$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ffa931a-0a1c-3851-923d-a52b6cc88414.roa File: 9ffa931a-0a1c-3851-923d-a52b6cc88414.roa (raw, json) Hash identifier: 8fP/lalY7vQM8yXM54h4GVPAw64M4lbkevm4CGz53Po= Subject key identifier: D1:21:62:AD:49:47:65:1D:B9:D7:C4:0C:F3:90:9C:28:F3:03:37:31 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A159F9160B9C67D419BC380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ffa931a-0a1c-3851-923d-a52b6cc88414.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.36.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:9f:91:60:b9:c6:7d:41:9b:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=94f715b0-c65f-4b37-bbe8-9867df96ad2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:98:85:68:15:00:45:b3:2a:92:28:4a:c6:35: 77:31:4b:c8:bb:67:40:29:21:f8:a3:5a:c3:82:6c: 60:c6:49:95:a1:55:e7:9d:55:92:c4:de:3c:0c:da: 92:35:5b:c6:74:4c:d3:1a:7b:8b:ab:e3:b0:c8:f3: 45:ba:0d:ec:11:af:4c:69:8d:04:8b:04:c5:cd:42: 93:33:40:4b:98:cb:aa:77:c3:3a:bc:c8:73:52:b5: 44:f7:dd:a8:bd:a0:a0:67:ed:20:21:bb:9d:e4:4c: a4:21:d9:a8:fb:f3:7c:5d:ef:4e:99:af:ed:16:12: 91:41:0c:01:2f:e0:60:59:77:d5:5e:34:44:cf:01: 76:4e:72:f7:41:29:ba:1e:5f:91:65:21:e0:68:d5: 2c:d0:e1:38:8f:98:a2:47:1e:79:22:d1:8f:7b:c8: 1f:dd:dd:0a:1b:53:06:99:b7:4a:34:fe:a0:0e:09: da:d9:bb:ab:8d:ce:a9:d2:61:f7:01:de:2d:07:3f: b4:64:12:78:63:59:69:38:ba:a8:d1:ae:ff:8f:7d: a6:8f:e7:53:5a:4e:3b:d5:8d:34:7c:c3:c2:a1:44: e0:79:75:8a:83:ec:32:ef:90:8b:e9:7c:0e:85:9a: a9:d5:3a:6d:1c:c3:e9:f2:9d:dc:de:5d:98:75:ad: 76:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:21:62:AD:49:47:65:1D:B9:D7:C4:0C:F3:90:9C:28:F3:03:37:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ffa931a-0a1c-3851-923d-a52b6cc88414.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:88:b8:1a:f8:57:c4:c0:80:01:7c:21:2b:7d:8c:72:13:df: 1a:cd:c1:72:b4:f1:e3:da:5b:a8:dd:0a:65:8f:f6:5c:e4:d1: 57:ef:ef:57:db:63:33:2b:c3:be:6b:59:34:4f:33:7a:84:2e: cd:0d:a7:64:91:b5:da:77:4e:c4:b6:e3:75:c9:71:db:75:db: 04:d9:84:5f:eb:d2:14:4c:cb:ab:30:22:a9:80:69:da:d8:0e: 44:db:44:6b:4e:f4:0b:fd:21:90:aa:05:b8:aa:fe:80:c8:23: c0:77:0a:6c:29:8d:e5:75:6c:e9:8a:13:8b:e8:ed:19:f0:ba: 61:e3:cc:64:fd:22:19:69:1e:36:1c:da:78:3f:67:ba:80:0c: 84:cc:51:d1:eb:68:c8:78:9f:25:fd:ee:9a:9c:bd:83:28:40: 58:21:53:84:54:42:dd:66:18:3d:ed:96:82:9d:fc:de:2f:4d: 71:82:7b:f2:b4:1b:83:9c:5c:d7:69:a4:4a:95:9e:a3:6e:7d: e1:19:45:1c:96:cb:46:61:ef:cd:33:13:fe:46:40:92:39:ef: 39:24:fe:ba:a1:1c:76:b6:66:dc:ae:e3:f8:32:ab:26:cc:2f: d3:ee:7b:6a:bd:57:31:ff:42:da:e6:44:1b:80:ad:8a:21:ca: fc:ce:43:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZ+RYLnGfUGbw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk OTRmNzE1YjAtYzY1Zi00YjM3LWJiZTgtOTg2N2RmOTZhZDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5iFaBUARbMqkihKxjV3MUvIu2dAKSH4o1rD gmxgxkmVoVXnnVWSxN48DNqSNVvGdEzTGnuLq+OwyPNFug3sEa9MaY0EiwTFzUKT M0BLmMuqd8M6vMhzUrVE992ovaCgZ+0gIbud5EykIdmo+/N8Xe9Oma/tFhKRQQwB L+BgWXfVXjREzwF2TnL3QSm6Hl+RZSHgaNUs0OE4j5iiRx55ItGPe8gf3d0KG1MG mbdKNP6gDgna2burjc6p0mH3Ad4tBz+0ZBJ4Y1lpOLqo0a7/j32mj+dTWk471Y00 fMPCoUTgeXWKg+wy75CL6XwOhZqp1TptHMPp8p3c3l2Yda12MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEhYq1JR2UdudfEDPOQnCjzAzcxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWZmYTkzMWEtMGExYy0z ODUxLTkyM2QtYTUyYjZjYzg4NDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuIuBr4V8TAgAF8ISt9jHIT3xrNwXK08ePaW6jdCmWP9lzk0Vfv71fb YzMrw75rWTRPM3qELs0Np2SRtdp3TsS243XJcdt12wTZhF/r0hRMy6swIqmAadrY DkTbRGtO9Av9IZCqBbiq/oDII8B3CmwpjeV1bOmKE4vo7RnwumHjzGT9IhlpHjYc 2ng/Z7qADITMUdHraMh4nyX97pqcvYMoQFghU4RUQt1mGD3tloKd/N4vTXGCe/K0 G4OcXNdppEqVnqNufeEZRRyWy0Zh780zE/5GQJI57zkk/rqhHHa2Ztyu4/gyqybM L9Pue2q9VzH/QtrmRBuArYohyvzOQ98= -----END CERTIFICATE-----Generated at Sun Jun 29 17:50:06 2025 by rpki-client