$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5ec0276-01a5-3233-a77c-f326704a9b71.roa File: c5ec0276-01a5-3233-a77c-f326704a9b71.roa (raw, json) Hash identifier: 4tT/aN3cHjEgNI3rxF+O3oVyJl2fTfnwc4qBVSFWwBY= Subject key identifier: AC:D9:1D:63:C9:D7:8B:7E:86:3F:77:54:82:F3:38:7F:DE:2E:9D:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B329A0646BDC21480C680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5ec0276-01a5-3233-a77c-f326704a9b71.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 35994 IP address blocks: 23.55.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:32:9a:06:46:bd:c2:14:80:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=ca3858fe-d695-4243-894a-0f18ca2c98ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:37:6b:39:83:dd:fb:2f:d3:36:13:ed:c7:81: 4d:6f:4f:e8:21:db:1c:a7:4e:8e:fd:91:37:8e:f3: 55:a3:74:f0:f3:81:c1:c0:7e:ff:35:c9:b6:70:38: 8d:58:4c:fa:01:5d:37:9c:25:c2:9b:48:78:47:c1: 35:c9:be:99:65:7e:14:3a:ea:6f:fc:d5:89:a1:72: 4a:b8:1e:77:a9:69:6d:3d:6d:fd:06:41:6f:e4:91: 81:df:03:ae:2c:1c:ae:a9:73:48:6d:35:dd:dd:66: 8c:cc:5a:64:33:dc:3c:cf:91:5f:c5:82:94:d6:ff: 83:52:49:1d:d1:4c:77:15:ae:72:91:17:9b:8c:92: bd:20:01:29:ef:7e:85:58:d2:13:bf:dc:13:29:50: d8:35:b4:49:f7:06:dd:f3:15:9e:bd:17:f4:ee:b0: 3b:d7:30:9c:57:f5:9c:51:88:02:2f:86:4a:0c:5b: b6:c0:1a:21:0b:43:9b:a2:29:99:df:ff:ae:8c:9e: 64:6e:bc:91:52:40:a8:c5:09:66:fd:50:69:64:be: f8:f2:2c:19:36:59:a9:11:62:0b:38:28:de:b5:22: 73:fc:bd:77:90:4a:b4:20:17:0c:f3:5e:7b:aa:f2: 6f:52:77:d3:34:bc:26:54:43:d2:a1:5e:7f:7b:66: fb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D9:1D:63:C9:D7:8B:7E:86:3F:77:54:82:F3:38:7F:DE:2E:9D:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5ec0276-01a5-3233-a77c-f326704a9b71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.55.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:16:a4:1e:a2:a8:87:40:8b:bf:ca:9a:d0:4a:1f:55:29:0f: 8d:56:41:4a:8d:b3:86:e9:f1:92:6f:70:11:06:eb:f3:88:45: 48:20:12:76:1c:85:d5:3d:e8:e8:84:43:ff:c4:24:c8:ed:d3: 2c:4a:9a:19:98:5b:b9:6f:76:cb:f0:c5:c7:80:8f:45:3c:fa: 2c:c4:dc:3f:55:ef:4e:c8:bb:5d:84:1c:c5:42:16:da:d6:58: a0:0f:4e:71:e0:1e:71:22:82:c3:4d:17:17:b4:2e:2c:a5:c7: 96:96:54:ce:da:c8:a3:e6:01:97:d3:52:18:70:bc:a5:78:c7: 7d:8e:9c:a1:a4:08:7c:ff:d2:90:aa:47:dc:5e:2b:6a:7f:99: f7:51:25:71:f8:6d:f6:8e:af:b7:f3:4d:cf:43:fb:b5:b7:1e: b2:ec:3b:f3:7a:b8:27:9a:b1:ea:3e:d8:10:15:47:6f:dd:04: bf:ac:bf:78:e7:0b:95:88:fd:a5:69:41:d7:6b:44:d4:37:a2: 02:c5:f8:79:bb:b3:9a:90:4c:05:d1:2b:1a:00:e1:27:1e:f7: cf:12:6c:9a:5d:8b:99:bd:c7:f7:c0:e1:49:15:5a:74:c5:b9: b6:74:07:2c:71:5a:f3:c0:fe:c6:13:b7:c4:8e:27:b0:67:4d: e2:9b:f4:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOzKaBka9whSAxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk Y2EzODU4ZmUtZDY5NS00MjQzLTg5NGEtMGYxOGNhMmM5OGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjdrOYPd+y/TNhPtx4FNb0/oIdscp06O/ZE3 jvNVo3Tw84HBwH7/Ncm2cDiNWEz6AV03nCXCm0h4R8E1yb6ZZX4UOupv/NWJoXJK uB53qWltPW39BkFv5JGB3wOuLByuqXNIbTXd3WaMzFpkM9w8z5FfxYKU1v+DUkkd 0Ux3Fa5ykRebjJK9IAEp736FWNITv9wTKVDYNbRJ9wbd8xWevRf07rA71zCcV/Wc UYgCL4ZKDFu2wBohC0OboimZ3/+ujJ5kbryRUkCoxQlm/VBpZL748iwZNlmpEWIL OCjetSJz/L13kEq0IBcM8157qvJvUnfTNLwmVEPSoV5/e2b7rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzZHWPJ14t+hj93VILzOH/eLp3cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzVlYzAyNzYtMDFhNS0z MjMzLWE3N2MtZjMyNjcwNGE5YjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzfqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYWpB6iqIdAi7/KmtBKH1UpD41WQUqNs4bp8ZJvcBEG6/OIRUggEnYc hdU96OiEQ//EJMjt0yxKmhmYW7lvdsvwxceAj0U8+izE3D9V707Iu12EHMVCFtrW WKAPTnHgHnEigsNNFxe0Liylx5aWVM7ayKPmAZfTUhhwvKV4x32OnKGkCHz/0pCq R9xeK2p/mfdRJXH4bfaOr7fzTc9D+7W3HrLsO/N6uCeaseo+2BAVR2/dBL+sv3jn C5WI/aVpQddrRNQ3ogLF+Hm7s5qQTAXRKxoA4Sce988SbJpdi5m9x/fA4UkVWnTF ubZ0ByxxWvPA/sYTt8SOJ7BnTeKb9J8= -----END CERTIFICATE-----Generated at Sun Jun 29 12:45:40 2025 by rpki-client