$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36eedd7a-6a2a-3af4-8820-99d7f3b3f059.roa File: 36eedd7a-6a2a-3af4-8820-99d7f3b3f059.roa (raw, json) Hash identifier: Ax2ii8Tkm3jXy0h8jwttPHYqYBlB2KwW6+ba8J7NdQY= Subject key identifier: 5E:94:66:D2:D2:31:69:99:48:D0:D6:90:55:44:B5:69:37:8E:BB:30 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3B7B0F1F64FBAF85BDE08A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36eedd7a-6a2a-3af4-8820-99d7f3b3f059.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 16625 IP address blocks: 23.43.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:0f:1f:64:fb:af:85:bd:e0:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=a839f9a0-95f5-4561-a527-aec4d7f484aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:76:46:18:b4:17:b6:98:ce:20:1c:07:dd:2b: 78:8e:02:84:5c:9c:eb:83:23:0f:fc:46:b8:92:65: ad:95:6c:d6:9b:7c:e5:73:60:9a:d3:10:92:da:61: 20:f5:9b:2c:76:d0:6d:fe:f2:5a:19:7b:45:d3:01: 24:ad:20:81:a9:0e:c6:f2:e4:22:f3:ae:d1:c1:03: ac:e1:a1:99:57:fd:41:b0:55:d7:d4:4a:a8:18:e1: 78:93:57:ab:da:be:65:28:11:be:46:10:d3:09:04: 77:0b:4e:75:14:b8:0b:eb:15:07:27:fd:6a:ce:2e: 5c:38:63:94:30:84:a3:23:29:ff:4c:c0:7a:38:56: 04:cc:d6:83:fe:d7:48:15:53:ec:3f:8f:f1:54:15: 37:36:e3:35:4b:55:d4:71:8a:09:ff:14:fb:e4:29: 42:d0:37:6e:1e:44:42:7f:55:35:57:48:4a:74:e5: 44:47:c5:0b:45:71:0e:62:47:d1:67:8c:ab:ac:01: 6d:c7:de:62:ac:39:da:7a:4a:5b:f4:0a:8d:8e:4d: 2d:85:65:12:c5:73:3e:02:e4:af:b4:b7:98:a9:ad: 1e:6c:53:e0:a6:ad:6f:8f:40:c9:ed:d2:56:33:59: 88:c2:b2:9b:c1:3f:3d:86:04:34:1c:1b:5e:74:ad: f9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:94:66:D2:D2:31:69:99:48:D0:D6:90:55:44:B5:69:37:8E:BB:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36eedd7a-6a2a-3af4-8820-99d7f3b3f059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ef:61:40:2f:7b:08:29:83:86:c8:c2:fd:6d:08:2a:7c:32: 32:10:53:b8:9d:41:55:79:f1:98:f7:4a:fc:5c:12:9c:a6:43: 76:49:fb:5f:04:f7:5c:7b:9b:e4:9b:0b:ce:d2:9d:15:6b:42: b1:bc:f5:4f:57:8c:a1:82:93:8e:c1:98:49:dd:9a:8c:ca:83: cd:0f:81:25:f9:fe:4a:6d:c5:ba:9d:62:5c:d2:4e:6c:cc:8c: cc:c8:86:c9:cd:da:49:bd:7c:f5:e2:8d:78:cc:77:bb:be:22: 9a:1f:d0:9b:ea:39:30:96:d3:90:ea:36:8b:7d:8d:62:8f:ed: a8:8b:b6:fe:6d:7d:c6:b2:57:b1:4b:53:51:b3:4a:a0:4a:f1: ad:21:36:66:f5:c7:4b:9a:dc:62:b3:59:5d:02:53:5e:82:68: 9b:81:3a:4c:94:fa:8d:36:fd:ea:db:69:4e:f7:8e:70:b1:f3: 9e:2f:ec:fc:76:f5:0f:a8:84:05:60:10:e2:e1:f9:01:d3:ee: 72:1e:38:b5:3f:ed:5d:eb:b8:5b:d7:eb:67:9d:32:4a:eb:00: 56:d5:26:8f:c9:01:95:fc:af:50:7b:f9:5e:5a:17:03:c0:4b: ca:37:35:fb:cb:4b:81:d7:49:b7:c1:c7:d6:89:37:6a:3b:a2: 9d:d2:78:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ew8fZPuvhb3gioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk YTgzOWY5YTAtOTVmNS00NTYxLWE1MjctYWVjNGQ3ZjQ4NGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3ZGGLQXtpjOIBwH3St4jgKEXJzrgyMP/Ea4 kmWtlWzWm3zlc2Ca0xCS2mEg9ZssdtBt/vJaGXtF0wEkrSCBqQ7G8uQi867RwQOs 4aGZV/1BsFXX1EqoGOF4k1er2r5lKBG+RhDTCQR3C051FLgL6xUHJ/1qzi5cOGOU MISjIyn/TMB6OFYEzNaD/tdIFVPsP4/xVBU3NuM1S1XUcYoJ/xT75ClC0DduHkRC f1U1V0hKdOVER8ULRXEOYkfRZ4yrrAFtx95irDnaekpb9AqNjk0thWUSxXM+AuSv tLeYqa0ebFPgpq1vj0DJ7dJWM1mIwrKbwT89hgQ0HBtedK35CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6UZtLSMWmZSNDWkFVEtWk3jrswMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzZlZWRkN2EtNmEyYS0z YWY0LTg4MjAtOTlkN2YzYjNmMDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFytAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/vYUAvewgpg4bIwv1tCCp8MjIQU7idQVV58Zj3SvxcEpymQ3ZJ+18E 91x7m+SbC87SnRVrQrG89U9XjKGCk47BmEndmozKg80PgSX5/kptxbqdYlzSTmzM jMzIhsnN2km9fPXijXjMd7u+Ipof0JvqOTCW05DqNot9jWKP7aiLtv5tfcayV7FL U1GzSqBK8a0hNmb1x0ua3GKzWV0CU16CaJuBOkyU+o02/erbaU73jnCx854v7Px2 9Q+ohAVgEOLh+QHT7nIeOLU/7V3ruFvX62edMkrrAFbVJo/JAZX8r1B7+V5aFwPA S8o3NfvLS4HXSbfBx9aJN2o7op3SeDc= -----END CERTIFICATE-----Generated at Sun Jun 29 13:49:52 2025 by rpki-client