$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ebd643a-6691-3359-b279-85c90d4be469.roa File: 1ebd643a-6691-3359-b279-85c90d4be469.roa (raw, json) Hash identifier: Gq9t+p4sOM0qnpcmFiTfPhq36vEM+ruVGPdxghJRk1c= Subject key identifier: AB:C2:05:24:FE:AF:A9:DC:62:A5:D5:E5:C7:AD:F4:61:42:DD:E4:D2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A2D859BBC7D3F2510E17B1E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ebd643a-6691-3359-b279-85c90d4be469.roa Signing time: Fri 13 Jun 2025 13:01:04 +0000 ROA not before: Fri 13 Jun 2025 13:01:04 +0000 ROA not after: Thu 11 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 23.35.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:85:9b:bc:7d:3f:25:10:e1:7b:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 13 13:01:04 2025 GMT Not After : Sep 11 13:01:04 2025 GMT Subject: CN=28e49498-6825-4360-b597-10a13c0ab9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:95:7f:88:a8:e8:72:ed:6a:3c:81:6b:d1:1b: 48:98:0b:80:22:6b:b9:72:38:49:2e:f0:5a:a0:c1: bd:47:5d:08:67:48:89:7a:4e:fd:0a:8c:75:63:8a: e2:51:c2:1a:36:2f:0a:68:24:86:34:e2:f9:01:53: 76:05:86:7a:d6:dc:67:38:76:b6:e7:b4:28:5a:7a: e5:3c:9c:69:ec:8a:46:6d:b3:c5:95:6b:83:21:e7: 21:45:87:02:93:1a:01:04:4b:8e:ce:1c:f3:95:7d: ba:44:dd:37:18:91:30:08:a2:53:4e:6d:f9:54:16: 4d:58:06:c3:3c:5d:3b:05:37:0d:8a:39:06:7d:28: f5:8c:da:de:1b:53:28:72:a2:48:a3:8a:06:7a:c8: 91:6d:58:cb:5c:08:a3:6d:c0:d1:3c:ec:b6:b4:66: 70:70:02:69:5e:8c:63:1c:2b:97:ab:3d:ad:2a:0f: cb:95:35:6e:fa:c6:06:6f:82:44:9d:74:c9:7e:e0: 98:7f:93:74:db:99:5b:b8:79:0f:ec:d0:26:f0:c0: 0c:22:fa:8e:dc:b4:0c:e5:2a:1f:09:60:73:1c:24: e2:b3:ee:7e:ef:61:26:a5:98:b3:4b:ab:6c:bf:ff: 9f:c6:7a:ff:e5:44:c3:e1:25:67:54:af:26:96:43: b9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C2:05:24:FE:AF:A9:DC:62:A5:D5:E5:C7:AD:F4:61:42:DD:E4:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ebd643a-6691-3359-b279-85c90d4be469.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:e5:6e:67:e3:fe:58:17:96:5f:d3:65:f8:e9:9c:b6:f1:5b: 9f:bd:d1:30:9d:f5:f0:60:73:0e:97:3c:7e:07:0b:65:db:60: cc:53:79:cf:44:70:2b:03:b9:2e:82:2c:17:e3:ba:98:7b:ef: a4:87:2e:ae:10:22:4e:17:f9:48:b5:80:c3:1c:14:cf:cd:9d: 5f:ad:13:63:0f:0d:6a:1f:61:32:16:f1:a0:7d:f4:fb:32:6d: ab:74:69:b0:0e:34:1a:1b:47:64:23:17:2a:ed:6f:37:db:cb: a5:f1:d8:e7:fc:fd:ba:f2:17:28:65:72:a9:ee:ce:9e:bc:e9: b1:9e:4a:9c:ef:b6:63:4f:6e:fe:7b:ca:be:38:21:df:b2:a8: 14:e5:03:6a:08:f0:3e:2e:ff:20:d5:39:48:94:17:52:07:3a: c4:03:e0:83:f8:11:ff:89:0c:3e:b7:ba:7e:c9:10:15:bf:74: 2e:8a:fa:b5:45:7a:b2:6e:6a:35:67:c3:20:aa:c5:e4:a1:34: 61:dc:6d:71:ef:8e:0a:34:da:41:a0:f7:c4:36:7f:78:91:52: c1:52:72:18:4e:27:e3:d8:51:19:68:b5:21:14:65:be:2b:e6: eb:84:8f:16:a5:d6:00:5c:86:7e:39:0b:ac:c2:d1:31:cf:70: a0:ec:1c:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothZu8fT8lEOF7HgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk MjhlNDk0OTgtNjgyNS00MzYwLWI1OTctMTBhMTNjMGFiOWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJV/iKjocu1qPIFr0RtImAuAImu5cjhJLvBa oMG9R10IZ0iJek79Cox1Y4riUcIaNi8KaCSGNOL5AVN2BYZ61txnOHa257QoWnrl PJxp7IpGbbPFlWuDIechRYcCkxoBBEuOzhzzlX26RN03GJEwCKJTTm35VBZNWAbD PF07BTcNijkGfSj1jNreG1MocqJIo4oGesiRbVjLXAijbcDRPOy2tGZwcAJpXoxj HCuXqz2tKg/LlTVu+sYGb4JEnXTJfuCYf5N025lbuHkP7NAm8MAMIvqO3LQM5Sof CWBzHCTis+5+72EmpZizS6tsv/+fxnr/5UTD4SVnVK8mlkO59wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvCBST+r6ncYqXV5cet9GFC3eTSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWViZDY0M2EtNjY5MS0z MzU5LWIyNzktODVjOTBkNGJlNDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyPsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHlbmfj/lgXll/TZfjpnLbxW5+90TCd9fBgcw6XPH4HC2XbYMxTec9E cCsDuS6CLBfjuph776SHLq4QIk4X+Ui1gMMcFM/NnV+tE2MPDWofYTIW8aB99Psy bat0abAONBobR2QjFyrtbzfby6Xx2Of8/bryFyhlcqnuzp686bGeSpzvtmNPbv57 yr44Id+yqBTlA2oI8D4u/yDVOUiUF1IHOsQD4IP4Ef+JDD63un7JEBW/dC6K+rVF erJuajVnwyCqxeShNGHcbXHvjgo02kGg98Q2f3iRUsFSchhOJ+PYURlotSEUZb4r 5uuEjxal1gBchn45C6zC0THPcKDsHL8= -----END CERTIFICATE-----Generated at Mon Jun 30 19:50:35 2025 by rpki-client