$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54964a1e-02f6-37d3-ab6c-6136a6b8c410.roa File: 54964a1e-02f6-37d3-ab6c-6136a6b8c410.roa (raw, json) Hash identifier: OqmuzTp1fLDfZ9ajbNgjRILQ7OT+kCCWcE2HVQ81Azs= Subject key identifier: 24:28:84:6E:0A:AA:EF:C1:66:8F:15:F1:46:69:3C:A6:07:E3:5C:8A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A159E01D9A124C520405B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54964a1e-02f6-37d3-ab6c-6136a6b8c410.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.36.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:9e:01:d9:a1:24:c5:20:40:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=4cce9dfb-44c3-4c17-8291-3ab7c4b60cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3c:87:7e:7e:b2:10:b4:ca:ea:4e:43:9c:c5: 59:2f:86:60:d7:18:f6:39:21:b3:cb:96:7d:64:31: e3:68:3f:43:2e:6b:3c:55:3a:22:7d:21:d0:03:ef: ea:84:78:5b:0c:83:7d:48:e9:af:64:96:55:ef:27: bc:f6:2b:64:53:ac:db:02:c6:76:13:ad:11:fe:6b: 3b:db:72:45:63:d9:56:97:a0:1c:08:a8:91:1e:6b: 05:54:fa:e8:16:26:bf:ed:28:84:c8:79:1a:29:8e: b9:ae:53:e2:2f:47:40:f6:8b:b7:4f:1b:98:55:80: d5:60:bc:37:81:21:b5:76:e0:e0:91:fa:a3:86:d0: 45:86:37:1d:ff:aa:58:79:42:ad:63:48:ba:3b:01: 88:4f:35:0c:49:73:f8:2f:84:3a:4c:9b:33:f5:92: df:71:32:c2:98:0e:9d:05:a0:ba:b6:00:e7:0e:c5: 6d:d2:51:48:47:2e:62:77:b2:03:2b:f5:30:1d:08: 9d:bd:d6:10:c9:a3:d3:35:8d:30:87:d4:ce:57:0f: c2:ba:5b:ca:af:79:96:96:a1:78:51:36:e9:07:28: 76:97:7f:90:15:6b:44:ec:2c:96:cb:74:57:82:c4: 5e:80:83:30:b1:f2:f4:32:d2:dd:11:e2:af:d8:02: c8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:28:84:6E:0A:AA:EF:C1:66:8F:15:F1:46:69:3C:A6:07:E3:5C:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54964a1e-02f6-37d3-ab6c-6136a6b8c410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:77:f8:13:5d:c7:fd:f8:82:d3:19:d3:f8:66:10:2f:6c:cf: 64:30:37:2a:16:98:58:c8:23:de:1e:7f:4e:99:35:26:a2:c7: 4d:48:82:a9:af:a8:d5:03:84:6a:9c:1c:8a:8b:42:d4:f7:9e: 66:5f:22:50:6c:33:64:cb:72:7b:87:3d:b7:6d:b8:3b:fc:fa: 89:ed:37:f6:2c:b3:c2:64:be:78:58:4f:48:85:e0:65:c4:77: f3:ed:ee:25:e0:43:ad:8d:63:91:e6:b5:41:6f:39:6c:d8:ec: 70:6c:28:78:b9:a6:4c:19:56:50:20:5f:67:b1:9f:47:f7:72: b3:81:c7:e2:e6:17:f2:72:bf:ab:8d:5c:b6:85:c0:9b:84:1e: f6:a6:6e:51:5f:88:5d:39:fc:a7:ec:c6:bf:f8:7e:85:3b:47: 84:7d:62:6d:44:a0:a2:6c:91:ba:23:59:10:f5:3e:4a:09:77: 63:d4:f3:2f:e2:2c:6c:60:fe:f4:93:ff:68:f1:5c:16:8d:e8: 30:03:1f:c2:57:1e:8b:e8:9d:0d:fc:b2:ac:2b:2c:1e:c1:1f: 76:4c:09:23:90:17:cd:4e:1b:ec:f2:af:1c:6b:8c:fe:d2:10: 1a:6c:2f:49:fa:bc:42:7e:8a:cc:f5:c9:e6:29:f1:dd:df:c2: 01:38:94:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZ4B2aEkxSBAW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk NGNjZTlkZmItNDRjMy00YzE3LTgyOTEtM2FiN2M0YjYwY2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTyHfn6yELTK6k5DnMVZL4Zg1xj2OSGzy5Z9 ZDHjaD9DLms8VToifSHQA+/qhHhbDIN9SOmvZJZV7ye89itkU6zbAsZ2E60R/ms7 23JFY9lWl6AcCKiRHmsFVProFia/7SiEyHkaKY65rlPiL0dA9ou3TxuYVYDVYLw3 gSG1duDgkfqjhtBFhjcd/6pYeUKtY0i6OwGITzUMSXP4L4Q6TJsz9ZLfcTLCmA6d BaC6tgDnDsVt0lFIRy5id7IDK/UwHQidvdYQyaPTNY0wh9TOVw/CulvKr3mWlqF4 UTbpByh2l3+QFWtE7CyWy3RXgsRegIMwsfL0MtLdEeKv2ALIYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQohG4Kqu/BZo8V8UZpPKYH41yKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTQ5NjRhMWUtMDJmNi0z N2QzLWFiNmMtNjEzNmE2YjhjNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyQ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABR3+BNdx/34gtMZ0/hmEC9sz2QwNyoWmFjII94ef06ZNSaix01Igqmv qNUDhGqcHIqLQtT3nmZfIlBsM2TLcnuHPbdtuDv8+ontN/Yss8JkvnhYT0iF4GXE d/Pt7iXgQ62NY5HmtUFvOWzY7HBsKHi5pkwZVlAgX2exn0f3crOBx+LmF/Jyv6uN XLaFwJuEHvamblFfiF05/Kfsxr/4foU7R4R9Ym1EoKJskbojWRD1PkoJd2PU8y/i LGxg/vST/2jxXBaN6DADH8JXHovonQ38sqwrLB7BH3ZMCSOQF81OG+zyrxxrjP7S EBpsL0n6vEJ+isz1yeYp8d3fwgE4lEo= -----END CERTIFICATE-----Generated at Sun Jun 29 19:14:17 2025 by rpki-client