$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a42d5dc-cb0a-3838-8416-aa824497e482.roa File: 0a42d5dc-cb0a-3838-8416-aa824497e482.roa (raw, json) Hash identifier: /zEH5MWx1JxTWHW/pTX4mSRahXCu5MtvhckmLrkKyYw= Subject key identifier: 82:93:4A:95:12:BB:68:FA:5A:9E:16:CB:40:9D:0B:8F:C0:FF:C5:C6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A1596FBAEB00290BEEA1480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a42d5dc-cb0a-3838-8416-aa824497e482.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.39.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:96:fb:ae:b0:02:90:be:ea:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=2727d5b3-ebb9-4d1a-8e98-71c117c1e5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f0:cf:cb:00:b1:3e:3d:a2:3d:a6:eb:59:7f: 1a:58:0f:03:fc:e9:07:be:74:5d:9d:99:58:26:97: f0:2b:05:ec:47:2b:c4:47:b6:b9:76:f8:d0:03:58: 5e:2d:da:7c:de:ae:05:c9:d0:12:43:fc:d1:1e:a7: bd:58:c6:4a:20:93:a5:07:07:7e:05:8f:92:79:af: 07:76:11:ed:80:62:d4:32:93:3b:88:20:3f:13:65: 35:35:57:bd:47:15:3f:71:7a:45:bf:5c:8f:67:6c: 6c:8d:14:9d:67:80:43:94:10:37:a2:06:80:75:a5: 45:66:eb:2d:1c:cf:1d:57:47:6d:1f:de:ee:8e:9f: 63:43:3c:76:2a:72:fc:cd:d2:c1:82:13:6d:9a:bc: 93:fe:7b:de:05:5c:91:19:d3:5e:39:7c:d1:46:78: a0:5c:ee:fc:61:84:fd:99:92:8c:e9:52:81:f3:8b: 47:15:2b:a6:d4:cc:ec:65:af:ac:f0:8d:9f:ee:d1: ac:df:fa:f9:d2:6e:fe:c2:62:60:0c:6f:1a:ad:d4: 16:b0:0c:7d:f2:e7:cd:23:13:df:06:88:17:39:88: ba:f9:30:31:d0:5c:48:e6:b4:aa:87:2a:bb:59:46: e2:fb:7f:1f:d5:22:1d:ba:c9:81:b9:d8:61:4c:44: 83:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:93:4A:95:12:BB:68:FA:5A:9E:16:CB:40:9D:0B:8F:C0:FF:C5:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a42d5dc-cb0a-3838-8416-aa824497e482.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:25:61:3c:93:b4:52:6c:9e:64:c4:96:6e:7f:df:97:3f:07: 7e:70:d5:89:1e:de:45:6e:21:43:80:b2:ac:06:fe:3a:ee:6c: 4f:48:36:ed:47:75:6d:14:a3:a8:93:75:9a:0d:70:95:88:90: 77:6d:d6:5f:f0:83:5a:58:d7:8d:3d:cc:cd:5e:25:c5:4e:e9: e3:dc:45:9f:5a:2c:25:9c:d1:84:fe:61:08:93:d7:65:f4:e1: 41:fc:8a:3f:a4:b9:72:41:96:d8:ff:0c:56:08:ec:5d:1f:49: 8b:90:54:1b:4c:ab:49:41:f6:24:34:0d:73:bb:2f:92:60:b1: 71:f6:ae:fc:28:16:59:a0:07:7e:ef:6c:cb:1d:ae:ad:05:45: fc:97:f1:91:e0:b5:e9:21:58:a5:54:85:57:8a:7c:4a:f5:1f: da:19:e0:58:ed:51:b3:57:51:ae:47:7b:d6:36:8b:75:16:3f: 5c:b0:e5:f4:6a:a5:66:03:45:95:46:14:7e:09:fc:b3:cc:a4: 92:53:17:9b:99:13:78:04:bb:40:22:44:c6:95:48:ad:b0:f4: 3a:2f:84:00:dc:06:bd:24:e7:a1:a9:78:ef:6e:88:64:97:a9: 1a:14:0c:2c:05:f0:5a:3f:a2:31:8c:6a:f7:d3:74:2d:e0:72: ae:5f:5d:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZb7rrACkL7qFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk MjcyN2Q1YjMtZWJiOS00ZDFhLThlOTgtNzFjMTE3YzFlNWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPDPywCxPj2iPabrWX8aWA8D/OkHvnRdnZlY JpfwKwXsRyvER7a5dvjQA1heLdp83q4FydASQ/zRHqe9WMZKIJOlBwd+BY+Sea8H dhHtgGLUMpM7iCA/E2U1NVe9RxU/cXpFv1yPZ2xsjRSdZ4BDlBA3ogaAdaVFZust HM8dV0dtH97ujp9jQzx2KnL8zdLBghNtmryT/nveBVyRGdNeOXzRRnigXO78YYT9 mZKM6VKB84tHFSum1MzsZa+s8I2f7tGs3/r50m7+wmJgDG8ardQWsAx98ufNIxPf BogXOYi6+TAx0FxI5rSqhyq7WUbi+38f1SIdusmBudhhTESDswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKTSpUSu2j6Wp4Wy0CdC4/A/8XGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGE0MmQ1ZGMtY2IwYS0z ODM4LTg0MTYtYWE4MjQ0OTdlNDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFycIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4lYTyTtFJsnmTElm5/35c/B35w1Yke3kVuIUOAsqwG/jrubE9INu1H dW0Uo6iTdZoNcJWIkHdt1l/wg1pY1409zM1eJcVO6ePcRZ9aLCWc0YT+YQiT12X0 4UH8ij+kuXJBltj/DFYI7F0fSYuQVBtMq0lB9iQ0DXO7L5JgsXH2rvwoFlmgB37v bMsdrq0FRfyX8ZHgtekhWKVUhVeKfEr1H9oZ4FjtUbNXUa5He9Y2i3UWP1yw5fRq pWYDRZVGFH4J/LPMpJJTF5uZE3gEu0AiRMaVSK2w9DovhADcBr0k56GpeO9uiGSX qRoUDCwF8Fo/ojGMavfTdC3gcq5fXQU= -----END CERTIFICATE-----Generated at Sun Jun 29 20:24:16 2025 by rpki-client