$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85dfce11-36ca-3a7a-90b9-547a70fc3c55.roa File: 85dfce11-36ca-3a7a-90b9-547a70fc3c55.roa (raw, json) Hash identifier: 8KDL2CFxkUqWHVQkXbO3Mwlk91MJK0DvhaEw3FaGIvY= Subject key identifier: 14:70:6E:84:B5:74:48:D6:F1:88:90:6D:2C:7D:F5:9C:1A:8E:1B:31 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A15A20FF8E1C7855A779280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85dfce11-36ca-3a7a-90b9-547a70fc3c55.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.39.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:a2:0f:f8:e1:c7:85:5a:77:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=3de7e747-7ad8-4423-a585-5f4224ef65fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:33:c9:b5:a0:0e:f7:cc:0b:0f:5b:d7:e7:c8: 20:f5:63:6d:b1:aa:d5:ac:c9:dc:8b:b8:93:4b:b5: b6:37:65:05:98:f1:39:10:6d:3e:0e:bd:fd:ad:dc: a5:c5:64:1e:4a:a6:87:04:44:0f:6b:87:b4:d2:07: 67:41:e4:7d:1a:1b:a3:7f:58:1c:7e:99:18:a1:fe: a5:8d:c9:16:59:66:26:0f:0e:45:9d:3a:ab:e3:0d: 27:18:13:46:c3:95:79:8a:8e:07:72:34:b7:47:0a: c6:2b:dd:04:7c:6d:86:04:ec:6b:92:b3:89:d8:d2: de:cf:eb:6b:1b:c0:53:44:7f:37:5a:80:32:57:ed: 64:e8:ae:e0:c2:ee:2f:e1:eb:61:80:6c:47:3e:3e: cf:3a:72:a2:c4:7c:94:92:32:e8:08:bd:3d:a6:b3: f6:1c:c1:62:c1:9d:9b:7e:d2:59:cd:76:64:40:08: 81:ea:33:52:1c:b0:82:ba:fa:c5:16:4f:c0:fd:16: a1:51:7b:07:16:5b:28:f9:aa:c1:e3:17:20:c3:b2: 63:84:94:f0:d2:42:ec:87:48:0d:68:06:78:d4:c1: 71:8f:d1:d2:01:40:d1:82:1a:3e:cb:a6:bc:a4:a7: 89:01:8d:81:f6:f3:83:2c:a0:75:41:1b:14:83:c5: ff:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:70:6E:84:B5:74:48:D6:F1:88:90:6D:2C:7D:F5:9C:1A:8E:1B:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85dfce11-36ca-3a7a-90b9-547a70fc3c55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:f5:c9:c3:db:41:e4:eb:dc:9c:7a:03:7f:90:dc:2a:b8:a4: 87:13:38:ef:03:9a:3e:b7:25:08:1c:cf:50:a0:97:89:52:53: eb:eb:25:d4:2a:0d:53:40:5d:56:61:15:0f:ca:83:4c:25:d4: a8:dc:09:b5:a4:17:93:b2:87:bf:e0:44:02:4c:04:fc:cf:8a: 0b:0e:5d:e6:60:d1:9d:cd:c8:cd:60:42:95:5c:44:6f:93:7a: f8:c8:62:04:61:a3:85:e1:a5:9c:34:23:fd:80:f7:36:9d:8f: dd:bb:66:08:c6:fc:22:4a:4a:94:78:79:32:8f:1e:73:47:d6: 83:e0:db:f6:c5:d7:b5:06:f3:21:e9:0a:41:31:65:54:8b:1d: 7b:b6:ed:21:6f:e6:1b:df:17:d5:22:95:64:73:ab:c7:ea:ab: f4:05:d2:e2:0c:d3:75:b5:6b:e1:7f:22:9e:b3:da:8f:95:d1: d4:5c:ac:42:e3:f8:01:2c:2a:de:b4:fd:09:8e:55:3a:0f:cf: 09:15:78:b2:71:b1:ec:6a:a6:90:e3:dd:68:eb:8c:ab:e2:2f: ab:62:bb:57:fd:f1:59:83:9f:2d:9f:17:d9:49:cd:34:c0:fd: ea:04:a0:2f:62:84:86:90:39:9b:6e:df:53:24:23:4a:cb:e6: f1:cb:34:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FaIP+OHHhVp3koAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk M2RlN2U3NDctN2FkOC00NDIzLWE1ODUtNWY0MjI0ZWY2NWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzPJtaAO98wLD1vX58gg9WNtsarVrMnci7iT S7W2N2UFmPE5EG0+Dr39rdylxWQeSqaHBEQPa4e00gdnQeR9Ghujf1gcfpkYof6l jckWWWYmDw5FnTqr4w0nGBNGw5V5io4HcjS3RwrGK90EfG2GBOxrkrOJ2NLez+tr G8BTRH83WoAyV+1k6K7gwu4v4ethgGxHPj7POnKixHyUkjLoCL09prP2HMFiwZ2b ftJZzXZkQAiB6jNSHLCCuvrFFk/A/RahUXsHFlso+arB4xcgw7JjhJTw0kLsh0gN aAZ41MFxj9HSAUDRgho+y6a8pKeJAY2B9vODLKB1QRsUg8X/awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRwboS1dEjW8YiQbSx99ZwajhsxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODVkZmNlMTEtMzZjYS0z YTdhLTkwYjktNTQ3YTcwZmMzYzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFydoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACX1ycPbQeTr3Jx6A3+Q3Cq4pIcTOO8Dmj63JQgcz1Cgl4lSU+vrJdQq DVNAXVZhFQ/Kg0wl1KjcCbWkF5Oyh7/gRAJMBPzPigsOXeZg0Z3NyM1gQpVcRG+T evjIYgRho4XhpZw0I/2A9zadj927ZgjG/CJKSpR4eTKPHnNH1oPg2/bF17UG8yHp CkExZVSLHXu27SFv5hvfF9UilWRzq8fqq/QF0uIM03W1a+F/Ip6z2o+V0dRcrELj +AEsKt60/QmOVToPzwkVeLJxsexqppDj3WjrjKviL6tiu1f98VmDny2fF9lJzTTA /eoEoC9ihIaQOZtu31MkI0rL5vHLNM8= -----END CERTIFICATE-----Generated at Sun Jun 29 17:50:03 2025 by rpki-client