$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f75b73e-6dfc-36f0-b4d8-b54330edbf9b.roa File: 2f75b73e-6dfc-36f0-b4d8-b54330edbf9b.roa (raw, json) Hash identifier: 72Xuk0f1nEEyRtaRemyonjZi7uhx30Sk++s1mVgVqw4= Subject key identifier: C7:31:D0:83:BA:D9:63:77:B6:D4:66:54:BD:B7:35:AD:CB:3A:F1:78 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A15A782428A62ADE0EA4680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f75b73e-6dfc-36f0-b4d8-b54330edbf9b.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.53.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:a7:82:42:8a:62:ad:e0:ea:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=338bbbf1-03ed-4c92-93b8-50a29f854ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8d:60:2a:03:ab:64:87:10:c1:04:b8:c3:b0: 42:3b:15:d9:70:8c:bf:00:ed:b0:0d:2c:70:d4:17: 33:29:d3:3b:71:fc:a0:f9:11:56:fc:2d:f2:ee:57: 24:9e:83:9e:fd:c1:a4:11:53:98:82:83:17:4d:aa: 61:75:f7:6f:94:79:8e:fa:e8:bc:0b:c1:d4:51:bb: 01:eb:bc:3e:ca:39:51:7a:dc:48:1a:e5:29:0f:18: f2:f6:99:c5:84:f5:61:05:03:f6:e0:55:7c:e1:cf: e2:0f:e9:65:00:4a:c5:a5:f1:3d:1d:6b:e1:25:17: 6b:c8:dc:36:c0:db:f1:a1:75:a6:c6:93:38:6b:5d: 49:02:ac:fa:c3:5c:a1:1f:05:40:48:bf:27:37:48: 59:de:2c:ee:df:f1:d1:27:4b:01:23:18:bc:a4:50: a7:75:30:94:8f:18:b3:99:33:25:94:d5:93:5d:bf: ff:14:3c:2a:1f:9c:e7:a6:08:5d:c6:ab:4c:d6:07: d1:41:c5:f0:a5:e0:a6:01:01:37:5c:e6:ca:ae:bf: c4:7f:42:9e:71:28:a8:cc:09:b5:60:a5:da:cd:9d: f6:57:b6:bd:8a:8f:be:ce:55:89:82:7c:1d:01:61: b4:42:0a:a6:9f:6e:0e:fc:3b:19:c6:fb:15:f5:42: d7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:31:D0:83:BA:D9:63:77:B6:D4:66:54:BD:B7:35:AD:CB:3A:F1:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f75b73e-6dfc-36f0-b4d8-b54330edbf9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:20:07:43:91:4a:37:22:9f:57:0c:46:9a:6c:08:f1:eb:af: 67:d6:c6:31:19:21:87:52:23:7f:a9:26:2a:da:fc:be:0e:7a: c7:cf:78:dd:71:8a:20:18:cb:28:65:93:c9:d4:7c:f5:f0:59: 67:db:76:10:0f:a8:79:f9:74:79:ba:fe:87:49:4a:ae:a0:8f: b9:fd:4d:77:96:07:26:72:af:1b:59:e3:90:f6:ab:34:16:c9: b3:e3:b7:5e:35:37:ad:ab:f6:66:55:4e:1e:da:b7:e5:16:0d: f6:0a:64:3a:a2:85:22:93:49:c5:e4:10:d0:a5:1c:fe:11:d7: 4a:ff:b4:b8:92:cb:cf:4d:00:09:5a:c7:4a:df:b6:bd:4f:12: 1c:ee:bc:9c:0d:6d:89:a8:c1:68:bd:40:59:39:3f:7a:43:9b: fd:e2:a5:91:57:3b:44:50:f6:b6:fe:42:81:0b:e5:82:3d:29: a6:1a:cf:f3:16:57:43:48:d9:fe:b0:ec:5f:ab:9a:fd:cf:71: f7:40:b3:4c:8a:83:79:df:46:1c:a3:32:e3:20:1c:df:8f:b7: 91:89:78:32:92:97:73:56:66:86:b0:af:d3:59:3e:bf:45:bf: a9:08:f1:f8:9c:a1:1f:ee:60:47:f5:9b:0f:ed:f9:d0:87:ce: fb:84:0b:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FaeCQopireDqRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk MzM4YmJiZjEtMDNlZC00YzkyLTkzYjgtNTBhMjlmODU0ZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo1gKgOrZIcQwQS4w7BCOxXZcIy/AO2wDSxw 1BczKdM7cfyg+RFW/C3y7lcknoOe/cGkEVOYgoMXTaphdfdvlHmO+ui8C8HUUbsB 67w+yjlRetxIGuUpDxjy9pnFhPVhBQP24FV84c/iD+llAErFpfE9HWvhJRdryNw2 wNvxoXWmxpM4a11JAqz6w1yhHwVASL8nN0hZ3izu3/HRJ0sBIxi8pFCndTCUjxiz mTMllNWTXb//FDwqH5znpghdxqtM1gfRQcXwpeCmAQE3XObKrr/Ef0KecSiozAm1 YKXazZ32V7a9io++zlWJgnwdAWG0Qgqmn24O/DsZxvsV9ULX5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcx0IO62WN3ttRmVL23Na3LOvF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmY3NWI3M2UtNmRmYy0z NmYwLWI0ZDgtYjU0MzMwZWRiZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzUDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAggB0ORSjcin1cMRppsCPHrr2fWxjEZIYdSI3+pJira/L4OesfPeN1x iiAYyyhlk8nUfPXwWWfbdhAPqHn5dHm6/odJSq6gj7n9TXeWByZyrxtZ45D2qzQW ybPjt141N62r9mZVTh7at+UWDfYKZDqihSKTScXkENClHP4R10r/tLiSy89NAAla x0rftr1PEhzuvJwNbYmowWi9QFk5P3pDm/3ipZFXO0RQ9rb+QoEL5YI9KaYaz/MW V0NI2f6w7F+rmv3PcfdAs0yKg3nfRhyjMuMgHN+Pt5GJeDKSl3NWZoawr9NZPr9F v6kI8ficoR/uYEf1mw/t+dCHzvuEC54= -----END CERTIFICATE-----Generated at Sun Jun 29 18:55:39 2025 by rpki-client