$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3aafe85-c8b6-3789-be4c-594350312c1d.roa File: e3aafe85-c8b6-3789-be4c-594350312c1d.roa (raw, json) Hash identifier: lMENG5kEK/mppNIa6LhaTfReMXcQ4gUe8xLVgUwyEYo= Subject key identifier: 7A:8B:AC:8C:D7:C1:56:F0:D2:B9:CC:D8:42:DA:E7:36:41:FF:38:0F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A51D079FFBAA560D525E98500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3aafe85-c8b6-3789-be4c-594350312c1d.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 34164 IP address blocks: 23.214.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:79:ff:ba:a5:60:d5:25:e9:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=96d3fa67-ff1d-400b-b0ba-a12e7eb9fe2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0d:8c:3f:51:8e:76:a6:c4:74:6e:6e:ef:c2: 10:38:4d:5f:a2:55:5b:cc:23:4a:3c:1c:47:5c:8d: 3b:32:b0:5b:72:64:f2:8a:03:85:f8:01:a0:12:44: 37:9b:dc:00:bd:67:07:36:13:9b:29:34:2c:05:ff: 44:e2:64:5a:bc:cb:2b:20:ab:1f:da:14:f3:39:52: f2:9b:0f:9c:7c:f9:81:d8:31:ec:9c:e1:88:9b:4c: 54:17:ce:ab:d6:3c:53:1a:34:b8:d0:03:73:3b:a6: 49:93:7a:c3:8a:06:13:f0:29:95:7f:38:57:47:f5: 62:6d:46:18:f7:af:54:1e:8f:dc:b7:18:fa:18:3f: 8c:41:ea:7f:98:42:4b:56:0f:59:8c:77:13:3d:2a: c2:19:1b:38:ab:2e:5c:aa:6c:aa:f3:6b:24:8f:8b: d7:1e:b9:ee:5b:0e:45:de:0f:03:1b:ac:2c:4a:d9: 10:25:f5:6c:70:f4:d1:7b:bf:6f:45:b8:a9:e2:d2: cf:86:5e:62:90:f2:47:e2:0e:18:84:7f:b4:9b:21: 3d:6d:01:26:5e:7f:0b:12:ec:78:38:1e:cf:e2:49: 67:cd:69:5c:29:99:35:b5:3e:8b:ad:b3:c7:93:1b: 01:85:cb:4b:6e:39:92:5b:1e:8d:a1:fd:ae:35:f9: b5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8B:AC:8C:D7:C1:56:F0:D2:B9:CC:D8:42:DA:E7:36:41:FF:38:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3aafe85-c8b6-3789-be4c-594350312c1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:86:87:b9:90:76:ef:45:01:a6:4b:d4:c2:65:31:79:06:1f: d5:39:33:fa:0e:49:7f:ba:ea:fa:c4:8d:b9:3f:73:4c:3f:df: 41:fa:a1:c0:5e:df:10:12:d1:2c:a3:34:e0:ba:18:8d:6a:35: d0:fc:1a:c3:e6:86:99:11:56:a7:f6:81:a3:62:37:68:91:30: 45:83:95:c8:c2:19:97:7f:08:80:1e:b1:3e:88:b8:9e:0b:5e: 98:51:0f:5d:2d:bc:8b:6a:f7:26:43:e2:37:03:e1:92:d6:2b: 7a:63:e4:f4:71:72:b3:5b:18:5a:49:f8:34:b8:90:67:4d:55: a4:5c:39:85:ec:0a:bd:e3:f8:69:53:1b:34:fd:9a:56:47:4c: 83:b5:87:5e:8a:a5:22:01:4b:7a:c7:70:46:d2:51:68:46:b2: 8b:1e:6d:1d:2d:5a:b1:43:15:73:51:58:99:ac:64:0d:db:d1: 26:92:42:48:72:29:04:d2:da:b3:82:0a:99:1f:be:50:df:6a: 18:49:39:17:a2:3c:e4:d7:d6:fb:61:d9:fa:d2:d1:84:f8:d0: 00:fc:55:c4:e3:aa:ef:ce:15:87:7c:60:18:a1:69:87:ce:b4: 2c:ee:11:59:bc:28:df:a4:cd:70:ed:c1:01:ed:94:fe:49:40: 1d:b1:57:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0Hn/uqVg1SXphQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk OTZkM2ZhNjctZmYxZC00MDBiLWIwYmEtYTEyZTdlYjlmZTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA2MP1GOdqbEdG5u78IQOE1folVbzCNKPBxH XI07MrBbcmTyigOF+AGgEkQ3m9wAvWcHNhObKTQsBf9E4mRavMsrIKsf2hTzOVLy mw+cfPmB2DHsnOGIm0xUF86r1jxTGjS40ANzO6ZJk3rDigYT8CmVfzhXR/VibUYY 969UHo/ctxj6GD+MQep/mEJLVg9ZjHcTPSrCGRs4qy5cqmyq82skj4vXHrnuWw5F 3g8DG6wsStkQJfVscPTRe79vRbip4tLPhl5ikPJH4g4YhH+0myE9bQEmXn8LEux4 OB7P4klnzWlcKZk1tT6LrbPHkxsBhctLbjmSWx6Nof2uNfm1UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqLrIzXwVbw0rnM2ELa5zZB/zgPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTNhYWZlODUtYzhiNi0z Nzg5LWJlNGMtNTk0MzUwMzEyYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ZbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaGh7mQdu9FAaZL1MJlMXkGH9U5M/oOSX+66vrEjbk/c0w/30H6ocBe 3xAS0SyjNOC6GI1qNdD8GsPmhpkRVqf2gaNiN2iRMEWDlcjCGZd/CIAesT6IuJ4L XphRD10tvItq9yZD4jcD4ZLWK3pj5PRxcrNbGFpJ+DS4kGdNVaRcOYXsCr3j+GlT GzT9mlZHTIO1h16KpSIBS3rHcEbSUWhGsosebR0tWrFDFXNRWJmsZA3b0SaSQkhy KQTS2rOCCpkfvlDfahhJOReiPOTX1vth2frS0YT40AD8VcTjqu/OFYd8YBihaYfO tCzuEVm8KN+kzXDtwQHtlP5JQB2xVxQ= -----END CERTIFICATE-----Generated at Sun Jun 29 14:15:28 2025 by rpki-client