$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce602c64-9faa-3e8d-96d0-e2251c3e8ba0.roa File: ce602c64-9faa-3e8d-96d0-e2251c3e8ba0.roa (raw, json) Hash identifier: +/QE72VD1SNfLjGuMuPSpQP2SgwLNei0aTmNAmTVCLI= Subject key identifier: 99:58:8C:1F:CC:53:22:3D:6B:DC:BB:FF:87:DC:4A:82:04:E2:06:D3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A15A504B6180C859096B0C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce602c64-9faa-3e8d-96d0-e2251c3e8ba0.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.41.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:a5:04:b6:18:0c:85:90:96:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=94292878-2791-4875-943a-1a28c4e45233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:91:5f:59:7f:bd:6d:6f:5b:e3:9e:7b:7f:46: 4c:fc:c2:26:f2:f3:ae:40:ee:a2:fd:cd:ef:62:02: de:ce:fe:ce:f7:a6:12:45:04:52:12:1c:3e:68:76: ea:5d:18:84:f3:b2:b2:63:c1:26:ca:8d:8a:40:6d: 92:db:13:39:cf:ed:6d:8a:ca:2e:b0:f7:97:99:f1: 1a:4d:af:ea:a6:75:ea:bb:75:9c:66:5c:0a:b4:07: 38:36:15:9b:24:a1:a4:be:d7:91:07:c8:ce:6b:4b: dc:8d:49:a8:91:45:55:86:b5:e8:4b:73:2c:69:92: 52:7f:11:26:ae:62:b1:59:12:f1:e2:19:f2:e6:53: 60:85:37:72:d2:5b:6b:d4:a1:67:b4:4e:ec:a5:f8: f4:8b:eb:1d:8e:83:72:c0:6f:8f:13:cd:bf:55:cd: 12:08:3c:95:8d:40:cd:83:cd:4d:0f:ce:b6:88:30: f7:9d:f6:8e:1e:d8:9f:05:d4:b1:65:e0:df:02:c9: ff:b5:b1:b8:96:ca:2a:89:1c:81:b6:2e:3f:37:bb: af:81:d1:53:35:4f:28:a6:8e:e9:55:d1:4a:cf:2b: 3b:3d:2a:92:3c:a1:4d:4c:04:41:5b:67:df:8b:ed: ed:10:b9:8a:5c:a9:33:9c:e0:ce:32:7a:09:de:7e: a9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:58:8C:1F:CC:53:22:3D:6B:DC:BB:FF:87:DC:4A:82:04:E2:06:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce602c64-9faa-3e8d-96d0-e2251c3e8ba0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:f1:af:e4:17:3c:54:b3:7c:bf:55:39:9b:95:26:ea:c3:5c: 22:2f:cb:15:08:62:5b:6d:c0:e4:66:31:13:df:63:ed:7b:2a: 1c:10:1c:15:38:0d:0a:cd:76:d0:f2:86:4f:2d:d3:27:47:0e: ea:1d:0d:e3:4f:54:02:91:2b:5b:cc:a2:21:3b:94:28:cc:d9: aa:8c:f2:84:84:62:21:e8:8b:a2:91:2d:45:4f:38:9a:91:7b: ea:80:b6:4b:40:23:55:1b:d0:6c:41:2d:97:40:7a:5f:b2:2c: d2:a5:d1:94:70:d9:2c:64:81:7f:66:1c:e6:12:19:1e:44:c0: 6d:a6:c9:56:38:bd:e9:92:3e:c2:9d:50:e9:5c:20:d5:e0:bc: 74:4c:6c:fc:06:b3:b2:09:8c:bb:02:23:e2:ea:5a:5f:14:47: 35:a1:72:06:1f:27:4c:c7:7b:f3:71:c5:3f:8c:6f:b4:4b:bf: c5:59:8b:79:8f:8a:48:18:a9:1c:fe:65:4f:b0:ba:3e:cc:9a: d8:4c:b7:89:ef:f5:43:df:7b:c2:f6:f3:5f:84:21:07:e1:84: af:60:d7:1c:19:d8:cf:7f:23:09:13:8f:5f:2a:44:0e:e9:13: 58:e7:cf:e2:3b:21:3f:7d:30:7d:6f:bd:24:a3:9a:00:ae:25: 87:cb:cb:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FaUEthgMhZCWsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk OTQyOTI4NzgtMjc5MS00ODc1LTk0M2EtMWEyOGM0ZTQ1MjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJFfWX+9bW9b4557f0ZM/MIm8vOuQO6i/c3v YgLezv7O96YSRQRSEhw+aHbqXRiE87KyY8Emyo2KQG2S2xM5z+1tisousPeXmfEa Ta/qpnXqu3WcZlwKtAc4NhWbJKGkvteRB8jOa0vcjUmokUVVhrXoS3MsaZJSfxEm rmKxWRLx4hny5lNghTdy0ltr1KFntE7spfj0i+sdjoNywG+PE82/Vc0SCDyVjUDN g81ND862iDD3nfaOHtifBdSxZeDfAsn/tbG4lsoqiRyBti4/N7uvgdFTNU8opo7p VdFKzys7PSqSPKFNTARBW2ffi+3tELmKXKkznODOMnoJ3n6pHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlYjB/MUyI9a9y7/4fcSoIE4gbTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2U2MDJjNjQtOWZhYS0z ZThkLTk2ZDAtZTIyNTFjM2U4YmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFylsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3xr+QXPFSzfL9VOZuVJurDXCIvyxUIYlttwORmMRPfY+17KhwQHBU4 DQrNdtDyhk8t0ydHDuodDeNPVAKRK1vMoiE7lCjM2aqM8oSEYiHoi6KRLUVPOJqR e+qAtktAI1Ub0GxBLZdAel+yLNKl0ZRw2SxkgX9mHOYSGR5EwG2myVY4vemSPsKd UOlcINXgvHRMbPwGs7IJjLsCI+LqWl8URzWhcgYfJ0zHe/NxxT+Mb7RLv8VZi3mP ikgYqRz+ZU+wuj7MmthMt4nv9UPfe8L281+EIQfhhK9g1xwZ2M9/IwkTj18qRA7p E1jnz+I7IT99MH1vvSSjmgCuJYfLy/Q= -----END CERTIFICATE-----Generated at Sun Jun 29 19:30:35 2025 by rpki-client