$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a115ae35-ec7e-3f00-b4a1-b8e2c852f7d8.roa File: a115ae35-ec7e-3f00-b4a1-b8e2c852f7d8.roa (raw, json) Hash identifier: XAiP8j7EEGh3OuazFLlLMRLRsQ1txeauXCdlRGHM4cY= Subject key identifier: 07:FD:59:87:1C:76:19:C7:03:4E:AA:1F:3D:4C:11:26:5D:17:90:4E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B262569A539137B252400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a115ae35-ec7e-3f00-b4a1-b8e2c852f7d8.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.56.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:26:25:69:a5:39:13:7b:25:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=9cdb940b-e4d0-4fec-aea1-741e53a67032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:73:24:32:d2:93:cf:02:ea:53:0c:b6:88:1b: de:49:76:d6:a9:72:6e:b5:12:f8:fa:73:06:03:19: 29:83:d0:29:9a:7b:18:89:0d:6c:3a:50:46:4e:4e: 1d:b4:69:3e:8f:0f:91:26:70:86:53:24:d1:e4:99: 56:c0:99:e2:d6:d3:36:c7:50:0e:db:13:8f:9b:7c: c3:a8:a6:51:96:4e:a7:8e:f9:60:df:62:a9:68:96: 69:19:a8:e2:d2:17:80:7b:ef:d4:fe:de:62:a5:0d: 35:39:cd:07:81:f8:f0:dd:19:56:54:ec:98:d0:35: f1:ab:a2:6d:dd:42:37:fd:36:15:1e:87:c8:b8:bf: bb:3f:a2:8d:a1:d4:09:1f:6e:1a:03:09:61:35:3e: 4c:99:f9:1d:b0:f6:15:b6:9a:47:e1:c5:99:94:15: 8a:e3:53:bf:59:5c:50:e0:91:2f:c1:55:68:8f:ee: ed:5b:d2:c1:de:d7:83:eb:99:88:04:d2:1f:fa:aa: 8b:f7:07:72:5a:3d:f3:e6:5f:05:71:71:ba:48:81: 12:37:be:c8:bd:87:d0:6f:fe:58:56:8d:36:47:9e: f1:6c:27:61:bd:31:85:f4:6a:cf:91:e8:ac:1f:e7: c7:6e:8a:cb:84:0a:68:e5:18:9c:e4:ce:bb:b9:7b: 7a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FD:59:87:1C:76:19:C7:03:4E:AA:1F:3D:4C:11:26:5D:17:90:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a115ae35-ec7e-3f00-b4a1-b8e2c852f7d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.56.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:9b:0b:10:68:87:7f:0d:52:a7:47:29:a8:db:bd:05:2a:83: f8:b6:34:59:2b:a6:7b:b1:db:1d:88:40:1f:c1:79:47:b3:c7: 22:85:86:ca:b6:03:cf:2c:66:50:85:94:54:9b:05:47:fb:e7: b7:75:c2:bf:ea:e2:e8:73:06:81:e1:8a:1f:79:44:3b:4d:fb: f4:14:3f:52:ab:b3:16:12:e2:dd:d3:89:b5:3d:63:f2:b5:86: 12:c7:44:ad:80:e8:67:d4:8b:ed:5b:8b:b4:77:f7:56:fb:95: c9:03:7f:af:f3:3f:fa:e2:f1:12:b0:3c:fb:a5:a4:ce:39:9e: 47:87:6f:3b:dc:20:bd:3d:00:18:40:96:66:ba:85:2f:a0:61: 22:a2:f3:b7:d7:90:cf:1d:f9:16:58:9f:86:98:38:c7:4f:82: 8b:f1:1f:70:f2:a2:a1:32:59:95:ec:4d:d4:f5:5e:06:dc:01: 4a:b0:ae:e7:25:37:b0:eb:72:e9:9d:68:b9:30:a0:a9:f3:df: 21:c5:17:fb:5e:e4:b4:79:3a:51:f7:3d:78:08:c6:32:9f:9f: 70:da:55:f3:19:3e:a8:8c:04:38:c0:06:98:a4:71:8e:18:dd: 2d:d1:1b:fb:cd:87:ee:01:d7:13:64:3f:40:55:01:09:f9:45: 8c:27:f9:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOyYlaaU5E3slJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk OWNkYjk0MGItZTRkMC00ZmVjLWFlYTEtNzQxZTUzYTY3MDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHMkMtKTzwLqUwy2iBveSXbWqXJutRL4+nMG Axkpg9ApmnsYiQ1sOlBGTk4dtGk+jw+RJnCGUyTR5JlWwJni1tM2x1AO2xOPm3zD qKZRlk6njvlg32KpaJZpGaji0heAe+/U/t5ipQ01Oc0Hgfjw3RlWVOyY0DXxq6Jt 3UI3/TYVHofIuL+7P6KNodQJH24aAwlhNT5MmfkdsPYVtppH4cWZlBWK41O/WVxQ 4JEvwVVoj+7tW9LB3teD65mIBNIf+qqL9wdyWj3z5l8FcXG6SIESN77IvYfQb/5Y Vo02R57xbCdhvTGF9GrPkeisH+fHborLhApo5Ric5M67uXt60wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAf9WYccdhnHA06qHz1MESZdF5BOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTExNWFlMzUtZWM3ZS0z ZjAwLWI0YTEtYjhlMmM4NTJmN2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFzjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGbCxBoh38NUqdHKajbvQUqg/i2NFkrpnux2x2IQB/BeUezxyKFhsq2 A88sZlCFlFSbBUf757d1wr/q4uhzBoHhih95RDtN+/QUP1KrsxYS4t3TibU9Y/K1 hhLHRK2A6GfUi+1bi7R391b7lckDf6/zP/ri8RKwPPulpM45nkeHbzvcIL09ABhA lma6hS+gYSKi87fXkM8d+RZYn4aYOMdPgovxH3DyoqEyWZXsTdT1XgbcAUqwrucl N7DrcumdaLkwoKnz3yHFF/te5LR5OlH3PXgIxjKfn3DaVfMZPqiMBDjABpikcY4Y 3S3RG/vNh+4B1xNkP0BVAQn5RYwn+VM= -----END CERTIFICATE-----Generated at Sun Jun 29 19:25:06 2025 by rpki-client