$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a97224ad-17dd-39ad-b6c1-30822ebef99e.roa File: a97224ad-17dd-39ad-b6c1-30822ebef99e.roa (raw, json) Hash identifier: Ci2TIT1PvlmRZQLGge7hRyF7d34p11QXirVHsIu6ZKI= Subject key identifier: BC:18:82:55:37:26:96:BB:37:C1:B3:A5:A9:9F:E9:C7:53:49:F3:06 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A51D07CD373391554442F9800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a97224ad-17dd-39ad-b6c1-30822ebef99e.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.209.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:7c:d3:73:39:15:54:44:2f:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=9da8a1ee-9c7e-42c9-b14c-62109e089aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:61:c3:3e:9c:fe:a2:d5:42:82:19:4c:8b:2d: 2a:3a:c1:48:01:83:50:9f:e0:3e:d5:93:7f:4f:43: d1:f9:28:c3:b7:5d:e1:0b:fb:06:9a:ff:9d:b9:37: 65:de:b5:55:89:94:35:14:fe:90:1f:1d:b9:a6:fd: 36:94:82:15:fa:ab:9a:92:da:1c:7c:8a:d3:f6:ad: ab:f9:9f:ab:d6:3d:b8:19:3c:ca:54:0d:c8:34:01: 9b:b5:dd:4f:99:d1:8e:54:ea:1a:05:c0:df:42:3b: 83:45:18:28:f4:1c:9a:f9:a8:c3:03:17:16:4c:fa: 43:21:df:65:09:cf:d4:bf:9f:4e:a6:63:9f:fb:61: 22:0d:84:69:0d:b0:57:08:4d:b6:c9:1f:27:c2:be: 44:93:7e:61:d2:20:ba:87:9e:13:c8:66:1c:43:32: 46:47:1b:d3:6b:49:ff:e1:2c:c3:20:cd:d0:f4:28: 38:dd:ee:3c:a8:be:fb:26:af:6b:1e:6d:e2:be:ca: 5d:7c:1f:c4:02:0b:29:e1:cb:45:58:72:24:2c:89: 73:45:60:e0:f1:e6:02:bb:f5:0f:23:a4:bb:83:77: a5:08:95:dc:d7:d7:dd:41:c6:e1:75:4c:e6:e5:0b: 86:af:3b:78:07:2b:51:2f:d5:79:f5:34:c3:3a:fe: 4a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:18:82:55:37:26:96:BB:37:C1:B3:A5:A9:9F:E9:C7:53:49:F3:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a97224ad-17dd-39ad-b6c1-30822ebef99e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:e5:bf:b9:d2:6c:9f:04:76:9d:a3:7d:b4:4e:f5:2e:91:98: a5:1e:5d:a0:f9:f5:b4:ee:b6:27:a9:d5:c3:08:9a:ad:55:e6: cf:fc:e8:19:5b:f7:7e:5b:39:49:b2:8a:55:ae:86:8e:7c:81: 85:a6:15:78:dd:ec:c5:9b:71:fe:05:00:ff:c7:84:88:60:dd: ba:09:24:ff:d7:de:72:aa:d6:78:a3:57:d1:4e:8a:8c:ee:9c: 2d:5b:ab:2c:36:b5:b4:76:44:e0:93:e0:f9:d9:50:24:bb:90: 7c:a2:b2:22:56:ee:13:78:17:8a:87:18:b5:17:ce:3c:ff:cf: 7c:20:72:ca:12:9d:b7:fc:50:b4:72:92:b7:0f:25:3a:26:47: 43:db:bf:b9:83:fb:07:49:7b:91:b6:fc:5c:7e:a3:1e:94:fb: 39:ff:fc:32:1d:af:78:5e:16:fc:bb:67:39:88:e4:b1:75:54: b1:29:7c:d8:f5:dd:c6:67:ad:6a:77:9c:a1:9c:bf:5f:22:c9: 8d:30:67:d1:fc:a6:ac:e0:11:d6:b8:cc:6f:7e:fc:16:c1:9d: af:84:b5:75:a7:4c:e6:3f:29:88:86:07:d8:96:fa:f7:f0:db: d6:b6:ce:61:07:9b:4b:d8:6a:f4:02:70:44:24:51:1d:e9:cd: 0e:26:3c:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0HzTczkVVEQvmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk OWRhOGExZWUtOWM3ZS00MmM5LWIxNGMtNjIxMDllMDg5YWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWHDPpz+otVCghlMiy0qOsFIAYNQn+A+1ZN/ T0PR+SjDt13hC/sGmv+duTdl3rVViZQ1FP6QHx25pv02lIIV+quaktocfIrT9q2r +Z+r1j24GTzKVA3INAGbtd1PmdGOVOoaBcDfQjuDRRgo9Bya+ajDAxcWTPpDId9l Cc/Uv59OpmOf+2EiDYRpDbBXCE22yR8nwr5Ek35h0iC6h54TyGYcQzJGRxvTa0n/ 4SzDIM3Q9Cg43e48qL77Jq9rHm3ivspdfB/EAgsp4ctFWHIkLIlzRWDg8eYCu/UP I6S7g3elCJXc19fdQcbhdUzm5QuGrzt4BytRL9V59TTDOv5KKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwYglU3Jpa7N8Gzpamf6cdTSfMGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTk3MjI0YWQtMTdkZC0z OWFkLWI2YzEtMzA4MjJlYmVmOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9EsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjlv7nSbJ8Edp2jfbRO9S6RmKUeXaD59bTutiep1cMImq1V5s/86Blb 935bOUmyilWuho58gYWmFXjd7MWbcf4FAP/HhIhg3boJJP/X3nKq1nijV9FOiozu nC1bqyw2tbR2ROCT4PnZUCS7kHyisiJW7hN4F4qHGLUXzjz/z3wgcsoSnbf8ULRy krcPJTomR0Pbv7mD+wdJe5G2/Fx+ox6U+zn//DIdr3heFvy7ZzmI5LF1VLEpfNj1 3cZnrWp3nKGcv18iyY0wZ9H8pqzgEda4zG9+/BbBna+EtXWnTOY/KYiGB9iW+vfw 29a2zmEHm0vYavQCcEQkUR3pzQ4mPP8= -----END CERTIFICATE-----Generated at Sun Jun 29 17:56:01 2025 by rpki-client