$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e5db3fd-4a60-31ea-8c5e-3cfe243ef05b.roa File: 8e5db3fd-4a60-31ea-8c5e-3cfe243ef05b.roa (raw, json) Hash identifier: rTHH/zzcq8o5XuOCEXVKyPE9OFXwRRH2JsU0EU8XJO8= Subject key identifier: 4B:92:10:46:49:2C:C6:1E:42:9C:82:BE:48:43:FF:90:2C:AF:53:66 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A15A0F46A0A5760CF5DCB10 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e5db3fd-4a60-31ea-8c5e-3cfe243ef05b.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.38.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:a0:f4:6a:0a:57:60:cf:5d:cb:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=96b959dd-f6e7-4408-b72b-6c531f64e995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1e:01:a5:7d:0a:5a:ce:f3:f1:6e:08:f4:8b: 8d:bd:71:a4:4f:79:1e:fa:69:8d:0f:08:d1:75:7c: e6:62:22:f0:55:57:e3:1b:7a:58:d1:de:70:a6:f3: d5:f3:a0:7a:f0:75:99:ff:2d:1e:96:77:3a:c5:36: 7b:55:9e:7b:3d:06:de:da:d1:8e:ae:a0:f3:8c:d9: 60:76:75:d0:24:68:df:61:d7:c5:c3:32:09:92:dc: 41:34:6d:9a:5a:01:21:0d:24:a0:dc:a8:18:5a:c8: 89:23:22:37:e1:52:40:c4:a9:ed:71:02:5a:21:38: f1:5c:e8:58:8a:bb:8c:1e:19:f5:f9:9d:0b:52:72: c5:f4:e7:f2:a3:68:ec:ba:c0:d2:17:eb:6c:50:62: 8e:bf:b2:9d:8e:e6:48:ff:51:79:c5:c6:3b:b7:f8: bf:f2:5e:06:6b:d7:5c:2a:60:39:0b:9b:17:4b:d1: 95:cb:f6:c0:c0:bf:1f:51:a1:4c:58:ad:35:0d:8a: 41:8d:3f:55:ac:e7:f9:b5:93:a6:fc:2d:7b:ca:03: 51:01:20:63:48:95:1c:63:1d:39:05:98:a9:fd:b8: 6e:54:6f:ed:58:1a:7a:2b:fe:c8:ab:29:92:f2:8b: 50:86:60:25:b6:da:47:86:5e:49:f1:7e:58:c6:1a: e5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:92:10:46:49:2C:C6:1E:42:9C:82:BE:48:43:FF:90:2C:AF:53:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e5db3fd-4a60-31ea-8c5e-3cfe243ef05b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:72:ca:30:e3:7c:5e:65:e1:48:86:74:e6:58:ac:9c:65:f4: 44:33:f4:fe:bd:95:e4:32:6f:49:c9:fd:b0:1f:37:f8:cb:97: cd:75:ca:b4:c5:fe:f2:f5:c4:e7:a9:f1:96:34:2c:6c:80:97: f9:b6:a4:c4:32:27:2e:7e:21:5d:39:c4:7d:d6:12:26:17:07: b0:5c:91:54:7f:8c:1c:33:8b:e4:3c:f2:79:5a:57:83:b2:06: 46:7c:02:13:3d:fc:74:6f:c0:c7:49:1d:7a:bc:54:ab:9b:c4: 88:f9:a1:20:d9:b9:5c:d6:c5:af:6e:d8:e4:85:a1:1a:4b:1a: 49:db:bd:ef:9b:9d:a5:ef:b8:e6:37:60:07:80:a3:b9:cc:5e: b5:40:3a:bc:5d:4a:08:84:3d:9d:77:1f:4d:8b:39:db:66:e4: 88:6a:f9:e0:f0:06:97:ca:57:c8:6a:4f:7d:aa:9e:d6:6b:e7: 21:37:dd:f4:d3:9b:3b:29:ee:f0:53:40:bf:22:c2:92:95:32: 80:b2:5a:2f:24:32:e5:5a:d7:d4:d7:ac:88:ec:2c:64:53:fd: 35:5c:97:70:49:ac:1b:ff:b9:15:14:f9:55:4c:5d:c1:97:85: 61:a7:ec:2a:71:bc:ca:6f:06:e1:69:0f:6e:15:3b:7e:27:33: f3:ba:2d:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FaD0agpXYM9dyxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk OTZiOTU5ZGQtZjZlNy00NDA4LWI3MmItNmM1MzFmNjRlOTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx4BpX0KWs7z8W4I9IuNvXGkT3ke+mmNDwjR dXzmYiLwVVfjG3pY0d5wpvPV86B68HWZ/y0elnc6xTZ7VZ57PQbe2tGOrqDzjNlg dnXQJGjfYdfFwzIJktxBNG2aWgEhDSSg3KgYWsiJIyI34VJAxKntcQJaITjxXOhY iruMHhn1+Z0LUnLF9Ofyo2jsusDSF+tsUGKOv7KdjuZI/1F5xcY7t/i/8l4Ga9dc KmA5C5sXS9GVy/bAwL8fUaFMWK01DYpBjT9VrOf5tZOm/C17ygNRASBjSJUcYx05 BZip/bhuVG/tWBp6K/7IqymS8otQhmAlttpHhl5J8X5YxhrluwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuSEEZJLMYeQpyCvkhD/5Asr1NmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGU1ZGIzZmQtNGE2MC0z MWVhLThjNWUtM2NmZTI0M2VmMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyZtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFyyjDjfF5l4UiGdOZYrJxl9EQz9P69leQyb0nJ/bAfN/jLl811yrTF /vL1xOep8ZY0LGyAl/m2pMQyJy5+IV05xH3WEiYXB7BckVR/jBwzi+Q88nlaV4Oy BkZ8AhM9/HRvwMdJHXq8VKubxIj5oSDZuVzWxa9u2OSFoRpLGknbve+bnaXvuOY3 YAeAo7nMXrVAOrxdSgiEPZ13H02LOdtm5Ihq+eDwBpfKV8hqT32qntZr5yE33fTT mzsp7vBTQL8iwpKVMoCyWi8kMuVa19TXrIjsLGRT/TVcl3BJrBv/uRUU+VVMXcGX hWGn7CpxvMpvBuFpD24VO34nM/O6LVQ= -----END CERTIFICATE-----Generated at Sun Jun 29 14:07:03 2025 by rpki-client