$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddf7c400-7bdd-3b41-affe-e37b1b14a6bd.roa File: ddf7c400-7bdd-3b41-affe-e37b1b14a6bd.roa (raw, json) Hash identifier: /9SDw0OApkNgvlutHwlUWL6RmZn5O0XsbKj3OzVBkEY= Subject key identifier: 51:09:F5:49:48:0F:A7:76:60:03:D2:AF:AA:64:37:64:AC:6E:1C:EF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A15A2CCA0A0CCB16568C300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddf7c400-7bdd-3b41-affe-e37b1b14a6bd.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.39.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:a2:cc:a0:a0:cc:b1:65:68:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=8c93d222-09ef-4fde-ab63-d9be076d3a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cd:d1:92:49:e8:20:f8:59:19:4d:5c:f3:2f: 1b:10:ee:75:8b:8c:81:c9:98:57:da:16:49:e3:93: b8:b5:93:28:5b:90:c6:39:f2:0a:1a:cd:61:3d:94: 63:c7:dd:c2:1a:25:e5:82:8e:a8:1b:bd:f4:6a:41: 58:59:43:2b:26:96:02:10:14:3c:ec:d6:8a:9a:fe: 93:70:76:4f:cf:7d:ed:7b:b1:80:e8:13:b7:32:79: 9e:72:38:8f:41:7e:09:23:cd:9d:a8:d8:1a:7f:84: a1:df:c0:da:0c:64:f3:0b:20:18:dc:21:93:20:db: d5:69:f1:98:ea:34:0d:15:4b:73:06:21:ed:c1:ad: 73:a1:d7:69:f9:44:a6:4d:bd:6d:2a:44:bd:02:ed: 17:90:2f:b0:36:a6:1e:bc:a9:53:d1:a8:1c:59:28: 7c:ba:8f:23:24:11:91:7e:ad:be:c1:bd:e7:c1:0a: b7:91:89:b1:43:76:ed:c4:1b:fe:b6:12:c2:2e:0d: c1:fd:13:64:55:a0:ef:5b:ad:ab:47:c6:13:a6:ee: 13:0a:9c:52:e3:8f:20:c2:d9:27:67:62:32:ff:cd: 4e:15:74:65:71:6c:38:46:94:00:ab:eb:4b:da:4a: 0a:4a:b3:0f:19:17:8e:48:74:6b:0c:a5:12:a1:1d: 39:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:09:F5:49:48:0F:A7:76:60:03:D2:AF:AA:64:37:64:AC:6E:1C:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddf7c400-7bdd-3b41-affe-e37b1b14a6bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:77:7d:f4:bd:fe:74:15:4e:13:d4:5d:63:7a:ca:27:45:ab: 49:d0:69:d1:9a:5d:3f:13:b1:91:13:77:53:d0:15:f8:9c:6d: 33:dd:67:25:8a:5e:4c:98:95:54:0c:4c:b1:9f:c5:20:e9:88: fb:6c:0c:54:82:2d:35:72:a8:36:a8:27:1b:61:86:3f:a5:15: 63:1a:96:ec:ed:73:e1:93:9c:45:db:a8:55:fa:c7:4b:f1:87: 97:d1:35:3c:57:7a:18:37:8c:9d:76:6f:b1:df:36:ee:c2:79: 67:1d:5e:b5:84:9c:7f:cd:90:72:5f:d8:f4:81:1c:e6:41:10: e1:cc:41:d3:1b:69:02:42:c4:e2:44:8a:9a:1f:7f:5f:6a:0c: e0:c8:a2:c7:19:56:9b:01:c3:8e:78:42:31:96:cf:43:4c:17: a4:19:ed:71:6c:5e:b2:36:98:c9:be:5d:d3:da:ce:5c:08:bb: 9d:a5:25:d9:1b:1d:0f:93:1a:c9:07:c8:09:06:31:e6:37:14: 12:b3:6b:40:28:c9:75:5c:a1:cd:61:ec:24:c1:ad:99:df:3f: 22:d4:4c:cf:a5:be:54:18:83:65:ea:14:5f:9f:20:3f:c5:42: df:4b:ae:6e:e2:ad:02:19:a2:a6:32:f3:01:80:d0:7a:f2:14: d2:07:ad:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FaLMoKDMsWVowwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk OGM5M2QyMjItMDllZi00ZmRlLWFiNjMtZDliZTA3NmQzYTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis3RkknoIPhZGU1c8y8bEO51i4yByZhX2hZJ 45O4tZMoW5DGOfIKGs1hPZRjx93CGiXlgo6oG730akFYWUMrJpYCEBQ87NaKmv6T cHZPz33te7GA6BO3MnmecjiPQX4JI82dqNgaf4Sh38DaDGTzCyAY3CGTINvVafGY 6jQNFUtzBiHtwa1zoddp+USmTb1tKkS9Au0XkC+wNqYevKlT0agcWSh8uo8jJBGR fq2+wb3nwQq3kYmxQ3btxBv+thLCLg3B/RNkVaDvW62rR8YTpu4TCpxS448gwtkn Z2Iy/81OFXRlcWw4RpQAq+tL2koKSrMPGReOSHRrDKUSoR05pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEJ9UlID6d2YAPSr6pkN2SsbhzvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGRmN2M0MDAtN2JkZC0z YjQxLWFmZmUtZTM3YjFiMTRhNmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyfnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFF3ffS9/nQVThPUXWN6yidFq0nQadGaXT8TsZETd1PQFficbTPdZyWK XkyYlVQMTLGfxSDpiPtsDFSCLTVyqDaoJxthhj+lFWMaluztc+GTnEXbqFX6x0vx h5fRNTxXehg3jJ12b7HfNu7CeWcdXrWEnH/NkHJf2PSBHOZBEOHMQdMbaQJCxOJE ipoff19qDODIoscZVpsBw454QjGWz0NMF6QZ7XFsXrI2mMm+XdPazlwIu52lJdkb HQ+TGskHyAkGMeY3FBKza0AoyXVcoc1h7CTBrZnfPyLUTM+lvlQYg2XqFF+fID/F Qt9Lrm7irQIZoqYy8wGA0HryFNIHrao= -----END CERTIFICATE-----Generated at Sun Jun 29 12:45:53 2025 by rpki-client