$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbfdf8cc-52ba-3dd8-8124-bd9b036d60d8.roa File: dbfdf8cc-52ba-3dd8-8124-bd9b036d60d8.roa (raw, json) Hash identifier: Ah3HSLuJcabUAvu+NcvM+h+0C/SH3BoKncV/gg1YJgw= Subject key identifier: C9:3C:0B:C9:9B:76:35:75:AC:C5:72:78:C3:75:78:EF:28:7A:61:99 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4F05DF8E601E706C3EDBE0FC Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbfdf8cc-52ba-3dd8-8124-bd9b036d60d8.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 35994 IP address blocks: 23.196.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:df:8e:60:1e:70:6c:3e:db:e0:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=a41f68ee-ed9b-46d4-9623-2ec0cad34a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:84:51:4f:21:42:90:b8:f6:8c:3e:81:39:13: 6d:62:94:4b:94:44:e6:cf:43:51:a4:c5:91:61:fc: 7e:77:d9:dd:36:08:ff:e8:f6:87:86:a4:8c:67:f9: 2f:4d:4e:55:7d:b8:fe:d4:65:c1:21:7d:21:74:b6: 61:98:e4:f5:fb:e1:60:50:39:32:69:e0:e1:f1:b4: 46:0f:a6:42:a0:0b:1e:04:3d:ab:a3:c5:64:ea:03: 0b:88:85:4d:e1:32:08:d1:cb:91:a5:4f:9f:d6:cf: 85:a5:1c:a0:6e:a4:65:a8:bc:b6:65:91:57:53:8e: 0d:c9:94:09:65:e4:1c:a2:05:fb:e8:a9:17:49:db: e4:ff:12:be:7f:f6:fe:84:df:d4:9a:68:03:a8:57: e8:1e:ea:00:b9:ac:a4:45:ae:f9:07:d5:50:2f:7c: a9:95:63:cf:02:db:85:af:48:61:b7:7a:b4:fd:d6: c0:1b:d2:3a:d5:3e:5c:c8:c6:b7:24:bf:f9:d8:af: 72:fa:f8:f6:be:fa:04:e3:b5:15:0e:7b:05:f6:6b: b0:37:ce:26:2e:b0:46:60:88:28:c1:20:fd:f9:a9: e2:c9:62:00:ff:14:7c:ef:7d:98:a4:f9:26:25:ed: af:26:17:1c:de:42:a9:4d:79:d3:5e:00:4c:50:a3: cb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3C:0B:C9:9B:76:35:75:AC:C5:72:78:C3:75:78:EF:28:7A:61:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbfdf8cc-52ba-3dd8-8124-bd9b036d60d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:6d:0e:bd:74:9e:da:86:b5:ee:6c:48:2a:ac:13:68:84:e8: 78:03:70:ba:80:99:ca:d4:b3:f8:e0:ad:8d:09:9a:0f:18:f6: d9:3c:37:ea:96:f4:6d:7d:61:c1:87:d7:65:5c:8a:90:c6:35: d8:52:5c:d3:99:53:e4:92:04:6e:8b:12:3b:0b:49:90:23:0a: f3:4d:d3:4e:ac:9c:1b:50:cb:d7:3e:3c:db:4f:e4:4c:a0:a0: 43:25:fa:96:de:4c:c7:40:cd:f2:c9:e4:77:7e:58:86:ad:f4: dc:fe:4a:58:78:79:16:c6:fc:ff:a3:51:1d:ec:92:c0:94:de: 42:d1:1e:36:ba:bb:1a:cb:aa:88:e9:11:47:82:06:4d:da:56: 67:2d:70:f1:ec:f9:9d:ff:ac:0f:3c:ff:86:50:aa:2d:8a:bd: d2:6b:6b:2e:77:7a:b9:5f:39:30:ff:a4:a0:0e:47:27:68:a6: f8:50:0c:f0:d6:86:9d:1c:45:83:bb:f9:bc:57:ae:63:be:c1: 95:a2:7a:45:60:58:bd:50:45:7a:d9:45:5f:84:48:c8:cc:eb: c6:a3:d0:9e:50:bd:0f:09:a2:e9:07:e4:9b:80:06:58:71:39: 00:82:b4:63:f1:9b:d7:fd:04:bb:46:18:31:23:66:87:f3:59: e1:27:3e:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBd+OYB5wbD7b4PwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk YTQxZjY4ZWUtZWQ5Yi00NmQ0LTk2MjMtMmVjMGNhZDM0YTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooRRTyFCkLj2jD6BORNtYpRLlETmz0NRpMWR Yfx+d9ndNgj/6PaHhqSMZ/kvTU5Vfbj+1GXBIX0hdLZhmOT1++FgUDkyaeDh8bRG D6ZCoAseBD2ro8Vk6gMLiIVN4TII0cuRpU+f1s+FpRygbqRlqLy2ZZFXU44NyZQJ ZeQcogX76KkXSdvk/xK+f/b+hN/UmmgDqFfoHuoAuaykRa75B9VQL3yplWPPAtuF r0hht3q0/dbAG9I61T5cyMa3JL/52K9y+vj2vvoE47UVDnsF9muwN84mLrBGYIgo wSD9+aniyWIA/xR8732YpPkmJe2vJhcc3kKpTXnTXgBMUKPLwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMk8C8mbdjV1rMVyeMN1eO8oemGZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGJmZGY4Y2MtNTJiYS0z ZGQ4LTgxMjQtYmQ5YjAzNmQ2MGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8TkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9tDr10ntqGte5sSCqsE2iE6HgDcLqAmcrUs/jgrY0Jmg8Y9tk8N+qW 9G19YcGH12VcipDGNdhSXNOZU+SSBG6LEjsLSZAjCvNN006snBtQy9c+PNtP5Eyg oEMl+pbeTMdAzfLJ5Hd+WIat9Nz+Slh4eRbG/P+jUR3sksCU3kLRHja6uxrLqojp EUeCBk3aVmctcPHs+Z3/rA88/4ZQqi2KvdJray53erlfOTD/pKAORydopvhQDPDW hp0cRYO7+bxXrmO+wZWiekVgWL1QRXrZRV+ESMjM68aj0J5QvQ8JoukH5JuABlhx OQCCtGPxm9f9BLtGGDEjZofzWeEnPoc= -----END CERTIFICATE-----Generated at Sun Jun 29 13:44:35 2025 by rpki-client