$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d09c1717-5034-3311-9a43-0cc97cfb992d.roa File: d09c1717-5034-3311-9a43-0cc97cfb992d.roa (raw, json) Hash identifier: vH3eoquiWPvFwuenGM3FzutysVE2GCni7AMMhi691A0= Subject key identifier: 34:4E:22:92:84:08:52:CF:93:D6:59:FC:9A:05:B2:A3:B2:05:91:95 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A159E7A30BE6FF6739A6880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d09c1717-5034-3311-9a43-0cc97cfb992d.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.36.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:9e:7a:30:be:6f:f6:73:9a:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=1ef915bd-6170-468f-8e9b-117210be41c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:74:56:0c:74:71:ab:ed:48:f4:c3:6a:0e:b5: 6e:19:aa:75:f7:73:18:91:55:53:24:7c:fd:7f:f5: 87:0a:4e:54:a6:dc:e0:a8:a4:ba:93:97:99:2c:ab: 39:c9:d8:60:2c:bc:4b:c1:97:c0:63:96:ca:96:cc: 60:02:f4:91:2c:d8:85:bb:10:5f:e6:02:b2:83:54: a3:e3:5f:62:7f:08:2f:11:58:68:69:96:4a:cc:d7: 3a:03:e0:2b:d3:67:a4:d2:66:37:80:ea:fd:93:8b: 67:7f:9c:f2:97:3b:07:8f:cd:ab:0d:b3:7f:13:e5: e5:53:38:17:30:4e:b9:5c:ef:3e:c6:3e:6f:ab:3a: e0:c4:18:82:e0:ac:69:5f:16:b5:06:e9:c0:43:2b: 4d:67:58:86:a6:ee:a7:38:b4:12:f0:28:02:c6:ed: e4:cf:73:69:f2:d7:09:b5:a0:7d:c3:20:f3:56:fd: 3b:3a:b7:df:a3:f0:7f:54:1b:ad:36:ea:cd:5d:e7: 33:1d:7c:d6:b6:b3:9f:49:eb:71:5d:aa:8d:04:6b: d5:35:a9:f1:b2:9b:5c:38:ae:a2:87:37:70:2d:5a: ad:ce:dc:57:19:31:f0:3c:af:ff:e4:84:5c:38:e8: 56:64:8f:90:1a:45:14:6c:28:eb:f6:c4:cc:b4:13: 1d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4E:22:92:84:08:52:CF:93:D6:59:FC:9A:05:B2:A3:B2:05:91:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d09c1717-5034-3311-9a43-0cc97cfb992d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:11:e2:4c:c9:57:3b:96:a5:66:90:24:68:a6:1b:8b:2e:42: 62:53:04:23:af:18:c3:da:70:60:1f:e4:45:4e:77:13:d9:b9: 17:9d:6c:69:b2:c0:47:69:04:6c:78:62:eb:d6:5e:11:9e:0d: 46:ff:2b:9e:ac:a9:59:eb:c4:60:c6:33:5f:8b:08:bf:9d:c4: b8:2d:d3:17:ad:2b:61:7d:07:51:84:b5:05:c1:36:e6:6a:e4: 54:b2:7f:88:10:84:43:59:d0:5a:6c:c6:b9:96:ac:af:a2:e7: a3:51:65:dd:44:f6:b9:cb:0c:2a:45:3b:fc:02:30:ef:4e:07: 3c:7e:cc:24:f7:e4:63:d1:31:7c:cc:87:fd:74:ce:34:f5:5b: f3:14:70:db:dc:95:37:c6:3b:d1:8b:0f:32:1f:d6:f8:63:8b: dd:aa:be:c7:cb:0e:ad:a5:95:41:bb:57:8a:89:ee:0d:32:af: f4:b1:f9:88:5e:86:a7:40:07:52:74:85:68:55:02:12:e2:3a: b8:3f:97:bb:1b:13:a9:15:ee:40:c3:df:a8:a5:f2:d7:15:0b: da:be:22:a3:b8:3e:2c:ed:ea:39:35:6a:10:b1:ff:70:bc:82: b0:d1:05:48:eb:71:8c:7a:d0:e7:3f:8e:97:9b:38:b2:1a:68: f8:4f:bd:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZ56ML5v9nOaaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk MWVmOTE1YmQtNjE3MC00NjhmLThlOWItMTE3MjEwYmU0MWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXRWDHRxq+1I9MNqDrVuGap193MYkVVTJHz9 f/WHCk5UptzgqKS6k5eZLKs5ydhgLLxLwZfAY5bKlsxgAvSRLNiFuxBf5gKyg1Sj 419ifwgvEVhoaZZKzNc6A+Ar02ek0mY3gOr9k4tnf5zylzsHj82rDbN/E+XlUzgX ME65XO8+xj5vqzrgxBiC4KxpXxa1BunAQytNZ1iGpu6nOLQS8CgCxu3kz3Np8tcJ taB9wyDzVv07Orffo/B/VButNurNXeczHXzWtrOfSetxXaqNBGvVNanxsptcOK6i hzdwLVqtztxXGTHwPK//5IRcOOhWZI+QGkUUbCjr9sTMtBMduQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDROIpKECFLPk9ZZ/JoFsqOyBZGVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDA5YzE3MTctNTAzNC0z MzExLTlhNDMtMGNjOTdjZmI5OTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFySkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcR4kzJVzuWpWaQJGimG4suQmJTBCOvGMPacGAf5EVOdxPZuRedbGmy wEdpBGx4YuvWXhGeDUb/K56sqVnrxGDGM1+LCL+dxLgt0xetK2F9B1GEtQXBNuZq 5FSyf4gQhENZ0FpsxrmWrK+i56NRZd1E9rnLDCpFO/wCMO9OBzx+zCT35GPRMXzM h/10zjT1W/MUcNvclTfGO9GLDzIf1vhji92qvsfLDq2llUG7V4qJ7g0yr/Sx+Yhe hqdAB1J0hWhVAhLiOrg/l7sbE6kV7kDD36il8tcVC9q+IqO4Pizt6jk1ahCx/3C8 grDRBUjrcYx60Oc/jpebOLIaaPhPveA= -----END CERTIFICATE-----Generated at Mon Jun 30 11:58:16 2025 by rpki-client