$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f385ea2-7bfe-3dda-98c6-d04099e4ab09.roa File: 3f385ea2-7bfe-3dda-98c6-d04099e4ab09.roa (raw, json) Hash identifier: 3CnNGOzo59wfTQMQFDe3WwkKVwbjzCCaEIln0ngVwrk= Subject key identifier: 3D:8B:DD:9A:91:20:64:B8:CF:50:5D:B8:F4:84:1C:93:A1:A7:73:50 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A159E0FE6E59A7E00E56488 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f385ea2-7bfe-3dda-98c6-d04099e4ab09.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.36.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:9e:0f:e6:e5:9a:7e:00:e5:64:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=bd2d2fe8-e0ba-4f0f-a493-262d745b2b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6b:b9:40:d7:b5:46:30:a7:af:2c:5e:d5:e3: 49:97:e7:80:b6:2e:13:00:5c:90:c9:62:19:e4:7c: 8e:6b:0e:b7:1a:02:f7:1b:e4:e3:55:fd:a2:d2:b6: 61:97:b0:d2:db:80:b0:84:1b:f7:2b:b0:1b:44:d7: 4f:88:7d:fa:70:09:f1:78:86:93:09:74:97:6a:2d: d8:51:e2:77:82:d1:f0:85:7b:e1:87:2f:61:8f:94: 26:ab:fe:5c:47:e5:99:4e:e2:5e:25:9a:1c:c5:ec: e4:ea:96:7d:82:16:d4:3f:a8:28:63:80:13:e8:23: ea:10:2e:5f:7e:04:6b:b5:c3:c6:59:0b:32:6b:6f: be:1a:36:a8:51:81:e6:46:50:4d:32:5c:81:0f:25: d2:ff:19:40:56:07:ad:10:4b:18:59:94:f5:09:7b: c9:78:7c:8d:33:a4:48:cd:e8:ac:94:79:b2:7d:31: 6b:dd:29:32:d9:61:6c:38:6b:07:cc:9e:76:7d:01: e0:a3:ca:ce:ab:92:68:ed:92:ee:67:29:5f:e8:6c: 61:1e:39:15:68:84:ba:21:03:37:b9:79:3c:f0:c6: 51:0c:9c:31:c8:da:c3:61:bf:2e:3d:23:29:db:dd: 88:c8:92:46:38:30:3f:09:93:4c:6d:bf:00:c3:96: 49:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8B:DD:9A:91:20:64:B8:CF:50:5D:B8:F4:84:1C:93:A1:A7:73:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f385ea2-7bfe-3dda-98c6-d04099e4ab09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:a9:71:52:d7:81:84:39:1c:5b:53:22:85:35:3c:dc:5e:90: 65:54:c4:68:51:d7:53:32:7e:4c:2c:80:10:5c:f8:cd:17:f3: e8:d3:4e:67:fd:52:dc:74:4a:e5:29:e3:e5:5a:75:b6:7d:b3: 2a:41:54:6f:25:ed:30:1c:fb:34:e2:73:53:ba:83:1c:a7:09: ac:7c:21:f6:eb:d5:dd:8c:10:01:db:a5:7f:74:c3:a7:57:70: 97:1e:4e:4e:30:94:b7:34:fa:8b:45:59:0a:63:9e:14:81:0a: 34:34:20:b8:e4:39:97:07:f4:30:7c:78:43:05:44:c4:bf:af: c9:f0:9c:80:c1:0f:e7:46:a9:bf:5a:c0:9d:23:a5:a5:1d:91: 43:ee:1b:a0:3e:85:c9:6a:e7:0a:2c:03:5a:42:df:6a:91:4e: 4e:50:d4:d3:0f:9e:e4:ae:85:b2:8d:45:fb:bb:4d:08:d1:29: a2:6d:f9:a0:9d:96:c3:04:76:77:23:e9:d8:8a:da:c2:89:d1: 0c:4e:20:19:3a:70:1e:26:89:73:9f:2a:ad:c9:ed:ed:ea:05: fd:33:fd:8b:e9:d2:9e:94:e9:9b:e5:b9:59:00:88:2e:12:64: 68:35:18:41:5f:55:7a:02:a9:b7:8c:4f:92:8f:ff:fb:2f:c0: cb:7f:46:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZ4P5uWafgDlZIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk YmQyZDJmZTgtZTBiYS00ZjBmLWE0OTMtMjYyZDc0NWIyYjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWu5QNe1RjCnryxe1eNJl+eAti4TAFyQyWIZ 5HyOaw63GgL3G+TjVf2i0rZhl7DS24CwhBv3K7AbRNdPiH36cAnxeIaTCXSXai3Y UeJ3gtHwhXvhhy9hj5Qmq/5cR+WZTuJeJZocxezk6pZ9ghbUP6goY4AT6CPqEC5f fgRrtcPGWQsya2++GjaoUYHmRlBNMlyBDyXS/xlAVgetEEsYWZT1CXvJeHyNM6RI zeislHmyfTFr3Sky2WFsOGsHzJ52fQHgo8rOq5Jo7ZLuZylf6GxhHjkVaIS6IQM3 uXk88MZRDJwxyNrDYb8uPSMp292IyJJGODA/CZNMbb8Aw5ZJbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2L3ZqRIGS4z1BduPSEHJOhp3NQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2YzODVlYTItN2JmZS0z ZGRhLTk4YzYtZDA0MDk5ZTRhYjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyRDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHypcVLXgYQ5HFtTIoU1PNxekGVUxGhR11MyfkwsgBBc+M0X8+jTTmf9 Utx0SuUp4+VadbZ9sypBVG8l7TAc+zTic1O6gxynCax8Ifbr1d2MEAHbpX90w6dX cJceTk4wlLc0+otFWQpjnhSBCjQ0ILjkOZcH9DB8eEMFRMS/r8nwnIDBD+dGqb9a wJ0jpaUdkUPuG6A+hclq5wosA1pC32qRTk5Q1NMPnuSuhbKNRfu7TQjRKaJt+aCd lsMEdncj6diK2sKJ0QxOIBk6cB4miXOfKq3J7e3qBf0z/Yvp0p6U6ZvluVkAiC4S ZGg1GEFfVXoCqbeMT5KP//svwMt/Rg4= -----END CERTIFICATE-----Generated at Sun Jun 29 13:40:00 2025 by rpki-client