$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bb1c4dc-bd04-3699-84a2-ea113487ac4a.roa File: 3bb1c4dc-bd04-3699-84a2-ea113487ac4a.roa (raw, json) Hash identifier: rtFUqujs2Jev5o7mYxcpVltUBIASt0vf3e5D//XBnNg= Subject key identifier: D7:69:EF:ED:A6:3C:EB:CA:E7:25:79:8E:DB:40:D1:32:DF:F5:F3:5B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A43DB15AC3F414AF46B3D5380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bb1c4dc-bd04-3699-84a2-ea113487ac4a.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.53.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:15:ac:3f:41:4a:f4:6b:3d:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=cc88dad6-fa44-4005-8c26-759574d0ee63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d6:c5:19:3d:ab:07:90:ce:08:83:34:a9:02: c1:2a:90:45:f6:ae:8e:b5:2c:0c:18:2d:de:44:27: 73:db:e9:1f:93:13:6e:d9:fd:8a:43:a8:e9:99:2a: 9e:3a:b6:3b:8a:eb:f7:2b:17:95:d5:46:01:8e:a6: 22:2f:cd:41:1a:84:0d:a0:2d:f8:bc:a7:30:13:d1: 10:ed:ec:c2:36:66:64:f8:94:a9:6d:2e:06:4d:db: 6a:f4:32:2b:0e:40:b3:01:18:f5:bf:91:7f:05:17: ae:a2:68:bc:ea:bf:8d:a1:89:66:50:73:71:6e:e7: da:af:b0:75:6b:ed:fd:f9:81:86:96:bc:1a:e6:21: 4c:f7:7d:af:6d:eb:3f:41:cd:47:bf:cd:36:3d:94: 89:4c:10:85:db:c5:1c:7a:4e:91:b5:22:06:8d:24: a9:02:13:ff:cc:19:b5:58:7f:54:11:93:5c:99:f6: de:90:f5:6f:39:65:bc:2a:ea:4d:d7:8c:1a:79:41: 49:36:a4:9a:68:cc:cd:26:04:e3:ae:11:11:42:37: 2d:c3:c2:d3:90:53:ad:b0:b2:73:10:91:74:9c:04: c8:fd:b5:44:07:81:07:79:82:1f:06:3b:3b:4d:f7: 32:cf:3f:45:e2:f2:84:4a:dd:3d:02:8b:80:55:1a: 90:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:69:EF:ED:A6:3C:EB:CA:E7:25:79:8E:DB:40:D1:32:DF:F5:F3:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bb1c4dc-bd04-3699-84a2-ea113487ac4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:22:94:3c:8a:6d:b8:a1:8d:cf:58:19:67:9b:96:05:4b:5e: 5d:48:32:56:ec:97:d6:41:99:1a:76:19:7e:99:37:9b:d5:58: 72:c9:ed:e4:29:33:fd:39:4b:c6:25:44:91:7d:a3:dc:4a:cd: 61:af:70:f2:7f:11:6b:10:80:0e:34:df:c7:48:d8:da:92:2e: 4d:8a:d7:ad:d9:12:dd:70:e2:6c:f4:29:b9:a8:1d:63:f7:eb: 1e:bf:06:8a:14:c7:54:f9:98:cd:99:53:e6:bf:68:dc:be:64: 1c:f7:4b:df:b2:03:3e:4e:8a:af:3a:92:9e:df:6d:00:34:e3: 94:95:fe:cc:0a:7d:80:52:24:b3:9e:d9:d1:b9:ad:76:bc:17: f5:c4:f1:48:78:ee:9e:15:52:f9:98:3b:01:c5:37:75:6e:0b: 67:be:b1:bd:62:67:60:f9:57:08:54:a5:2b:36:3f:65:1d:1d: 51:f8:63:6c:a4:64:ef:f3:fe:7b:10:42:e9:52:cf:c6:9f:8c: d5:12:a7:79:21:9c:81:a5:36:39:df:9c:b7:3d:1c:53:a5:35: b6:3e:df:34:65:68:3f:90:c3:da:69:98:68:0c:b8:9c:f8:5b: 03:07:45:15:ee:d4:ec:34:44:a6:b0:86:52:da:6b:68:a6:ae: 5d:45:ca:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2xWsP0FK9Gs9U4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk Y2M4OGRhZDYtZmE0NC00MDA1LThjMjYtNzU5NTc0ZDBlZTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9bFGT2rB5DOCIM0qQLBKpBF9q6OtSwMGC3e RCdz2+kfkxNu2f2KQ6jpmSqeOrY7iuv3KxeV1UYBjqYiL81BGoQNoC34vKcwE9EQ 7ezCNmZk+JSpbS4GTdtq9DIrDkCzARj1v5F/BReuomi86r+NoYlmUHNxbufar7B1 a+39+YGGlrwa5iFM932vbes/Qc1Hv802PZSJTBCF28Ucek6RtSIGjSSpAhP/zBm1 WH9UEZNcmfbekPVvOWW8KupN14waeUFJNqSaaMzNJgTjrhERQjctw8LTkFOtsLJz EJF0nATI/bVEB4EHeYIfBjs7Tfcyzz9F4vKESt09AouAVRqQDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdp7+2mPOvK5yV5jttA0TLf9fNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2JiMWM0ZGMtYmQwNC0z Njk5LTg0YTItZWExMTM0ODdhYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzXxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8ilDyKbbihjc9YGWeblgVLXl1IMlbsl9ZBmRp2GX6ZN5vVWHLJ7eQp M/05S8YlRJF9o9xKzWGvcPJ/EWsQgA4038dI2NqSLk2K163ZEt1w4mz0KbmoHWP3 6x6/BooUx1T5mM2ZU+a/aNy+ZBz3S9+yAz5Oiq86kp7fbQA045SV/swKfYBSJLOe 2dG5rXa8F/XE8Uh47p4VUvmYOwHFN3VuC2e+sb1iZ2D5VwhUpSs2P2UdHVH4Y2yk ZO/z/nsQQulSz8afjNUSp3khnIGlNjnfnLc9HFOlNbY+3zRlaD+Qw9ppmGgMuJz4 WwMHRRXu1Ow0RKawhlLaa2imrl1Fyuw= -----END CERTIFICATE-----Generated at Sun Jun 29 19:26:07 2025 by rpki-client