$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7554a1a-cad1-32f7-9060-8d16b7feec19.roa File: a7554a1a-cad1-32f7-9060-8d16b7feec19.roa (raw, json) Hash identifier: 11BaPE4N5pebtI+a/robVL1c7n+hmFP3kIA1RGEXDkA= Subject key identifier: DA:49:DA:DA:88:08:05:22:BA:D9:CF:9B:07:55:4F:91:15:81:40:E4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A2D8590DF7D997E1CFFCEA3C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7554a1a-cad1-32f7-9060-8d16b7feec19.roa Signing time: Fri 13 Jun 2025 13:01:04 +0000 ROA not before: Fri 13 Jun 2025 13:01:04 +0000 ROA not after: Thu 11 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.33.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:85:90:df:7d:99:7e:1c:ff:ce:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 13 13:01:04 2025 GMT Not After : Sep 11 13:01:04 2025 GMT Subject: CN=c5c226cc-3efc-4f2c-9df3-ccc21e038a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:3e:d8:ef:08:ab:c5:7c:0c:d4:79:b3:7a: c7:36:9b:0b:8e:16:8f:d3:b7:c0:95:3d:95:86:90: da:1d:06:8e:45:74:9d:47:b8:07:80:75:ba:08:f1: 31:9e:90:c9:de:ab:a4:9c:a0:f3:98:e6:6a:bf:e8: 6b:47:41:ae:14:0a:ee:f9:c0:35:03:29:4a:15:5b: 94:b2:be:56:2d:2e:e4:85:ba:97:af:fa:6b:0a:f2: ca:75:fb:a0:6d:65:f3:c7:e4:1c:bf:46:54:f2:5d: dc:cb:8c:d2:08:98:b5:0b:e5:47:e2:0c:c8:4e:5d: 81:82:d5:4c:6f:86:53:f0:4b:5f:64:55:0a:ba:53: 33:d5:b6:fe:c2:d7:50:73:46:e6:e2:03:06:d0:16: fb:e9:4c:70:cd:c2:71:fe:8c:84:ad:6b:be:4a:b2: db:7b:ed:c5:9b:cd:9e:1c:2b:b1:28:8e:43:0e:5b: f6:34:96:cb:e7:2b:d0:77:99:90:87:4f:88:d9:d7: b0:41:d2:6d:54:09:e9:20:f7:00:53:64:be:3a:c5: ed:ea:26:0a:cf:0c:9a:d7:13:f4:fa:ed:a5:5f:fe: bf:dd:7c:77:af:e8:b9:48:6a:09:79:e8:7f:19:6c: 2b:45:9d:e5:63:12:bb:4b:c3:c9:2c:f6:b6:b0:0c: 58:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:49:DA:DA:88:08:05:22:BA:D9:CF:9B:07:55:4F:91:15:81:40:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7554a1a-cad1-32f7-9060-8d16b7feec19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:bb:50:98:50:77:f9:a4:53:f1:1c:92:9a:20:86:0d:22:22: 93:60:68:f4:de:8c:4c:bc:20:cc:c9:a0:fd:f5:eb:c7:d5:b4: 61:77:ac:5e:0b:3f:4d:05:63:3b:e4:7c:42:0e:6d:29:74:d2: 1a:3d:fb:ea:f1:68:3b:f2:6d:44:6f:b3:24:f0:9e:51:e2:e3: ee:39:4b:01:68:10:90:1e:47:86:41:27:af:c1:1b:38:3b:41: 0f:e7:f4:99:fe:9c:ef:e1:af:50:39:d4:6e:c6:ce:61:d5:88: 47:97:6a:1c:c0:15:d0:79:ff:ac:47:36:fc:fd:e2:18:2e:47: 02:52:dd:8d:ed:5d:5e:a2:92:74:c6:50:48:52:8c:72:0c:9a: f1:92:0b:51:ba:b1:b5:41:62:95:a1:b2:c2:48:2e:04:30:55: 67:d9:fb:51:6c:cf:e1:8a:87:4e:ba:ff:48:5f:08:4c:24:56: a6:33:77:a8:1d:8d:d8:0f:57:ab:de:e3:b0:93:ad:fa:a4:b4: d6:bc:70:f0:5f:e4:85:15:71:56:7c:da:e4:00:86:4c:05:1d: e0:e7:3e:59:78:9a:01:ea:db:98:3e:9c:69:af:70:48:70:a8: e4:56:99:af:61:fa:24:12:85:3a:b3:68:12:6e:42:16:ec:9d: 91:5d:ae:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothZDffZl+HP/Oo8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk YzVjMjI2Y2MtM2VmYy00ZjJjLTlkZjMtY2NjMjFlMDM4YTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB4+2O8Iq8V8DNR5s3rHNpsLjhaP07fAlT2V hpDaHQaORXSdR7gHgHW6CPExnpDJ3quknKDzmOZqv+hrR0GuFAru+cA1AylKFVuU sr5WLS7khbqXr/prCvLKdfugbWXzx+Qcv0ZU8l3cy4zSCJi1C+VH4gzITl2BgtVM b4ZT8EtfZFUKulMz1bb+wtdQc0bm4gMG0Bb76UxwzcJx/oyErWu+SrLbe+3Fm82e HCuxKI5DDlv2NJbL5yvQd5mQh0+I2dewQdJtVAnpIPcAU2S+OsXt6iYKzwya1xP0 +u2lX/6/3Xx3r+i5SGoJeeh/GWwrRZ3lYxK7S8PJLPa2sAxYewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpJ2tqICAUiutnPmwdVT5EVgUDkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTc1NTRhMWEtY2FkMS0z MmY3LTkwNjAtOGQxNmI3ZmVlYzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyEVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADS7UJhQd/mkU/Eckpoghg0iIpNgaPTejEy8IMzJoP3168fVtGF3rF4L P00FYzvkfEIObSl00ho9++rxaDvybURvsyTwnlHi4+45SwFoEJAeR4ZBJ6/BGzg7 QQ/n9Jn+nO/hr1A51G7GzmHViEeXahzAFdB5/6xHNvz94hguRwJS3Y3tXV6iknTG UEhSjHIMmvGSC1G6sbVBYpWhssJILgQwVWfZ+1Fsz+GKh066/0hfCEwkVqYzd6gd jdgPV6ve47CTrfqktNa8cPBf5IUVcVZ82uQAhkwFHeDnPll4mgHq25g+nGmvcEhw qORWma9h+iQShTqzaBJuQhbsnZFdruE= -----END CERTIFICATE-----Generated at Sun Jun 29 19:19:28 2025 by rpki-client