$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02ffb879-d980-3254-9199-6955d3845e43.roa File: 02ffb879-d980-3254-9199-6955d3845e43.roa (raw, json) Hash identifier: zE9xcUt16gWD+czuzobl/7cM34eXyDNnZ0sMJ/NkS3I= Subject key identifier: 14:86:05:DC:3E:41:5F:F0:54:B2:EE:BA:90:25:67:0B:40:E0:78:B1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A1F901AEECD9BD66914AD1400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02ffb879-d980-3254-9199-6955d3845e43.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 32787 IP address blocks: 23.32.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:1a:ee:cd:9b:d6:69:14:ad:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=3b6b461e-de82-48db-816a-06d646d66c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:31:0b:3f:52:5e:12:86:1d:a7:7d:18:d9:b0: 08:14:ac:aa:c9:8d:30:13:29:30:35:f5:df:8d:69: f0:8b:bd:00:10:ee:37:b6:dc:5f:cc:9b:f5:ca:88: 55:ff:c1:28:12:b4:7d:a0:8b:3d:b9:87:6d:42:7f: f4:07:b7:5c:4f:5e:ae:47:38:8c:55:c9:ac:92:d0: 24:a1:e9:a5:0b:0a:17:4e:6f:cc:40:c7:7a:9b:8f: a6:0f:7d:30:3f:04:56:93:01:dc:20:56:10:75:83: 6b:8a:13:0a:69:90:86:5c:6e:ce:6e:25:8e:47:aa: 24:0b:65:2c:3d:10:f7:13:97:e8:cb:13:8e:f7:7f: da:17:0a:31:c6:bf:d9:68:a3:74:9c:b8:fc:3b:28: 9b:3e:35:75:59:70:1f:ab:4f:96:a1:49:33:69:d1: 30:21:40:04:82:9d:9e:04:f9:ea:d9:d5:29:9a:a3: 33:c0:44:fe:ca:70:99:54:c0:5e:dd:87:cc:8a:61: 4e:aa:fe:82:0a:4b:af:4e:d6:a2:8b:96:9c:4d:f3: f3:3e:c5:96:52:9d:c1:90:5f:90:94:c7:f4:64:86: 84:a6:35:bb:1b:4e:da:3b:48:3d:d1:01:c5:af:e5: db:12:97:d3:75:8a:d8:92:d5:a7:2e:8a:3b:35:7d: e3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:86:05:DC:3E:41:5F:F0:54:B2:EE:BA:90:25:67:0B:40:E0:78:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02ffb879-d980-3254-9199-6955d3845e43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:d9:3d:cb:ef:b3:71:49:3a:6f:a2:33:ae:46:1b:df:99:6d: 9f:f6:99:20:d7:98:1b:b8:74:24:bb:d5:cd:ab:dd:0c:3e:db: 28:de:1f:0e:25:90:ab:0e:af:47:81:2f:9b:db:80:72:a8:58: 66:e7:a6:bb:b4:cb:41:31:d3:b5:ff:8b:8c:47:fe:91:14:9d: 91:9d:7c:9e:bc:81:0b:36:cf:be:e5:eb:ad:6b:e7:7b:d6:67: 7e:bd:7c:f7:7c:e3:49:8a:ae:07:c2:7e:3a:db:5b:d6:13:17: dd:0d:6b:63:36:50:28:7e:11:ca:04:79:4c:03:b7:d9:ed:74: 7d:e3:fa:28:02:da:5e:10:b8:3a:ea:15:81:88:87:51:98:13: bb:35:f4:d6:e6:67:06:b7:ab:57:44:3d:cc:67:62:f6:c8:3f: 38:56:5b:98:69:df:59:22:df:17:38:9b:67:07:ad:b0:c7:9a: 2c:c4:66:3b:da:9b:d6:f9:27:a8:45:9d:11:be:6e:bc:6a:ab: 85:e7:86:94:f7:52:e4:cf:c1:88:4b:e7:6a:31:fc:ba:d8:a4: 57:0a:c9:4e:81:53:48:b9:ab:29:e8:7b:73:d3:ea:f2:4f:71: c1:05:c9:5f:24:86:db:19:4c:43:05:35:1a:4f:54:10:30:33: 1c:a5:3c:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkBruzZvWaRStFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk M2I2YjQ2MWUtZGU4Mi00OGRiLTgxNmEtMDZkNjQ2ZDY2YzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDELP1JeEoYdp30Y2bAIFKyqyY0wEykwNfXf jWnwi70AEO43ttxfzJv1yohV/8EoErR9oIs9uYdtQn/0B7dcT16uRziMVcmsktAk oemlCwoXTm/MQMd6m4+mD30wPwRWkwHcIFYQdYNrihMKaZCGXG7ObiWOR6okC2Us PRD3E5foyxOO93/aFwoxxr/ZaKN0nLj8OyibPjV1WXAfq0+WoUkzadEwIUAEgp2e BPnq2dUpmqMzwET+ynCZVMBe3YfMimFOqv6CCkuvTtaii5acTfPzPsWWUp3BkF+Q lMf0ZIaEpjW7G07aO0g90QHFr+XbEpfTdYrYktWnLoo7NX3jawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSGBdw+QV/wVLLuupAlZwtA4HixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDJmZmI4NzktZDk4MC0z MjU0LTkxOTktNjk1NWQzODQ1ZTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXZPcvvs3FJOm+iM65GG9+ZbZ/2mSDXmBu4dCS71c2r3Qw+2yjeHw4l kKsOr0eBL5vbgHKoWGbnpru0y0Ex07X/i4xH/pEUnZGdfJ68gQs2z77l661r53vW Z369fPd840mKrgfCfjrbW9YTF90Na2M2UCh+EcoEeUwDt9ntdH3j+igC2l4QuDrq FYGIh1GYE7s19NbmZwa3q1dEPcxnYvbIPzhWW5hp31ki3xc4m2cHrbDHmizEZjva m9b5J6hFnRG+brxqq4XnhpT3UuTPwYhL52ox/LrYpFcKyU6BU0i5qynoe3PT6vJP ccEFyV8khtsZTEMFNRpPVBAwMxylPFg= -----END CERTIFICATE-----Generated at Sun Jun 15 20:03:49 2025 by rpki-client