$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37da6aff-f094-3195-84a5-f5f5b5e7279c.roa File: 37da6aff-f094-3195-84a5-f5f5b5e7279c.roa (raw, json) Hash identifier: R9u6OplMwubGlF1GxkneKwsPwX+q58DGHlQU3c1N9UY= Subject key identifier: 01:7B:EE:B1:26:0E:17:AA:D1:B9:9F:90:41:AE:B1:BA:39:0E:90:D5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A159B0C843B4408AA077B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37da6aff-f094-3195-84a5-f5f5b5e7279c.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.41.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:9b:0c:84:3b:44:08:aa:07:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=1be041f0-f0b2-45ec-8e2e-a70e450d5de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:37:16:96:fa:45:cf:ef:b1:bf:50:77:cf:72: 1e:3b:fb:91:ab:d2:ca:bd:7d:da:e7:e5:ee:60:eb: d8:f6:68:b4:a7:be:73:4a:31:cb:0f:52:35:5b:0d: 28:25:8c:c3:f2:3e:61:e8:c5:27:c0:02:c5:a8:7e: 38:b7:8a:46:56:31:bf:82:8c:98:a0:33:7e:18:02: e1:4d:6e:28:5a:65:9d:f5:fb:6d:f5:11:db:fa:c8: b0:ab:e4:56:e0:a2:ad:74:8b:bf:7e:1e:5c:72:4d: 7e:2b:d2:c3:e4:07:af:0f:28:ec:21:8f:25:a3:ae: 43:55:2c:ec:50:ff:b0:79:1e:3c:74:94:98:20:dc: 7b:1f:0e:1f:1b:a1:62:b4:83:89:d1:d0:99:33:8b: 73:7b:7e:40:bd:9c:fe:2a:39:22:9e:f4:14:cc:7f: 11:6c:9b:c7:22:ec:22:fd:8d:3a:fc:fb:54:40:3f: 55:66:9c:ff:33:1b:5a:3e:ac:d9:b5:a3:4c:54:1b: 9a:fc:a1:85:7b:c9:53:43:5c:0d:6f:d9:49:92:8c: 47:09:72:37:e6:f6:32:69:7e:dc:ae:48:1a:84:f5: f1:e2:2d:82:ad:6f:ae:d1:30:22:13:af:3d:eb:ce: 21:32:7b:88:18:ad:f9:e0:17:fa:e0:07:9d:1a:4d: 35:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7B:EE:B1:26:0E:17:AA:D1:B9:9F:90:41:AE:B1:BA:39:0E:90:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37da6aff-f094-3195-84a5-f5f5b5e7279c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:c2:a4:19:ba:5f:af:d8:0c:db:69:e9:1f:9b:b7:e1:07:fe: a1:cb:8a:8f:74:fb:91:9b:39:b5:05:b7:2f:c7:48:62:e8:5e: 98:c0:2f:a7:85:da:43:29:25:92:db:9e:14:55:2b:57:4e:85: f1:2c:dd:8b:8b:21:b3:f3:22:74:d5:db:35:aa:ee:0c:1b:11: 4f:05:00:c1:fb:15:c6:c6:af:a6:34:f8:8a:e9:1c:f1:7f:61: 52:2f:7a:d6:c1:1a:e5:33:92:59:a3:de:fc:e3:de:a0:c5:b6: d3:ab:cd:5a:f1:26:ee:e8:f1:3e:6b:fa:76:44:4a:67:26:8e: 28:93:c2:39:98:8c:90:2a:9b:f5:1c:5a:74:7d:9c:17:bd:9b: 0b:a4:f8:ea:f0:b4:96:f2:62:a3:16:6a:22:05:eb:ab:a8:da: 6e:f2:d5:ce:96:a8:3f:87:38:67:07:14:94:be:41:b3:29:d1: 21:29:28:64:3f:b2:3b:a6:7c:08:17:99:86:45:3e:69:20:a3: 1d:3a:9e:f5:9e:52:15:c6:ab:a6:ee:bf:1a:3e:f0:15:0e:1f: 65:b0:72:3d:18:87:bd:39:7f:ba:f5:4a:ea:09:8c:a0:dc:d4: e0:e7:19:a9:9c:25:b7:30:09:c6:5b:91:92:46:04:72:a1:66: 34:38:9b:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZsMhDtECKoHe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk MWJlMDQxZjAtZjBiMi00NWVjLThlMmUtYTcwZTQ1MGQ1ZGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjcWlvpFz++xv1B3z3IeO/uRq9LKvX3a5+Xu YOvY9mi0p75zSjHLD1I1Ww0oJYzD8j5h6MUnwALFqH44t4pGVjG/goyYoDN+GALh TW4oWmWd9ftt9RHb+siwq+RW4KKtdIu/fh5cck1+K9LD5AevDyjsIY8lo65DVSzs UP+weR48dJSYINx7Hw4fG6FitIOJ0dCZM4tze35AvZz+KjkinvQUzH8RbJvHIuwi /Y06/PtUQD9VZpz/MxtaPqzZtaNMVBua/KGFe8lTQ1wNb9lJkoxHCXI35vYyaX7c rkgahPXx4i2CrW+u0TAiE689684hMnuIGK354Bf64AedGk01pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAF77rEmDheq0bmfkEGusbo5DpDVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzdkYTZhZmYtZjA5NC0z MTk1LTg0YTUtZjVmNWI1ZTcyNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFymsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPCpBm6X6/YDNtp6R+bt+EH/qHLio90+5GbObUFty/HSGLoXpjAL6eF 2kMpJZLbnhRVK1dOhfEs3YuLIbPzInTV2zWq7gwbEU8FAMH7FcbGr6Y0+IrpHPF/ YVIvetbBGuUzklmj3vzj3qDFttOrzVrxJu7o8T5r+nZESmcmjiiTwjmYjJAqm/Uc WnR9nBe9mwuk+OrwtJbyYqMWaiIF66uo2m7y1c6WqD+HOGcHFJS+QbMp0SEpKGQ/ sjumfAgXmYZFPmkgox06nvWeUhXGq6buvxo+8BUOH2Wwcj0Yh705f7r1SuoJjKDc 1ODnGamcJbcwCcZbkZJGBHKhZjQ4m6Q= -----END CERTIFICATE-----Generated at Sun Jun 29 14:09:43 2025 by rpki-client