$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/58cd8b8a-7084-3970-a73c-bba5a474d7b5.roa File: 58cd8b8a-7084-3970-a73c-bba5a474d7b5.roa (raw, json) Hash identifier: u+eDi6Jd8pMx3ZF+83KG6kZk8EN5LuoBMbuTrNGdGi8= Subject key identifier: C9:AC:31:E9:FE:D8:75:FF:EC:39:84:D8:FA:0D:BE:04:44:E0:FC:22 Certificate issuer: /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Certificate serial: 010D0C9F43285849F23802956F60C4C2961F3900 Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/58cd8b8a-7084-3970-a73c-bba5a474d7b5.roa Signing time: Fri 23 May 2025 07:12:18 +0000 ROA not before: Fri 23 May 2025 07:12:18 +0000 ROA not after: Thu 21 Aug 2025 07:12:18 +0000 asID: 40065 IP address blocks: 23.154.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:38:02:95:6f:60:c4:c2:96:1f:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Validity Not Before: May 23 07:12:18 2025 GMT Not After : Aug 21 07:12:18 2025 GMT Subject: CN=7d78df5a-0f13-43d3-b61b-5caa3c8e32fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ca:5f:8c:f9:13:60:61:2e:85:d1:6d:99:a4: 6c:ae:f0:a6:60:ba:67:56:86:73:95:9a:63:30:aa: 4f:3d:49:29:77:86:45:1f:78:77:01:24:ab:e8:fa: 77:9c:fb:84:df:40:c4:01:fa:7e:61:7b:f6:9e:51: a1:b4:43:48:76:b2:36:43:94:86:a4:ae:e4:14:37: 21:d4:d5:13:73:77:98:e4:0e:a0:eb:19:ba:84:af: 2e:0a:88:b8:24:44:87:ed:8a:ba:c7:59:2e:a0:64: 28:92:5b:05:33:f8:e3:5e:86:eb:75:f3:e2:32:bc: a5:c9:5e:39:d6:5d:d2:a4:f6:d3:5d:f3:31:dd:03: 41:0e:47:96:c5:f1:09:ca:3d:bf:0b:97:cc:6f:89: d0:4d:a9:c5:04:96:db:fc:80:46:73:c8:83:ae:6c: 79:1d:6a:05:ee:c3:cc:0b:8a:1a:6b:da:98:df:64: a8:cf:4a:82:64:bc:6d:ed:c4:fe:e1:87:38:a0:0c: 04:ce:c5:81:3d:95:a6:3f:ef:1c:36:51:e7:7d:30: a6:de:6e:90:7d:a9:c2:e0:41:83:47:45:41:54:d6: 2d:0c:dc:35:1e:72:1d:04:1d:6b:1d:c6:22:92:ec: 27:5f:23:cd:0f:90:96:1d:aa:cc:2b:34:0f:55:32: 24:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AC:31:E9:FE:D8:75:FF:EC:39:84:D8:FA:0D:BE:04:44:E0:FC:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/58cd8b8a-7084-3970-a73c-bba5a474d7b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl X509v3 Authority Key Identifier: keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer sbgp-ipAddrBlock: critical IPv4: 23.154.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:6a:08:16:9d:1c:56:54:d6:47:16:61:8a:98:73:59:44:25: 8d:98:de:13:c6:af:d5:fe:f1:1c:ed:76:6c:81:f4:dd:a3:b1: 41:69:8e:b0:03:09:b0:76:de:79:e2:db:95:b9:d1:20:2b:2d: 78:94:7b:c3:45:9b:24:cd:ed:ec:98:18:b3:44:48:0c:a1:52: 90:8b:3a:74:b8:91:7e:d7:7e:87:4d:24:f3:ef:7c:a6:6f:3e: b7:ed:f2:75:91:8a:c4:09:1a:98:e7:b8:22:e2:3c:05:43:16: 58:f4:1a:86:e2:2f:3f:39:c5:32:bc:cd:6b:2a:29:97:6d:91: d5:71:59:b3:77:36:af:7b:9d:d1:0b:fc:e7:d2:38:49:f1:d5: 5d:11:f6:04:1b:76:30:3e:9e:fd:09:6f:e8:3a:b4:6e:00:42: 60:69:16:24:0f:2c:74:dc:77:81:e7:66:cb:44:a9:62:a9:f1: 2f:ea:fd:a3:c2:e2:07:00:38:99:12:58:ad:d4:41:9d:ff:27: ce:da:53:68:48:8d:5f:5c:ea:2e:1c:a8:34:94:c9:b0:87:16: bb:55:7c:fc:83:09:a8:e0:71:39:7f:df:78:70:ac:e1:82:76: c2:91:e1:28:4c:97:ee:95:03:8a:61:0e:82:fb:20:0f:4a:7f: 70:dd:21:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnyOAKVb2DEwpYfOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZjZGI2OTctZDIwZC00N2U3LTlmOWUtYzQxNzRkYmMw YmYyMB4XDTI1MDUyMzA3MTIxOFoXDTI1MDgyMTA3MTIxOFowLzEtMCsGA1UEAxMk N2Q3OGRmNWEtMGYxMy00M2QzLWI2MWItNWNhYTNjOGUzMmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cpfjPkTYGEuhdFtmaRsrvCmYLpnVoZzlZpj MKpPPUkpd4ZFH3h3ASSr6Pp3nPuE30DEAfp+YXv2nlGhtENIdrI2Q5SGpK7kFDch 1NUTc3eY5A6g6xm6hK8uCoi4JESH7Yq6x1kuoGQoklsFM/jjXobrdfPiMrylyV45 1l3SpPbTXfMx3QNBDkeWxfEJyj2/C5fMb4nQTanFBJbb/IBGc8iDrmx5HWoF7sPM C4oaa9qY32Soz0qCZLxt7cT+4Yc4oAwEzsWBPZWmP+8cNlHnfTCm3m6QfanC4EGD R0VBVNYtDNw1HnIdBB1rHcYikuwnXyPND5CWHarMKzQPVTIkwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmsMen+2HX/7DmE2PoNvgRE4PwiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNmNk YjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3NGRiYzBiZjIvNThjZDhiOGEtNzA4NC0z OTcwLWE3M2MtYmJhNWE0NzRkN2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzZjZGI2OTctZDIwZC00N2U3LTlm OWUtYzQxNzRkYmMwYmYyLzM2Y2RiNjk3LWQyMGQtNDdlNy05ZjllLWM0MTc0ZGJj MGJmMi5jcmwwHwYDVR0jBBgwFoAU4OlXFY9Fk7bv2cStPnfqph/s6jUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNmNkYjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3 NGRiYzBiZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5poMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtqCBadHFZU1kcWYYqYc1lEJY2Y3hPGr9X+8RztdmyB9N2jsUFpjrAD CbB23nni25W50SArLXiUe8NFmyTN7eyYGLNESAyhUpCLOnS4kX7XfodNJPPvfKZv Prft8nWRisQJGpjnuCLiPAVDFlj0GobiLz85xTK8zWsqKZdtkdVxWbN3Nq97ndEL /OfSOEnx1V0R9gQbdjA+nv0Jb+g6tG4AQmBpFiQPLHTcd4HnZstEqWKp8S/q/aPC 4gcAOJkSWK3UQZ3/J87aU2hIjV9c6i4cqDSUybCHFrtVfPyDCajgcTl/33hwrOGC dsKR4ShMl+6VA4phDoL7IA9Kf3DdIbk= -----END CERTIFICATE-----Generated at Sun Jun 15 15:37:39 2025 by rpki-client