$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/468310fa-4bbd-301a-80f7-e065d0bbbe47.roa File: 468310fa-4bbd-301a-80f7-e065d0bbbe47.roa (raw, json) Hash identifier: 9VH5nWwcRLHhPfUGK7mesiIEj/I8hFKZPe4TmpiR3W8= Subject key identifier: BF:20:18:BD:1B:72:5D:A9:DF:E0:AC:8A:E2:CE:48:A6:53:2F:68:93 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A15A23F1921B9803AD22D70 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/468310fa-4bbd-301a-80f7-e065d0bbbe47.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.39.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:a2:3f:19:21:b9:80:3a:d2:2d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=8f4d4896-a2af-4dbc-a05e-a48a4cce53de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:13:ce:ef:07:d2:5c:be:93:f1:46:eb:a4:25: c6:cb:0e:cf:c3:4c:f0:2c:41:29:d8:23:87:5e:72: e5:44:b4:fe:63:98:21:06:67:54:0b:0b:5d:f7:fe: b6:e8:72:e6:92:f8:26:53:5b:80:e4:41:e3:33:4a: 91:44:c6:a5:41:48:9d:ac:f9:a2:8e:71:02:51:82: e9:b7:cb:15:b6:be:c0:9e:3e:05:c5:23:18:68:c5: 48:96:1b:38:79:26:87:ec:a9:e5:07:8c:ca:6d:0c: c7:56:65:e7:3e:13:69:c7:06:b9:45:25:15:98:50: ec:b9:af:24:7a:44:a0:ba:c8:d5:65:2e:7f:97:ac: 74:fe:04:ba:bd:47:96:84:e5:6e:f3:e5:cd:03:c1: 05:26:7c:c4:05:4f:ab:69:e2:10:8e:38:51:93:73: 5f:f4:1f:46:36:ec:44:19:99:d0:a4:2a:73:85:d9: 84:26:aa:95:46:66:ae:04:e2:ff:31:c2:26:5d:f9: c1:d1:84:32:cc:bd:d3:45:7d:8e:c2:68:bb:24:e4: bc:9c:7f:93:6e:10:17:92:6f:7f:7c:27:22:e4:5d: 6a:68:e9:81:bd:6e:11:76:30:56:8f:3b:d5:15:ef: 48:bd:04:56:6e:df:d5:af:74:4b:4e:e8:c2:25:5e: ce:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:20:18:BD:1B:72:5D:A9:DF:E0:AC:8A:E2:CE:48:A6:53:2F:68:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/468310fa-4bbd-301a-80f7-e065d0bbbe47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:4e:ce:b5:c4:6b:38:0d:2a:b5:4f:06:f6:f4:d1:74:fc:3b: 0e:c2:7d:c6:1d:18:fc:3a:68:5e:c1:7f:a8:e8:87:cd:ca:a7: c8:16:07:f7:9b:b2:59:be:2b:23:c6:f3:92:b0:f3:17:72:42: 8a:b2:8b:d8:27:85:65:ef:6f:4d:1d:a2:8c:1f:2f:9d:cf:07: 4e:dc:ab:94:7f:73:d9:a9:11:18:2d:8a:a3:f9:8a:48:4a:30: 60:12:fa:10:cb:03:e2:f4:3c:f9:49:e8:a0:a7:d9:d0:3b:e8: 02:b3:0b:d0:62:da:49:47:31:c0:62:28:61:33:34:7e:52:03: 60:96:33:cb:4f:e2:d4:37:75:ba:ef:d0:37:27:57:99:c2:6f: ea:61:ef:75:17:b9:3d:53:99:f0:0f:88:6f:32:8c:aa:04:50: 8a:a4:08:a4:42:b8:a2:80:1c:95:3a:bb:5f:51:af:a8:97:7f: 57:2d:18:91:10:99:75:4e:ab:e9:ae:93:0c:4b:e8:b2:49:0a: 93:b0:33:c8:97:a5:59:8d:a6:ef:28:8f:c3:97:0d:fd:e9:46: 11:3f:3d:f3:e8:41:26:1d:a8:93:ab:b6:93:79:89:26:9d:b0: a1:e8:89:73:2a:7d:16:42:8f:49:13:dc:c7:d4:d0:bc:4e:80: 7b:93:0e:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FaI/GSG5gDrSLXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk OGY0ZDQ4OTYtYTJhZi00ZGJjLWEwNWUtYTQ4YTRjY2U1M2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hPO7wfSXL6T8UbrpCXGyw7Pw0zwLEEp2COH XnLlRLT+Y5ghBmdUCwtd9/626HLmkvgmU1uA5EHjM0qRRMalQUidrPmijnECUYLp t8sVtr7Anj4FxSMYaMVIlhs4eSaH7KnlB4zKbQzHVmXnPhNpxwa5RSUVmFDsua8k ekSgusjVZS5/l6x0/gS6vUeWhOVu8+XNA8EFJnzEBU+raeIQjjhRk3Nf9B9GNuxE GZnQpCpzhdmEJqqVRmauBOL/McImXfnB0YQyzL3TRX2Owmi7JOS8nH+TbhAXkm9/ fCci5F1qaOmBvW4RdjBWjzvVFe9IvQRWbt/Vr3RLTujCJV7OewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8gGL0bcl2p3+CsiuLOSKZTL2iTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDY4MzEwZmEtNGJiZC0z MDFhLTgwZjctZTA2NWQwYmJiZTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyeYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdOzrXEazgNKrVPBvb00XT8Ow7CfcYdGPw6aF7Bf6joh83Kp8gWB/eb slm+KyPG85Kw8xdyQoqyi9gnhWXvb00doowfL53PB07cq5R/c9mpERgtiqP5ikhK MGAS+hDLA+L0PPlJ6KCn2dA76AKzC9Bi2klHMcBiKGEzNH5SA2CWM8tP4tQ3dbrv 0DcnV5nCb+ph73UXuT1TmfAPiG8yjKoEUIqkCKRCuKKAHJU6u19Rr6iXf1ctGJEQ mXVOq+mukwxL6LJJCpOwM8iXpVmNpu8oj8OXDf3pRhE/PfPoQSYdqJOrtpN5iSad sKHoiXMqfRZCj0kT3MfU0LxOgHuTDio= -----END CERTIFICATE-----Generated at Sun Jun 29 13:40:26 2025 by rpki-client