$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3712676-880f-37d0-b42e-548a27ad31a2.roa File: a3712676-880f-37d0-b42e-548a27ad31a2.roa (raw, json) Hash identifier: HIUHElgvSfayY6fsdMMZzd5nt7vREEGszHFSaq317sU= Subject key identifier: 23:C9:30:8E:F9:2E:57:62:5D:E3:7E:CF:B8:60:54:34:D2:14:9A:5F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849B2AF66FAC3560BED15C5B940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3712676-880f-37d0-b42e-548a27ad31a2.roa Signing time: Wed 30 Apr 2025 13:01:02 +0000 ROA not before: Wed 30 Apr 2025 13:01:02 +0000 ROA not after: Tue 29 Jul 2025 13:01:02 +0000 asID: 16625 IP address blocks: 23.36.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:af:66:fa:c3:56:0b:ed:15:c5:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 30 13:01:02 2025 GMT Not After : Jul 29 13:01:02 2025 GMT Subject: CN=cc69e234-d918-4655-b5f5-4ddb915c5521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:74:f3:67:5d:78:00:dd:ab:15:d4:ac:21:5f: 7e:1c:37:27:24:4d:aa:77:7e:ec:51:bb:95:72:c5: 71:8b:e6:81:d9:4f:84:b4:a7:12:4f:13:93:b0:09: 4a:0f:8d:9c:f5:23:03:1f:2e:ff:02:24:09:4a:53: 68:bf:97:bb:70:51:e8:57:27:a1:99:10:a0:e5:a1: a7:75:5b:7e:e4:c0:0b:2c:3d:2b:16:72:3a:87:20: a4:56:6a:21:47:7b:c3:1f:4a:19:7f:98:54:23:65: 5b:cf:d7:9f:5a:e9:1f:96:11:68:da:d8:7d:08:7e: 21:64:e7:0d:63:ea:bb:29:ca:48:a7:71:cf:74:7f: 4e:33:14:74:7e:38:46:f1:b5:26:4b:3d:9a:42:9b: 5f:1c:2f:b0:48:63:dc:e1:dd:da:d0:0d:4d:68:7a: 26:da:9d:eb:fd:9b:82:2f:a4:a7:88:73:46:22:e3: 30:d9:1b:9c:6a:85:5e:98:89:ed:cd:c0:4f:12:bc: 16:ee:65:c6:17:b1:79:76:48:8c:71:e1:82:12:f1: 20:0f:8f:a2:a5:7f:27:74:5d:00:86:2b:2d:81:06: 9c:8d:51:52:d8:34:c7:c2:19:b3:9d:f2:a6:02:14: bb:ff:c0:3b:9e:26:a2:30:ec:6b:1d:22:b1:d8:2f: 50:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C9:30:8E:F9:2E:57:62:5D:E3:7E:CF:B8:60:54:34:D2:14:9A:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3712676-880f-37d0-b42e-548a27ad31a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:e4:28:27:5d:d7:29:ff:e8:e5:b8:4f:53:9a:17:94:27:9d: 55:a4:a3:22:b5:b3:07:f5:ad:19:fd:ae:3a:0a:64:59:11:0d: b8:c3:d3:36:4f:f1:fe:9a:df:05:e5:15:62:2d:52:d8:02:7e: b5:68:44:1d:f9:7d:0d:34:51:29:47:35:ba:5e:32:2d:e9:8f: 12:2b:40:85:4a:d9:09:bc:bb:47:75:3e:d5:59:7b:37:0c:46: 3c:f0:d0:18:c5:4a:08:6f:01:e4:25:e5:7f:e3:cd:83:6d:f9: ef:5d:4e:89:48:03:a2:87:75:e2:ea:00:c9:78:ce:a6:95:a5: 82:ab:67:f8:f5:b0:09:78:53:30:12:79:4b:c9:62:e9:11:d4: 3d:28:1e:78:44:44:f6:8c:a7:2a:69:f1:a0:8d:71:57:eb:87: b4:48:7d:c0:c0:d1:e4:90:6c:d0:e1:96:64:7f:f4:fc:0c:42: 77:64:35:07:66:32:a3:09:59:86:01:37:ff:49:9a:09:6b:74: 70:53:6b:42:a4:5e:e2:1c:66:ee:d7:6c:d1:36:1e:6f:c5:b7: b1:aa:a4:fb:ab:6e:b7:55:e7:39:cf:49:95:84:da:f2:73:31: 63:c9:ab:9f:9a:25:6b:c1:29:e3:95:33:cc:4d:03:a9:3e:2f: d0:b0:bc:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmyr2b6w1YL7RXFuUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQzMDEzMDEwMloXDTI1MDcyOTEzMDEwMlowLzEtMCsGA1UEAxMk Y2M2OWUyMzQtZDkxOC00NjU1LWI1ZjUtNGRkYjkxNWM1NTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nTzZ114AN2rFdSsIV9+HDcnJE2qd37sUbuV csVxi+aB2U+EtKcSTxOTsAlKD42c9SMDHy7/AiQJSlNov5e7cFHoVyehmRCg5aGn dVt+5MALLD0rFnI6hyCkVmohR3vDH0oZf5hUI2Vbz9efWukflhFo2th9CH4hZOcN Y+q7KcpIp3HPdH9OMxR0fjhG8bUmSz2aQptfHC+wSGPc4d3a0A1NaHom2p3r/ZuC L6SniHNGIuMw2RucaoVemIntzcBPErwW7mXGF7F5dkiMceGCEvEgD4+ipX8ndF0A histgQacjVFS2DTHwhmznfKmAhS7/8A7niaiMOxrHSKx2C9Q2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPJMI75LldiXeN+z7hgVDTSFJpfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTM3MTI2NzYtODgwZi0z N2QwLWI0MmUtNTQ4YTI3YWQzMWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyR0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPkKCdd1yn/6OW4T1OaF5QnnVWkoyK1swf1rRn9rjoKZFkRDbjD0zZP 8f6a3wXlFWItUtgCfrVoRB35fQ00USlHNbpeMi3pjxIrQIVK2Qm8u0d1PtVZezcM Rjzw0BjFSghvAeQl5X/jzYNt+e9dTolIA6KHdeLqAMl4zqaVpYKrZ/j1sAl4UzAS eUvJYukR1D0oHnhERPaMpypp8aCNcVfrh7RIfcDA0eSQbNDhlmR/9PwMQndkNQdm MqMJWYYBN/9JmglrdHBTa0KkXuIcZu7XbNE2Hm/Ft7GqpPurbrdV5znPSZWE2vJz MWPJq5+aJWvBKeOVM8xNA6k+L9CwvBQ= -----END CERTIFICATE-----Generated at Mon May 5 12:41:58 2025 by rpki-client