$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97c0e39c-6b06-3169-812b-13a6e8c2800d.roa File: 97c0e39c-6b06-3169-812b-13a6e8c2800d.roa (raw, json) Hash identifier: G57Hk7ABC9B+4JxxRm8Zip6mY/MRdEECxQoaBkvlY9I= Subject key identifier: C8:E6:70:86:20:B9:CF:B4:CD:F7:E0:45:E1:AC:91:B0:A1:B7:20:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A549B26C68E174ED46DA47200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97c0e39c-6b06-3169-812b-13a6e8c2800d.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 20940 IP address blocks: 23.219.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:26:c6:8e:17:4e:d4:6d:a4:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=d206ce44-b1d8-4291-adbc-6b26ccffd172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c3:e6:6e:06:d2:15:f6:5f:22:94:4a:0e:d2: b1:9e:ac:da:60:f8:d0:a2:54:d2:81:63:3f:1d:ab: da:92:b4:e4:59:36:47:3d:ae:e5:ea:a2:7e:45:83: 87:1f:10:3a:7c:69:9d:05:32:dd:4c:77:83:a7:7c: 29:a1:71:a2:08:36:5e:ea:8f:dd:36:6f:10:b9:93: 77:8d:cf:19:4e:ab:f6:58:3a:25:20:7a:0e:99:cd: 4a:bf:53:5c:47:fc:29:45:23:4a:0a:87:8b:d1:26: 56:e3:c5:87:9b:8b:28:74:ab:16:b5:02:d0:14:08: c8:e0:d9:83:e5:a0:82:0f:20:e0:0f:3c:14:47:70: bb:31:e3:ac:da:e0:d6:b3:cb:1b:0a:dc:65:4e:58: e9:00:8c:cf:43:12:cb:3f:f1:68:8d:8b:27:65:60: 86:c3:a7:1e:ed:77:61:7a:a9:89:c7:b5:32:20:12: 0d:8c:f1:10:04:f2:65:76:50:30:c0:8e:1c:fc:45: 47:f0:98:80:72:01:79:a8:f5:78:ae:d2:24:48:d0: cb:86:68:6d:b4:dd:9c:9f:75:8e:c2:18:e9:f3:92: 3e:b2:25:3a:57:3c:08:18:8d:db:46:96:b2:05:ca: d5:5a:4f:7c:ae:d7:9b:b0:5a:af:69:a2:5a:95:06: 22:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E6:70:86:20:B9:CF:B4:CD:F7:E0:45:E1:AC:91:B0:A1:B7:20:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97c0e39c-6b06-3169-812b-13a6e8c2800d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:e2:81:c6:70:a1:50:2d:13:4b:90:0b:18:2a:90:a3:3c:38: 5e:4b:8f:d6:14:41:79:cb:6a:f7:bc:90:9e:66:e4:f4:b1:72: 7d:61:85:43:37:bf:9d:d7:a4:d0:44:0d:24:24:04:7e:f3:b5: c9:18:6a:0a:da:a6:12:e5:95:be:34:5e:68:00:fa:d6:a8:ce: 58:7e:19:95:4c:75:94:30:7e:77:89:f9:02:fe:bd:87:b1:cd: 11:53:b4:22:d3:78:b7:78:5a:2e:14:c2:3e:d8:bd:e0:48:55: 27:ef:fa:2c:b5:a5:91:a6:4f:79:1a:e0:96:21:34:32:0a:cf: 19:f7:4c:53:ef:6d:18:a9:8f:c4:46:dd:f1:cb:2f:8c:14:4c: 77:eb:c1:ea:5d:9a:f9:39:e7:12:3b:4e:f3:15:19:ec:48:94: 83:9a:b4:90:39:0f:7d:ab:3c:43:18:6f:8d:91:ca:89:b6:3b: 3e:43:7a:a8:78:d1:f6:53:70:52:92:18:f5:ac:bd:41:d5:07: bc:e6:eb:03:09:ec:9a:c0:ed:30:c5:f6:de:80:a3:af:37:de: 11:38:fe:66:c5:8d:81:42:98:20:8c:c9:6f:ca:6d:d1:64:a6: 22:9e:a3:68:61:77:4b:8e:59:c5:5c:89:06:b0:41:90:97:25: 57:4c:d0:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmybGjhdO1G2kcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk ZDIwNmNlNDQtYjFkOC00MjkxLWFkYmMtNmIyNmNjZmZkMTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8PmbgbSFfZfIpRKDtKxnqzaYPjQolTSgWM/ HavakrTkWTZHPa7l6qJ+RYOHHxA6fGmdBTLdTHeDp3wpoXGiCDZe6o/dNm8QuZN3 jc8ZTqv2WDolIHoOmc1Kv1NcR/wpRSNKCoeL0SZW48WHm4sodKsWtQLQFAjI4NmD 5aCCDyDgDzwUR3C7MeOs2uDWs8sbCtxlTljpAIzPQxLLP/FojYsnZWCGw6ce7Xdh eqmJx7UyIBINjPEQBPJldlAwwI4c/EVH8JiAcgF5qPV4rtIkSNDLhmhttN2cn3WO whjp85I+siU6VzwIGI3bRpayBcrVWk98rtebsFqvaaJalQYiMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjmcIYguc+0zffgReGskbChtyBYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTdjMGUzOWMtNmIwNi0z MTY5LTgxMmItMTNhNmU4YzI4MDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9skMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbigcZwoVAtE0uQCxgqkKM8OF5Lj9YUQXnLave8kJ5m5PSxcn1hhUM3 v53XpNBEDSQkBH7ztckYagraphLllb40XmgA+taozlh+GZVMdZQwfneJ+QL+vYex zRFTtCLTeLd4Wi4Uwj7YveBIVSfv+iy1pZGmT3ka4JYhNDIKzxn3TFPvbRipj8RG 3fHLL4wUTHfrwepdmvk55xI7TvMVGexIlIOatJA5D32rPEMYb42Ryom2Oz5Deqh4 0fZTcFKSGPWsvUHVB7zm6wMJ7JrA7TDF9t6Ao6833hE4/mbFjYFCmCCMyW/KbdFk piKeo2hhd0uOWcVciQawQZCXJVdM0JA= -----END CERTIFICATE-----Generated at Sun Jun 29 12:31:08 2025 by rpki-client