$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ffdafeb-ce65-3c4a-aef8-4aaebdd17328.roa File: 9ffdafeb-ce65-3c4a-aef8-4aaebdd17328.roa (raw, json) Hash identifier: lkZ/ZdVEFCcVXxRAydyW4ASK8sgUomcU8vogN+rGeqQ= Subject key identifier: 9A:8B:EE:E9:7F:16:93:2E:AF:66:A4:26:7E:17:EC:43:20:B1:97:54 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3B7B3E136638FEDE1ED96A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ffdafeb-ce65-3c4a-aef8-4aaebdd17328.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 20940 IP address blocks: 23.44.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:3e:13:66:38:fe:de:1e:d9:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=5210b1f9-4ef5-4f19-932a-eb8fdc32c647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6a:bd:6f:33:57:77:7c:e0:60:40:0b:09:7e: 02:29:33:2a:42:db:aa:cd:08:f5:87:b3:db:39:8d: 7e:ed:5a:75:75:ff:f6:b1:69:a5:07:94:c2:37:ab: 99:65:c5:67:97:ed:08:6e:4f:ba:ea:c1:1f:f2:dd: b6:6c:dc:1f:b7:b2:16:22:69:93:8b:3e:9c:c3:21: ad:2c:78:1a:e4:24:15:94:39:6e:3b:80:aa:7f:80: a7:d4:20:6c:e3:24:1f:31:d7:4e:13:a2:de:0a:17: 07:7f:b3:28:b5:04:c1:73:09:52:38:be:1d:dd:85: f3:92:a3:0e:b7:5e:43:d7:4a:49:2c:1b:b7:9f:50: a4:21:26:f8:f0:f0:c4:56:d4:97:6c:1a:af:30:24: 22:35:e2:f7:ac:b9:47:99:cc:f9:d2:47:4f:a9:17: 64:1a:60:0b:89:0d:1b:73:eb:a8:fa:d6:30:dc:ae: ad:67:09:ba:91:34:80:64:a2:46:c7:d3:4e:61:3c: 11:58:9f:58:ae:69:6e:7e:b3:f2:4d:dc:24:96:81: 9c:3e:c3:27:93:a3:42:5a:d8:ea:be:90:76:4f:c1: bb:69:60:8f:82:57:0d:5e:dc:97:3b:ce:56:9f:86: 00:b9:b8:6f:87:4b:d4:a6:20:f6:23:c1:e4:c4:af: 21:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8B:EE:E9:7F:16:93:2E:AF:66:A4:26:7E:17:EC:43:20:B1:97:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ffdafeb-ce65-3c4a-aef8-4aaebdd17328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:49:39:6c:04:94:4f:55:3c:98:66:fb:39:f3:66:66:cc:25: 03:81:10:6a:28:90:bf:91:db:c1:eb:2d:86:23:80:91:4e:4c: 27:d7:8d:c8:bd:71:5d:66:de:92:db:71:0d:f1:44:1e:24:ee: 14:a1:51:10:21:24:24:de:13:26:b7:82:33:86:51:6d:ac:81: 09:bc:ff:07:05:13:69:7d:7f:ba:a2:41:9f:92:24:a9:e5:ef: 88:f1:49:9e:af:9f:4f:e5:cb:9d:01:18:90:60:b5:a5:27:f4: 71:9d:4e:91:74:52:54:c8:af:4e:aa:5f:47:88:0f:a8:63:e9: 98:ee:f5:ea:bd:89:be:c3:ee:7f:b5:89:f8:e6:32:42:ea:db: f8:60:6e:07:b9:42:26:e1:dd:63:70:eb:33:aa:8b:1e:b8:80: 1d:2f:bf:d1:2f:7b:e2:35:0c:98:a7:d1:25:0c:b4:39:e8:53: a9:86:78:6c:a6:a2:47:fa:6d:b3:82:3b:df:1e:90:f0:c2:0a: 16:48:74:c5:37:d6:df:3b:57:ab:e1:e4:2b:03:d0:7a:72:92: 3b:4e:7a:fc:82:16:9f:0a:21:d9:58:64:fc:bc:05:5e:ec:b8: 36:fb:ec:d1:8f:13:21:e7:6d:97:fd:62:33:a6:59:8e:37:a5: 90:91:ff:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ez4TZjj+3h7ZagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk NTIxMGIxZjktNGVmNS00ZjE5LTkzMmEtZWI4ZmRjMzJjNjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymq9bzNXd3zgYEALCX4CKTMqQtuqzQj1h7Pb OY1+7Vp1df/2sWmlB5TCN6uZZcVnl+0Ibk+66sEf8t22bNwft7IWImmTiz6cwyGt LHga5CQVlDluO4Cqf4Cn1CBs4yQfMddOE6LeChcHf7MotQTBcwlSOL4d3YXzkqMO t15D10pJLBu3n1CkISb48PDEVtSXbBqvMCQiNeL3rLlHmcz50kdPqRdkGmALiQ0b c+uo+tYw3K6tZwm6kTSAZKJGx9NOYTwRWJ9YrmlufrPyTdwkloGcPsMnk6NCWtjq vpB2T8G7aWCPglcNXtyXO85Wn4YAubhvh0vUpiD2I8HkxK8hYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqL7ul/FpMur2akJn4X7EMgsZdUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWZmZGFmZWItY2U2NS0z YzRhLWFlZjgtNGFhZWJkZDE3MzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyzJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJJOWwElE9VPJhm+znzZmbMJQOBEGookL+R28HrLYYjgJFOTCfXjci9 cV1m3pLbcQ3xRB4k7hShURAhJCTeEya3gjOGUW2sgQm8/wcFE2l9f7qiQZ+SJKnl 74jxSZ6vn0/ly50BGJBgtaUn9HGdTpF0UlTIr06qX0eID6hj6Zju9eq9ib7D7n+1 ifjmMkLq2/hgbge5Qibh3WNw6zOqix64gB0vv9Eve+I1DJin0SUMtDnoU6mGeGym okf6bbOCO98ekPDCChZIdMU31t87V6vh5CsD0HpykjtOevyCFp8KIdlYZPy8BV7s uDb77NGPEyHnbZf9YjOmWY43pZCR/7w= -----END CERTIFICATE-----Generated at Sun Jun 29 17:40:37 2025 by rpki-client