$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ddb15ef-d8a8-3728-a764-4dca8b9260f4.roa File: 3ddb15ef-d8a8-3728-a764-4dca8b9260f4.roa (raw, json) Hash identifier: vvDckrJeg+mRQhTkswhsKyN3eWHSgs6RcW/wxllcUmE= Subject key identifier: 56:CC:F4:46:AA:23:77:B1:1C:CD:35:CB:34:9F:5C:DD:A9:05:85:E1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A159823AB97B035F5DC6D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ddb15ef-d8a8-3728-a764-4dca8b9260f4.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.39.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:98:23:ab:97:b0:35:f5:dc:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=63910449-4e6f-495a-9768-4a161914a4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:be:72:98:cf:7c:f0:c4:56:91:39:2a:b8:4f: 1c:f2:87:d1:ec:c0:87:1c:8b:c3:5a:56:00:b4:1c: 53:dc:de:e4:fb:f8:49:63:7c:bd:23:ff:26:90:fe: ec:9d:30:81:b7:37:53:65:14:52:e6:e6:70:42:4c: 3c:98:9b:ab:7e:e5:b4:9b:97:c1:ef:73:9a:a8:fc: 8e:21:7c:3f:0e:42:e8:41:68:06:98:7c:90:09:80: 2f:cf:2b:2d:15:4a:cb:3d:9c:43:84:4f:02:b1:07: e9:73:88:44:c9:41:7b:1f:56:ad:49:b5:05:25:c4: 02:16:5f:01:c0:39:03:11:1c:eb:1f:51:0c:1b:55: 9b:d6:11:eb:08:94:79:2f:26:66:90:c9:67:f9:5c: f2:e8:e1:de:50:68:9a:de:ce:a3:b8:ac:6d:bf:27: 2a:1b:1d:09:22:63:29:9e:aa:57:24:08:9d:2b:e2: 4e:39:40:9f:60:5d:24:a2:05:53:e9:d8:44:3b:88: 5a:77:94:83:8c:8d:0b:3b:e9:90:fe:28:49:a6:c8: 6d:67:52:61:5e:eb:2d:cd:72:cb:49:6f:fa:ef:d6: b4:18:f2:7c:c4:f9:ae:dd:bd:ac:89:31:47:7b:61: 46:d9:d7:38:5b:41:42:7a:43:2f:c1:57:95:1a:c0: 60:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CC:F4:46:AA:23:77:B1:1C:CD:35:CB:34:9F:5C:DD:A9:05:85:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ddb15ef-d8a8-3728-a764-4dca8b9260f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ef:f5:e9:58:88:a0:6c:f5:b0:2e:64:b3:25:85:c6:ac:9e: 5e:c1:fd:e4:50:70:2e:82:18:8c:61:d1:be:c7:ec:0a:7d:cb: f8:f0:bc:a5:05:c8:f1:4a:16:8e:e5:c6:7d:da:d0:b2:7e:ea: dc:35:0c:3c:04:4e:1d:78:91:f1:9f:1c:0d:22:37:64:74:2b: 75:11:0e:6d:8e:59:e8:3c:a1:c6:ac:d6:78:02:86:de:0b:b7: 8f:34:87:9a:4e:51:28:7b:b9:e5:98:a2:8b:e5:66:c5:aa:3d: 18:e2:23:32:82:11:14:af:c6:aa:17:f9:df:88:da:45:66:3d: 67:2a:03:a3:ca:80:25:61:e3:e3:a8:cf:58:eb:83:6a:ee:64: 9d:43:b5:87:65:c8:37:74:a5:e6:e8:05:34:f7:c9:33:8c:66: 8d:3f:0d:cf:db:68:10:8e:53:0c:f1:71:51:eb:32:28:49:d8: 9b:0f:a4:3f:9c:48:bb:3f:37:f2:01:83:61:49:9e:99:cb:47: 3e:4f:92:7d:e7:a0:60:e0:25:c1:57:78:99:56:1a:7b:30:93: 08:94:c7:5d:4d:5d:c4:da:8b:09:38:35:63:06:cb:54:33:4d: 63:79:3e:bf:cd:1f:b1:9e:93:56:04:66:e0:e9:aa:3e:a6:f3: 3b:ba:9d:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZgjq5ewNfXcbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk NjM5MTA0NDktNGU2Zi00OTVhLTk3NjgtNGExNjE5MTRhNGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt75ymM988MRWkTkquE8c8ofR7MCHHIvDWlYA tBxT3N7k+/hJY3y9I/8mkP7snTCBtzdTZRRS5uZwQkw8mJurfuW0m5fB73OaqPyO IXw/DkLoQWgGmHyQCYAvzystFUrLPZxDhE8CsQfpc4hEyUF7H1atSbUFJcQCFl8B wDkDERzrH1EMG1Wb1hHrCJR5LyZmkMln+Vzy6OHeUGia3s6juKxtvycqGx0JImMp nqpXJAidK+JOOUCfYF0kogVT6dhEO4had5SDjI0LO+mQ/ihJpshtZ1JhXustzXLL SW/679a0GPJ8xPmu3b2siTFHe2FG2dc4W0FCekMvwVeVGsBgwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbM9EaqI3exHM01yzSfXN2pBYXhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2RkYjE1ZWYtZDhhOC0z NzI4LWE3NjQtNGRjYThiOTI2MGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3v9elYiKBs9bAuZLMlhcasnl7B/eRQcC6CGIxh0b7H7Ap9y/jwvKUF yPFKFo7lxn3a0LJ+6tw1DDwETh14kfGfHA0iN2R0K3URDm2OWeg8ocas1ngCht4L t480h5pOUSh7ueWYoovlZsWqPRjiIzKCERSvxqoX+d+I2kVmPWcqA6PKgCVh4+Oo z1jrg2ruZJ1DtYdlyDd0peboBTT3yTOMZo0/Dc/baBCOUwzxcVHrMihJ2JsPpD+c SLs/N/IBg2FJnpnLRz5Pkn3noGDgJcFXeJlWGnswkwiUx11NXcTaiwk4NWMGy1Qz TWN5Pr/NH7Gek1YEZuDpqj6m8zu6ncM= -----END CERTIFICATE-----Generated at Sun Jun 29 19:31:25 2025 by rpki-client