f7:c9:0d:d0:e9:c0:78:ac:e9:f0:1e:6f: 02:a3:d6:ee:0c:d1:b2:46:dd:df:2e:30:ea:6a:9a:c7:1e:55: e5:4a:f9:ab:96:78:3d:ca:ed:4c:02:d7:1d:b4:83:e0:d9:71: d7:0a:75:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZNFYMW33CCbmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk MmFmNTg5NzQtODk4ZS00MmU3LTkwZTItOWIzMjUwYmJiZjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv1ysnpRLdSIc7fkc94C3t5C5Ho7PJGsISUS 8B34aqJnP2+yPHOuvRawta2MURGED0nFvbw3uykvZxAopmzYXiFYU1kPt79pV+9z M0thn8vDect3aO6RaxNU6ISXvQX1KoD9+YUpqu7Mx6EEwmIbP6fcH54CIZaYvzUp 6MGzD+vjfLPeLnKZ/zFVUdPGLUy4iFFn0FPTPMO2r7evzuG4eKaIctHuZ/DQKiSa g7HcrAT6bdkMdhV1zJJNFI3Fs2lA8HI4YVWpLKiQsYeaWEOMCJxBhV33WvE/6sjQ 0S506Ck+ggxsyNUtWHhSBv4BNYyqpZkGyMDlHNJezk41rynwiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWypha05Pis/56hMD8NjGnyYpMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGEzMWViNTAtMmZjZi0z MDhiLWE0MjQtNDAzMjQwYTJkOTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyQCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJS43hTMNM3mOzFWTaNgvk4SU/o/D/ci31iZG/rTORYOcQu9xcc4S6qg N/ipJE3ZczkB1G4UQK0LBeISO26FkZ5pYkjxSpi7b4zb7ekCv77qDTfSY3iibpVD po1ohf0t2y5OYN60+BvkcKggOoeiY6Bzd+revLwLNUkRF0NHrNceDZZ+Don7BnCn C9p3y1y9w8PBFcmh8jprCzQUruNzaTrioEUdNR+PW3VExdEAoodXkdaZB8yENss6 hv1GTMcYlFkxgncx8jgcj7S8L/fJDdDpwHis6fAebwKj1u4M0bJG3d8uMOpqmsce VeVK+auWeD3K7UwC1x20g+DZcdcKdf0= -----END CERTIFICATE-----Generated at Sun Jun 29 14:09:58 2025 by rpki-client