$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afb9764f-3b2b-31be-bcca-e0c5c0051012.roa File: afb9764f-3b2b-31be-bcca-e0c5c0051012.roa (raw, json) Hash identifier: ftZWB6dlIQhhR+hkz25t8wasHazevH65WDyQocjScMo= Subject key identifier: 6B:0F:DE:43:EF:50:DC:E0:5A:5D:E6:CA:77:79:0E:54:B8:FD:A4:30 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B34C3809FF668C7A94C40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afb9764f-3b2b-31be-bcca-e0c5c0051012.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 6762 IP address blocks: 23.57.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:34:c3:80:9f:f6:68:c7:a9:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=45b835b1-4634-42b1-b349-10c62c71a2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6d:b9:d2:e4:c8:7e:c6:6c:5e:d5:5e:bc:5e: 7f:ac:ad:9e:0d:89:1a:97:02:20:18:7a:da:bd:69: 10:05:12:93:5c:39:59:c3:d3:c0:24:f3:b7:1c:eb: 0e:37:75:2d:66:87:80:4f:97:95:0c:c2:d3:3b:f3: 0c:52:78:cc:71:e4:76:41:72:e8:83:1f:09:99:f3: b0:0c:6e:c2:fb:d7:a9:c5:f0:58:f3:1e:18:09:4d: 6b:26:94:c3:ce:02:82:6c:0a:e2:33:cb:06:e0:ee: 90:62:1b:d5:0d:da:b4:f1:ab:1c:d1:03:c5:88:79: 63:46:a8:5d:a0:95:e8:ea:d9:a0:b9:bd:ee:b1:1c: a9:c8:7c:aa:77:9c:35:d3:ef:9f:a1:80:95:82:d7: c5:b5:e3:22:6c:02:48:fa:f7:dc:ae:b0:ad:4d:b8: d9:bc:5d:07:c9:b7:fc:6d:c5:f8:12:5f:8c:17:21: 25:76:37:f7:5f:9c:36:98:c3:04:67:6e:f9:54:2a: 38:fa:89:34:f3:c8:05:50:45:29:0d:7f:2c:3a:f8: e7:d2:3c:0f:bc:75:fe:f3:00:2d:25:4a:ec:f3:f9: b6:11:41:27:98:02:cb:86:6c:4e:b6:0f:cb:1d:ff: 24:c1:3f:11:13:02:15:d1:9f:46:c6:ac:0a:2f:3f: 8b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0F:DE:43:EF:50:DC:E0:5A:5D:E6:CA:77:79:0E:54:B8:FD:A4:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afb9764f-3b2b-31be-bcca-e0c5c0051012.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.57.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:4b:03:b6:5b:41:42:49:97:1f:10:76:a9:74:4a:99:14:df: 76:61:ff:91:aa:76:26:79:36:55:93:68:ea:b5:63:3c:e0:97: 8b:93:30:de:1f:6d:4b:5a:fe:0b:02:b8:b7:f9:49:77:a7:e1: e2:88:07:ff:47:df:3a:b7:c9:53:d2:f3:51:0e:31:35:c9:ed: 36:76:10:77:56:3c:f4:fe:e7:b1:c3:7c:e8:e7:3e:e5:ea:51: 79:90:85:1f:66:2f:dc:ba:09:b2:5b:04:89:40:5d:92:a3:97: 06:4f:cf:59:6c:f2:69:37:31:6f:b9:de:8e:13:f8:c1:55:16: e5:e2:ae:14:96:6f:98:e5:9f:63:a8:aa:a4:47:71:cd:f4:95: e9:fa:5d:42:8c:fa:f4:e5:f7:34:7a:74:10:63:e7:11:a1:45: cf:e4:7b:c2:f5:bb:60:53:ba:13:63:d6:3e:7f:82:19:2a:0b: b5:ef:33:40:97:d5:a4:4c:fe:d4:17:fa:1f:95:39:26:45:6e: 24:e0:5e:3a:00:38:ee:81:04:de:44:4b:7b:d1:18:1a:a4:be: 58:60:58:0e:d1:e6:0c:26:46:f2:fc:84:87:5b:40:92:8e:53: 33:a3:9b:71:15:ee:fc:df:06:78:51:0e:c4:ba:7a:ad:d7:5d: 0c:9f:1e:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOzTDgJ/2aMepTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk NDViODM1YjEtNDYzNC00MmIxLWIzNDktMTBjNjJjNzFhMmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG250uTIfsZsXtVevF5/rK2eDYkalwIgGHra vWkQBRKTXDlZw9PAJPO3HOsON3UtZoeAT5eVDMLTO/MMUnjMceR2QXLogx8JmfOw DG7C+9epxfBY8x4YCU1rJpTDzgKCbAriM8sG4O6QYhvVDdq08asc0QPFiHljRqhd oJXo6tmgub3usRypyHyqd5w10++foYCVgtfFteMibAJI+vfcrrCtTbjZvF0Hybf8 bcX4El+MFyEldjf3X5w2mMMEZ275VCo4+ok088gFUEUpDX8sOvjn0jwPvHX+8wAt JUrs8/m2EUEnmALLhmxOtg/LHf8kwT8REwIV0Z9GxqwKLz+L2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsP3kPvUNzgWl3mynd5DlS4/aQwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWZiOTc2NGYtM2IyYi0z MWJlLWJjY2EtZTBjNWMwMDUxMDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzlUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5LA7ZbQUJJlx8Qdql0SpkU33Zh/5GqdiZ5NlWTaOq1Yzzgl4uTMN4f bUta/gsCuLf5SXen4eKIB/9H3zq3yVPS81EOMTXJ7TZ2EHdWPPT+57HDfOjnPuXq UXmQhR9mL9y6CbJbBIlAXZKjlwZPz1ls8mk3MW+53o4T+MFVFuXirhSWb5jln2Oo qqRHcc30len6XUKM+vTl9zR6dBBj5xGhRc/ke8L1u2BTuhNj1j5/ghkqC7XvM0CX 1aRM/tQX+h+VOSZFbiTgXjoAOO6BBN5ES3vRGBqkvlhgWA7R5gwmRvL8hIdbQJKO UzOjm3EV7vzfBnhRDsS6eq3XXQyfHt0= -----END CERTIFICATE-----Generated at Sun Jun 29 20:18:59 2025 by rpki-client