$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/987da53a-f3a9-336f-aa51-ae5d0d255a2b.roa File: 987da53a-f3a9-336f-aa51-ae5d0d255a2b.roa (raw, json) Hash identifier: udh82clyRoIsflLL/+6RF8Y7tFO2JZX9HzW+L+X4dgk= Subject key identifier: C1:AF:12:3E:7F:69:F7:FC:2A:7B:42:79:35:81:87:46:DF:ED:E1:7F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4DA049CDF3A2200E0815A380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/987da53a-f3a9-336f-aa51-ae5d0d255a2b.roa Signing time: Wed 25 Jun 2025 01:00:49 +0000 ROA not before: Wed 25 Jun 2025 01:00:49 +0000 ROA not after: Tue 23 Sep 2025 01:00:49 +0000 asID: 20940 IP address blocks: 23.63.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:a0:49:cd:f3:a2:20:0e:08:15:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 25 01:00:49 2025 GMT Not After : Sep 23 01:00:49 2025 GMT Subject: CN=a734feb5-47fb-48f5-bdc9-bdc9868b5327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5c:cb:32:f7:0b:a7:0b:55:5b:d1:8d:17:e2: 8f:91:64:b5:c2:d0:6d:3f:24:f9:19:b5:43:19:8d: 74:58:c8:11:c5:bd:b6:27:8e:86:b7:63:c0:0f:46: 94:31:b3:36:e1:46:6f:0b:92:5c:5e:f6:b0:76:29: 46:29:f7:0d:0f:e1:ad:f9:4f:fe:94:ba:e8:9c:25: 76:e3:32:e7:5c:83:8b:61:8a:58:f0:6a:a6:73:25: 4f:49:3d:9e:7c:c9:83:5a:97:f0:db:c0:39:e4:3e: 77:10:5a:35:75:25:42:56:6a:1e:d2:77:bf:b7:b3: c2:d1:c5:7e:52:b9:b0:6d:f2:ea:fc:bc:86:e5:0c: ef:2a:90:02:ac:db:f5:40:9d:ed:ae:67:d1:f5:60: 3f:1c:55:5a:41:cb:96:d5:54:5a:e7:2b:2c:3f:68: 35:ab:47:6f:b3:c2:91:ad:04:13:b8:7f:1f:76:73: fe:81:27:f8:42:61:06:c7:e6:0f:ea:e8:ed:9d:e5: dd:c4:ee:f3:39:6b:cf:d2:9b:ab:e8:dc:5f:e1:1a: d2:a3:e5:bc:75:b0:c6:2a:e0:ee:58:4f:eb:a2:5d: af:d3:a9:13:58:e6:39:94:6f:0d:33:4d:3f:0b:03: 5d:0c:30:b6:d5:99:0b:68:5b:08:c5:fa:df:cb:9c: 47:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AF:12:3E:7F:69:F7:FC:2A:7B:42:79:35:81:87:46:DF:ED:E1:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/987da53a-f3a9-336f-aa51-ae5d0d255a2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.63.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:99:45:e9:16:29:dd:08:11:23:b2:0f:cb:0d:21:57:77:73: ad:ee:9f:f7:39:cc:9c:1e:03:3d:c7:44:c2:6d:82:7e:44:65: 30:0f:35:f2:50:24:dd:47:d5:17:6c:af:9f:43:48:d0:e0:2c: e9:04:e9:b7:25:bf:85:0f:b2:3f:80:53:e7:cc:0b:41:e6:c7: b1:d9:5c:25:95:d4:1f:7a:59:f4:93:b9:8b:f4:93:89:f9:1b: 6e:f8:22:1e:2f:45:d2:3f:36:c1:58:93:8e:d2:b2:fc:bd:35: 09:86:f9:0a:97:db:09:cf:bc:f3:cf:9c:fb:31:d4:de:00:00: 27:cc:48:72:74:4d:f2:4e:67:3a:ae:5c:ca:3f:27:b3:09:56: 0a:85:e1:87:cc:f1:34:c3:12:99:16:ca:5b:3c:82:af:75:7f: 23:4d:1b:93:62:0f:8f:df:7f:75:f5:6c:50:ff:78:77:35:b3: 0d:fb:22:0e:92:99:2b:3a:76:4d:36:d7:3b:9a:4a:52:4f:7a: e9:e0:d6:a3:34:6c:53:e3:f8:d4:b7:86:1d:ad:c9:a1:f7:0e: 50:2a:83:13:31:a2:9c:00:f1:45:75:7a:bb:01:5b:80:22:af: f7:ce:10:5c:6c:1a:8e:c5:8d:0d:64:1d:b8:d7:f3:1a:02:59: d1:17:e5:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNoEnN86IgDggVo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNTAxMDA0OVoXDTI1MDkyMzAxMDA0OVowLzEtMCsGA1UEAxMk YTczNGZlYjUtNDdmYi00OGY1LWJkYzktYmRjOTg2OGI1MzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFzLMvcLpwtVW9GNF+KPkWS1wtBtPyT5GbVD GY10WMgRxb22J46Gt2PAD0aUMbM24UZvC5JcXvawdilGKfcND+Gt+U/+lLronCV2 4zLnXIOLYYpY8GqmcyVPST2efMmDWpfw28A55D53EFo1dSVCVmoe0ne/t7PC0cV+ UrmwbfLq/LyG5QzvKpACrNv1QJ3trmfR9WA/HFVaQcuW1VRa5yssP2g1q0dvs8KR rQQTuH8fdnP+gSf4QmEGx+YP6ujtneXdxO7zOWvP0pur6Nxf4RrSo+W8dbDGKuDu WE/rol2v06kTWOY5lG8NM00/CwNdDDC21ZkLaFsIxfrfy5xHjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGvEj5/aff8KntCeTWBh0bf7eF/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTg3ZGE1M2EtZjNhOS0z MzZmLWFhNTEtYWU1ZDBkMjU1YTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmZRekWKd0IESOyD8sNIVd3c63un/c5zJweAz3HRMJtgn5EZTAPNfJQ JN1H1Rdsr59DSNDgLOkE6bclv4UPsj+AU+fMC0Hmx7HZXCWV1B96WfSTuYv0k4n5 G274Ih4vRdI/NsFYk47Ssvy9NQmG+QqX2wnPvPPPnPsx1N4AACfMSHJ0TfJOZzqu XMo/J7MJVgqF4YfM8TTDEpkWyls8gq91fyNNG5NiD4/ff3X1bFD/eHc1sw37Ig6S mSs6dk021zuaSlJPeung1qM0bFPj+NS3hh2tyaH3DlAqgxMxopwA8UV1ersBW4Ai r/fOEFxsGo7FjQ1kHbjX8xoCWdEX5ds= -----END CERTIFICATE-----Generated at Sun Jun 29 13:49:48 2025 by rpki-client