$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fecea99-29fc-3bf3-95a3-a94df4b946ae.roa File: 1fecea99-29fc-3bf3-95a3-a94df4b946ae.roa (raw, json) Hash identifier: bgQtwyg6zP3n1P3pYDOuW2V9pacUCMY8wqTBMHSiaEo= Subject key identifier: D6:75:27:96:EA:77:07:F3:71:6D:CD:59:EB:B9:A5:77:AA:E1:49:04 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A1E2AB702039895F2BE1E0B60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fecea99-29fc-3bf3-95a3-a94df4b946ae.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 20940 IP address blocks: 23.52.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:b7:02:03:98:95:f2:be:1e:0b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=db70d338-4758-4ebe-80ce-f132f79b819c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d6:a4:a1:06:ac:e9:8d:6a:6f:d9:50:3e:48: 85:69:42:dd:8c:2c:5b:2e:9e:38:2a:37:12:a7:ed: 28:ab:58:9a:fb:71:4b:f9:63:f2:a9:d9:3b:8a:65: a4:31:e3:15:18:f3:3c:2d:8c:21:24:f5:77:91:06: 89:ea:4d:e0:2a:91:6e:ed:a3:01:33:f6:5e:3f:be: be:ef:67:39:93:f9:34:dd:0b:1f:84:53:77:c1:5e: 9d:54:d1:cf:5f:66:bd:aa:1c:4e:9b:c0:cd:a9:3e: 00:fe:54:f8:42:42:cd:b6:0f:6a:75:42:c4:6b:fe: cf:26:e2:c4:2c:85:60:67:f8:40:40:66:50:ea:16: ef:43:df:a5:11:13:1a:47:9c:06:de:c4:fb:ac:e0: 85:4c:57:ce:2f:7a:57:81:28:b7:ff:c0:c1:95:3b: 7f:4a:f6:a7:4e:28:37:a7:eb:62:5d:e0:15:e0:cc: e1:57:65:1a:b0:ac:2f:5f:4a:cd:db:df:19:d9:81: 7a:8d:45:cd:4f:13:ff:52:7f:c9:db:76:3d:86:ed: 0f:56:01:ca:5d:95:be:94:6d:86:c5:4d:12:35:61: 73:53:4f:91:89:34:d5:17:5f:15:c3:f5:de:33:cc: a8:6d:b9:7c:0a:d6:af:45:c6:a9:d1:1f:23:b2:15: 32:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:75:27:96:EA:77:07:F3:71:6D:CD:59:EB:B9:A5:77:AA:E1:49:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fecea99-29fc-3bf3-95a3-a94df4b946ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:77:27:21:d0:a7:aa:5f:e5:a9:f5:41:16:e7:be:af:90:39: 76:61:b5:1b:02:70:74:c4:ff:cc:30:e4:9f:f3:d1:1c:d8:af: 0b:ef:d8:e3:3b:bf:97:47:27:56:d5:fc:f9:9d:af:71:8c:92: 2e:47:b2:bc:bb:81:30:02:a5:51:a0:7c:af:b4:91:c4:7a:ae: 09:f3:5c:bb:19:47:ba:a7:a2:47:aa:42:22:99:65:2e:7e:82: a7:7b:09:4a:d9:86:e5:81:63:ae:51:4b:38:fc:03:2b:03:1b: ad:f4:81:a9:72:63:a2:29:72:98:67:d2:29:2c:b9:ed:58:71: 8a:ff:1c:30:7c:39:38:71:fe:9b:cf:2d:6f:16:1c:f5:45:f9: b9:52:d7:bc:97:3c:3a:59:0d:04:ce:9b:b0:b2:89:59:be:e2: 64:5c:ff:84:b5:76:b4:75:39:91:65:ea:6d:c9:be:4a:31:c1: 0a:99:0c:5c:3e:a0:f5:52:25:8b:e2:a2:94:d6:2b:3a:2f:fd: 42:34:fd:55:90:0b:7d:ca:55:66:3a:6f:9c:8a:65:cc:bc:89: 3a:8c:5d:57:b7:c7:34:ea:45:b1:55:08:fe:92:a5:21:7c:84: 6c:96:fb:10:2b:b9:06:a0:4a:ef:cb:ef:97:0b:60:98:a2:9e: 6a:21:67:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKrcCA5iV8r4eC2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk ZGI3MGQzMzgtNDc1OC00ZWJlLTgwY2UtZjEzMmY3OWI4MTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9akoQas6Y1qb9lQPkiFaULdjCxbLp44KjcS p+0oq1ia+3FL+WPyqdk7imWkMeMVGPM8LYwhJPV3kQaJ6k3gKpFu7aMBM/ZeP76+ 72c5k/k03QsfhFN3wV6dVNHPX2a9qhxOm8DNqT4A/lT4QkLNtg9qdULEa/7PJuLE LIVgZ/hAQGZQ6hbvQ9+lERMaR5wG3sT7rOCFTFfOL3pXgSi3/8DBlTt/SvanTig3 p+tiXeAV4MzhV2UasKwvX0rN298Z2YF6jUXNTxP/Un/J23Y9hu0PVgHKXZW+lG2G xU0SNWFzU0+RiTTVF18Vw/XeM8yobbl8CtavRcap0R8jshUyYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZ1J5bqdwfzcW3NWeu5pXeq4UkEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWZlY2VhOTktMjlmYy0z YmYzLTk1YTMtYTk0ZGY0Yjk0NmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzSHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGR3JyHQp6pf5an1QRbnvq+QOXZhtRsCcHTE/8ww5J/z0RzYrwvv2OM7 v5dHJ1bV/Pmdr3GMki5Hsry7gTACpVGgfK+0kcR6rgnzXLsZR7qnokeqQiKZZS5+ gqd7CUrZhuWBY65RSzj8AysDG630galyY6Ipcphn0iksue1YcYr/HDB8OThx/pvP LW8WHPVF+blS17yXPDpZDQTOm7CyiVm+4mRc/4S1drR1OZFl6m3JvkoxwQqZDFw+ oPVSJYviopTWKzov/UI0/VWQC33KVWY6b5yKZcy8iTqMXVe3xzTqRbFVCP6SpSF8 hGyW+xAruQagSu/L75cLYJiinmohZ1I= -----END CERTIFICATE-----Generated at Sun Jun 15 11:24:17 2025 by rpki-client