$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f701408-9ea3-36d6-8230-ffea4ed0dd2f.roa File: 8f701408-9ea3-36d6-8230-ffea4ed0dd2f.roa (raw, json) Hash identifier: rfl5D5peuPR2/dEkf9tqm0XGYmXYth9mJYhHWba6Jxk= Subject key identifier: C4:AD:21:2D:64:6D:E9:84:D3:9E:D8:69:FB:17:3B:1E:B2:1A:9A:08 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A15A2C0A8CEC6628225AF30 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f701408-9ea3-36d6-8230-ffea4ed0dd2f.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.39.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:a2:c0:a8:ce:c6:62:82:25:af:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=8525f3c1-8378-427d-b4db-dda207e41c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:12:ae:7a:4a:e7:9d:bd:4f:05:b0:69:77:21: 45:73:01:c4:f8:d3:31:9b:80:61:fe:75:b1:e1:65: 86:39:27:66:02:7c:21:e5:94:73:32:00:6a:24:9a: c5:69:40:d5:0a:a8:3b:99:f5:6f:9b:b7:64:c7:55: fa:15:4b:02:2e:dc:ec:1e:84:0a:9c:78:14:5a:e9: eb:cc:3b:9c:1a:ab:f8:b8:ae:aa:c7:cf:95:5a:f5: 38:3b:62:8c:6f:60:7f:bf:cc:9a:27:13:90:35:a2: d8:c3:1f:0d:2d:5b:86:a5:41:19:44:0f:4d:03:32: 4f:7a:86:82:5e:e8:12:40:96:d3:ec:ed:40:6a:91: 73:9d:32:98:0f:24:60:1b:0d:7a:68:aa:0d:cf:c2: c9:ca:01:44:e9:b2:5f:c9:3a:3c:03:aa:22:65:f8: 4c:d1:e9:33:9e:85:99:26:93:fa:51:5a:7a:59:e7: c9:9d:29:e8:91:e4:6c:d8:8d:95:1c:58:c3:f9:65: 0e:da:c1:be:31:19:6c:27:ba:7f:08:f2:c4:cd:a8: e5:1c:8e:9f:8e:97:6d:4a:d1:36:70:bf:91:ea:b3: 9c:89:5a:db:8b:26:53:61:3b:6a:ca:80:12:ed:b4: df:47:27:73:7d:a4:de:31:06:14:2b:62:a7:18:2c: 6b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AD:21:2D:64:6D:E9:84:D3:9E:D8:69:FB:17:3B:1E:B2:1A:9A:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f701408-9ea3-36d6-8230-ffea4ed0dd2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:13:23:7b:90:68:b8:4c:b7:94:61:01:06:91:a1:e4:9f:81: 91:14:b3:4c:29:13:e5:2e:12:2d:74:a4:d8:ec:93:89:9c:71: 6c:f5:24:eb:9b:69:44:bd:ad:8e:8b:be:83:75:71:00:f1:bb: 59:ba:c3:6c:07:7f:52:24:c9:cd:bb:63:d8:3a:51:27:33:fe: 59:73:88:e5:3b:6a:2f:84:85:af:f6:51:0b:cc:57:0c:63:04: 4c:88:95:11:67:09:36:9c:c9:c2:04:a0:c7:f0:af:d1:52:58: 3e:90:c7:5e:79:f8:80:5b:28:3a:6f:e9:65:6b:6c:77:07:c8: 44:a7:03:44:39:fb:e8:f8:de:09:8e:30:b0:6f:53:e6:eb:e9: ee:7b:83:b6:39:5e:55:c0:a4:ba:52:a1:9c:c0:53:bf:af:22: 23:ff:aa:15:fc:4f:92:48:d6:14:3c:0e:48:0a:9a:60:09:d9: 04:b0:23:6d:c7:21:ef:2a:5d:95:e1:0e:5d:84:d4:b3:8d:c9: 1f:fe:45:e0:bd:52:47:af:7d:ea:69:c3:1b:db:dc:d1:fb:0d: 39:90:89:f5:d6:67:57:9a:06:5e:64:0b:3e:fc:ba:d0:d8:dd: 99:36:71:55:36:b2:6a:a5:75:1c:7a:6d:02:a6:61:ff:20:b3: 97:76:ca:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FaLAqM7GYoIlrzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk ODUyNWYzYzEtODM3OC00MjdkLWI0ZGItZGRhMjA3ZTQxYzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBKuekrnnb1PBbBpdyFFcwHE+NMxm4Bh/nWx 4WWGOSdmAnwh5ZRzMgBqJJrFaUDVCqg7mfVvm7dkx1X6FUsCLtzsHoQKnHgUWunr zDucGqv4uK6qx8+VWvU4O2KMb2B/v8yaJxOQNaLYwx8NLVuGpUEZRA9NAzJPeoaC XugSQJbT7O1AapFznTKYDyRgGw16aKoNz8LJygFE6bJfyTo8A6oiZfhM0ekznoWZ JpP6UVp6WefJnSnokeRs2I2VHFjD+WUO2sG+MRlsJ7p/CPLEzajlHI6fjpdtStE2 cL+R6rOciVrbiyZTYTtqyoAS7bTfRydzfaTeMQYUK2KnGCxrNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMStIS1kbemE057YafsXOx6yGpoIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGY3MDE0MDgtOWVhMy0z NmQ2LTgyMzAtZmZlYTRlZDBkZDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8TI3uQaLhMt5RhAQaRoeSfgZEUs0wpE+UuEi10pNjsk4mccWz1JOub aUS9rY6LvoN1cQDxu1m6w2wHf1Ikyc27Y9g6UScz/llziOU7ai+Eha/2UQvMVwxj BEyIlRFnCTacycIEoMfwr9FSWD6Qx155+IBbKDpv6WVrbHcHyESnA0Q5++j43gmO MLBvU+br6e57g7Y5XlXApLpSoZzAU7+vIiP/qhX8T5JI1hQ8DkgKmmAJ2QSwI23H Ie8qXZXhDl2E1LONyR/+ReC9Ukevfeppwxvb3NH7DTmQifXWZ1eaBl5kCz78utDY 3Zk2cVU2smqldRx6bQKmYf8gs5d2yoI= -----END CERTIFICATE-----Generated at Sun Jun 29 13:57:12 2025 by rpki-client