$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29d89bdd-91a3-3b50-a2a1-064367986503.roa File: 29d89bdd-91a3-3b50-a2a1-064367986503.roa (raw, json) Hash identifier: Qopa+gxBe9ZN8eO3HXJodZ2HE90khvNKnLptmrxPQas= Subject key identifier: 9B:CE:A2:E8:2F:D2:2B:DE:2A:58:60:74:AC:64:4A:93:A0:B4:80:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A159E1E09399B043B272380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29d89bdd-91a3-3b50-a2a1-064367986503.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.36.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:9e:1e:09:39:9b:04:3b:27:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=c0fd294a-66a0-4d0e-8af4-2ea955376d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6c:ab:3c:7b:9d:e1:aa:af:9e:14:4d:69:3a: 87:00:71:73:e7:c3:2a:16:99:53:bc:bc:d9:a2:1f: 56:67:9d:22:77:71:b7:d1:6b:50:18:a8:11:e5:93: 89:58:17:16:50:3f:32:00:33:34:b9:38:cc:bf:cc: c8:1c:a2:e8:96:ae:24:ae:b7:a7:9d:b0:2a:44:03: 11:90:ca:db:c3:ee:19:c3:c5:0d:03:9c:70:04:72: 50:d1:ba:68:4c:2e:59:84:8b:2f:47:6d:40:94:e2: fa:49:74:6c:3b:ec:b0:96:1d:0f:a7:2b:d7:46:5b: 86:84:a0:2f:87:a0:8d:97:24:9d:16:ce:b3:95:94: ba:35:c4:24:92:51:29:15:2a:b5:dd:85:4b:5e:57: d4:52:84:e9:b6:32:a2:2c:d0:eb:55:bd:34:7d:e9: 37:e0:5e:12:6d:f4:aa:bb:8b:77:a9:9c:83:1a:15: 36:6f:02:e5:7c:72:4f:6e:b1:f5:67:1b:a6:b4:91: 15:00:fa:c2:1f:b3:20:c8:f3:9e:4f:ee:25:7a:2a: 83:a6:58:3c:eb:7d:c2:1c:39:d8:3b:00:29:0f:24: b0:ed:a2:f6:e6:15:e9:a8:ce:81:1a:f4:6f:72:3d: bf:42:87:01:d2:3f:99:b7:bb:dc:e9:70:f9:96:c6: b1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CE:A2:E8:2F:D2:2B:DE:2A:58:60:74:AC:64:4A:93:A0:B4:80:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29d89bdd-91a3-3b50-a2a1-064367986503.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c6:be:6c:42:02:e2:c4:3c:98:d6:77:8e:fe:e9:98:9f:83: 6a:58:47:38:86:18:2a:1e:5b:41:c1:d4:b0:a6:53:08:8c:fc: 7c:0c:90:4b:25:ae:92:36:f1:85:8a:5b:79:b1:ce:f4:21:47: c8:33:c6:8a:e2:bf:d6:50:af:ec:69:35:7c:c6:71:2c:8b:e1: 83:1c:ad:5a:a5:c5:30:73:39:31:5b:74:7d:0f:cd:0b:be:23: 04:f8:67:00:14:5b:b6:2b:52:04:51:fe:e5:b8:04:b6:45:ee: ea:44:87:11:04:cb:41:78:ef:49:fb:ed:f4:d7:bb:58:c4:de: ac:91:00:1e:11:76:80:85:1a:24:ce:2d:f4:b8:f4:16:09:ff: da:8c:4a:8c:88:4c:8d:b9:04:87:e8:3c:a2:a2:03:07:1f:d5: ce:a2:d1:84:b0:fe:7f:72:85:b5:50:c4:1f:46:42:28:3a:89: 8b:c1:2b:bc:67:c5:06:e1:ad:76:73:51:67:2b:54:78:64:23: fb:76:61:4b:e4:27:d0:7b:42:0c:74:88:8c:52:6d:19:2d:80: 8f:d5:ba:3a:d5:e6:9b:cb:37:37:fc:25:ae:61:be:6e:1e:17: 52:2a:ab:ba:55:59:2a:f9:ce:d4:df:8d:db:38:6c:7f:16:00: f0:ae:21:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZ4eCTmbBDsnI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk YzBmZDI5NGEtNjZhMC00ZDBlLThhZjQtMmVhOTU1Mzc2ZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGyrPHud4aqvnhRNaTqHAHFz58MqFplTvLzZ oh9WZ50id3G30WtQGKgR5ZOJWBcWUD8yADM0uTjMv8zIHKLolq4krrennbAqRAMR kMrbw+4Zw8UNA5xwBHJQ0bpoTC5ZhIsvR21AlOL6SXRsO+ywlh0PpyvXRluGhKAv h6CNlySdFs6zlZS6NcQkklEpFSq13YVLXlfUUoTptjKiLNDrVb00fek34F4SbfSq u4t3qZyDGhU2bwLlfHJPbrH1ZxumtJEVAPrCH7MgyPOeT+4leiqDplg8633CHDnY OwApDySw7aL25hXpqM6BGvRvcj2/QocB0j+Zt7vc6XD5lsaxDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvOougv0iveKlhgdKxkSpOgtICGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjlkODliZGQtOTFhMy0z YjUwLWEyYTEtMDY0MzY3OTg2NTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyRMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTGvmxCAuLEPJjWd47+6Zifg2pYRziGGCoeW0HB1LCmUwiM/HwMkEsl rpI28YWKW3mxzvQhR8gzxoriv9ZQr+xpNXzGcSyL4YMcrVqlxTBzOTFbdH0PzQu+ IwT4ZwAUW7YrUgRR/uW4BLZF7upEhxEEy0F470n77fTXu1jE3qyRAB4RdoCFGiTO LfS49BYJ/9qMSoyITI25BIfoPKKiAwcf1c6i0YSw/n9yhbVQxB9GQig6iYvBK7xn xQbhrXZzUWcrVHhkI/t2YUvkJ9B7Qgx0iIxSbRktgI/VujrV5pvLNzf8Ja5hvm4e F1Iqq7pVWSr5ztTfjds4bH8WAPCuIeA= -----END CERTIFICATE-----Generated at Sun Jun 29 13:30:53 2025 by rpki-client