$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f52f0ffa-d39c-32b0-9755-0ef750750992.roa File: f52f0ffa-d39c-32b0-9755-0ef750750992.roa (raw, json) Hash identifier: APpN5uLGCUlmjo5hpr81st/yYPSyz0koYlMnSZX8SPM= Subject key identifier: 8A:33:96:41:BC:87:A9:95:14:B6:82:0F:9E:2E:B3:61:CC:40:7C:4E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A1595E2E4AD1BA386553F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f52f0ffa-d39c-32b0-9755-0ef750750992.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.38.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:95:e2:e4:ad:1b:a3:86:55:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=9b2f2bac-f72b-413e-bd55-9227feb9d058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9a:77:d9:ca:f7:b0:a3:19:27:e5:aa:43:c8: aa:ba:49:61:56:43:d4:96:b6:a0:b1:b3:ef:56:80: 8b:6e:72:8a:55:0b:c4:14:99:93:c4:42:b2:5d:96: 7a:c3:03:3e:56:bd:60:49:80:39:20:b0:e4:7b:a8: b9:82:6c:49:cf:5a:4b:f2:b9:62:83:3e:1a:90:7a: 5a:96:c6:a1:6f:5e:fb:3b:dc:2d:d1:cd:91:c8:7a: 98:b7:77:34:d9:a8:1e:f6:a0:7a:42:75:bb:7e:19: c0:fc:d6:72:f1:05:3c:0d:2b:e7:47:af:36:a0:10: b1:5b:38:20:62:0a:ef:7f:5e:ab:a1:dc:f0:50:ab: a7:92:bd:e0:a3:ea:74:91:ac:32:10:01:3f:3d:a5: 2e:4c:95:41:8f:9e:5f:94:8d:42:ee:d9:81:41:c2: 6e:cb:12:eb:4a:08:61:a6:af:be:87:c1:0d:d7:10: 56:50:3f:5f:52:f9:fd:b9:65:56:a2:58:54:92:13: fe:bd:99:91:49:e3:9a:6d:33:8f:23:34:50:79:20: 2d:63:fc:dd:68:5c:94:9e:61:e1:27:ce:47:38:cb: 35:3b:f4:58:06:fd:34:ba:b5:13:5c:54:f5:c1:4f: 43:5a:fe:5c:09:1a:df:c4:d9:07:9a:c6:6e:8a:af: d7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:33:96:41:BC:87:A9:95:14:B6:82:0F:9E:2E:B3:61:CC:40:7C:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f52f0ffa-d39c-32b0-9755-0ef750750992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:49:da:5c:06:61:3c:ff:09:5e:70:6a:31:ad:67:d7:f6:81: ba:e4:11:78:20:35:ae:1f:09:7c:58:38:b2:44:e1:63:08:c2: 7b:8a:2d:ce:a1:d5:53:09:6d:3f:e3:36:e3:e5:f2:08:98:0a: 49:42:e5:7e:09:b1:33:e4:09:32:f2:2b:6b:91:96:f9:99:c8: 7e:1a:fe:e3:54:3b:8a:74:52:8f:35:fa:27:eb:5d:a5:17:0f: 36:db:83:21:eb:fa:28:fe:5f:be:eb:2f:19:13:22:4d:11:58: 72:e0:45:14:2b:f6:97:14:15:b7:2a:d6:6b:07:28:44:9c:5b: 58:d6:44:85:cd:64:23:fb:31:f0:e2:80:f5:52:d2:75:11:48: 84:da:c3:41:d0:ff:8b:6a:17:49:74:11:ba:94:03:4c:dd:ea: 49:73:74:75:45:26:7d:7d:ff:97:52:13:1a:38:76:60:69:3e: 56:f2:fc:58:39:e7:06:d7:ff:38:69:0d:12:e7:2b:61:6e:1c: 1f:8c:23:b1:f2:b4:4a:f4:56:a9:96:4c:08:27:8a:0f:5d:bd: cc:c7:2d:52:05:8d:0f:36:0e:1f:92:07:b2:27:d4:38:3b:2e: c9:f3:38:ea:a1:78:d2:de:1a:51:1c:1f:45:16:c1:32:2d:a7: 4a:cc:3c:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZXi5K0bo4ZVPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk OWIyZjJiYWMtZjcyYi00MTNlLWJkNTUtOTIyN2ZlYjlkMDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpp32cr3sKMZJ+WqQ8iquklhVkPUlragsbPv VoCLbnKKVQvEFJmTxEKyXZZ6wwM+Vr1gSYA5ILDke6i5gmxJz1pL8rligz4akHpa lsahb177O9wt0c2RyHqYt3c02age9qB6QnW7fhnA/NZy8QU8DSvnR682oBCxWzgg Ygrvf16rodzwUKunkr3go+p0kawyEAE/PaUuTJVBj55flI1C7tmBQcJuyxLrSghh pq++h8EN1xBWUD9fUvn9uWVWolhUkhP+vZmRSeOabTOPIzRQeSAtY/zdaFyUnmHh J85HOMs1O/RYBv00urUTXFT1wU9DWv5cCRrfxNkHmsZuiq/XHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIozlkG8h6mVFLaCD54us2HMQHxOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjUyZjBmZmEtZDM5Yy0z MmIwLTk3NTUtMGVmNzUwNzUwOTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyZ5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdJ2lwGYTz/CV5wajGtZ9f2gbrkEXggNa4fCXxYOLJE4WMIwnuKLc6h 1VMJbT/jNuPl8giYCklC5X4JsTPkCTLyK2uRlvmZyH4a/uNUO4p0Uo81+ifrXaUX DzbbgyHr+ij+X77rLxkTIk0RWHLgRRQr9pcUFbcq1msHKEScW1jWRIXNZCP7MfDi gPVS0nURSITaw0HQ/4tqF0l0EbqUA0zd6klzdHVFJn19/5dSExo4dmBpPlby/Fg5 5wbX/zhpDRLnK2FuHB+MI7HytEr0VqmWTAgnig9dvczHLVIFjQ82Dh+SB7In1Dg7 LsnzOOqheNLeGlEcH0UWwTItp0rMPKc= -----END CERTIFICATE-----Generated at Sun Jun 29 13:40:02 2025 by rpki-client