$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b1aa448-a069-3db4-9d0f-3de9c5c76789.roa File: 4b1aa448-a069-3db4-9d0f-3de9c5c76789.roa (raw, json) Hash identifier: eCbMMFcwLlvLH3WIy0Piq2A2bQLFR8Xu9zSt9l9F9ds= Subject key identifier: D3:5D:81:65:47:C2:4C:23:8F:14:EF:BF:15:83:4B:CA:32:B0:59:73 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A2C20292B9DF5456DC6ADB400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b1aa448-a069-3db4-9d0f-3de9c5c76789.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 35994 IP address blocks: 23.32.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:29:2b:9d:f5:45:6d:c6:ad:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=773c41eb-5698-46df-9537-26a97e81194f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b2:94:be:60:3f:aa:9d:37:f6:ff:ad:fa:9d: fd:db:fe:0f:49:95:b8:b0:bd:2f:8f:59:50:6d:cf: 0c:4d:27:90:4f:75:15:53:3a:6f:1c:a8:67:e5:79: 17:94:43:43:7f:00:40:aa:1e:4d:d3:68:98:12:2e: 45:ba:de:3a:df:43:55:26:5e:1d:52:3b:df:55:1c: b1:7e:94:44:f0:f4:a9:51:d9:55:4b:19:bb:67:4c: 21:97:d9:57:62:43:13:c9:fe:e6:26:18:96:9b:66: a5:3d:be:c4:7f:f1:b0:f2:9a:9b:73:2d:57:c8:a6: 64:06:ac:f8:a6:9d:d6:15:6a:1d:d0:1c:b4:da:35: 7c:75:71:02:07:83:53:97:59:3e:e4:f0:1a:28:70: 9f:a4:96:cc:1a:cf:c2:ef:ef:82:52:15:66:69:32: c0:e4:76:6d:d7:8a:bc:1b:41:b0:6f:82:2e:3d:ae: 46:cb:2f:85:8c:66:bd:82:c4:f8:e2:83:11:03:14: 6d:fe:27:9f:93:71:54:b5:0c:e6:49:71:7b:6f:6c: 0e:59:75:e1:66:16:0f:3b:0d:1c:38:39:06:d5:f2: 0e:0f:5d:1d:2e:fc:ca:0d:8a:a0:f7:f7:8d:89:35: 0d:9a:d8:7e:10:56:61:24:0e:67:0f:ca:07:bb:03: 9b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5D:81:65:47:C2:4C:23:8F:14:EF:BF:15:83:4B:CA:32:B0:59:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b1aa448-a069-3db4-9d0f-3de9c5c76789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:a9:28:7f:62:fe:6d:f9:9c:45:ba:3c:ce:01:17:0c:1e:e6: 1e:72:56:27:97:7e:a6:93:ae:d9:77:8c:45:83:60:ab:42:45: 14:35:ed:2d:71:79:17:d7:98:0e:07:36:65:04:c5:b1:60:75: 7c:62:be:ea:e9:00:33:00:74:58:e0:43:d5:f3:03:ff:92:68: e7:63:fd:0c:7c:9e:a1:76:ea:aa:28:fe:c3:a3:ad:1d:98:12: 52:04:0f:ae:f1:eb:f9:c5:39:32:cd:d8:21:a4:3e:1c:f1:21: cc:00:f3:84:17:dc:85:29:9d:25:ad:b8:73:d9:f5:e2:d4:c0: e6:26:f7:66:b9:18:4a:30:82:4e:11:ab:ee:3b:0e:2c:9d:6f: a5:a9:fb:19:ce:ff:76:14:48:f8:9b:a7:46:04:4f:e7:09:64: 70:7b:14:2f:60:19:ad:71:1a:dd:d0:41:8d:05:24:39:ee:ba: 6a:84:40:64:3b:cc:6d:ef:5f:2a:24:92:d0:a0:8d:70:38:b6: a2:80:6c:ce:16:15:0d:dc:d4:22:6e:9c:01:61:70:ce:db:02: ae:16:68:27:44:c9:7b:12:88:01:a2:2d:e0:e5:c4:2e:93:8d: 39:5d:94:34:fa:23:f8:5b:f9:40:2b:d7:00:e1:9d:27:9b:80: 59:f8:d7:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosICkrnfVFbcattAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk NzczYzQxZWItNTY5OC00NmRmLTk1MzctMjZhOTdlODExOTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7KUvmA/qp039v+t+p392/4PSZW4sL0vj1lQ bc8MTSeQT3UVUzpvHKhn5XkXlENDfwBAqh5N02iYEi5Fut4630NVJl4dUjvfVRyx fpRE8PSpUdlVSxm7Z0whl9lXYkMTyf7mJhiWm2alPb7Ef/Gw8pqbcy1XyKZkBqz4 pp3WFWod0By02jV8dXECB4NTl1k+5PAaKHCfpJbMGs/C7++CUhVmaTLA5HZt14q8 G0Gwb4IuPa5Gyy+FjGa9gsT44oMRAxRt/iefk3FUtQzmSXF7b2wOWXXhZhYPOw0c ODkG1fIOD10dLvzKDYqg9/eNiTUNmth+EFZhJA5nD8oHuwObFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNdgWVHwkwjjxTvvxWDS8oysFlzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGIxYWE0NDgtYTA2OS0z ZGI0LTlkMGYtM2RlOWM1Yzc2Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyAkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2pKH9i/m35nEW6PM4BFwwe5h5yVieXfqaTrtl3jEWDYKtCRRQ17S1x eRfXmA4HNmUExbFgdXxivurpADMAdFjgQ9XzA/+SaOdj/Qx8nqF26qoo/sOjrR2Y ElIED67x6/nFOTLN2CGkPhzxIcwA84QX3IUpnSWtuHPZ9eLUwOYm92a5GEowgk4R q+47Diydb6Wp+xnO/3YUSPibp0YET+cJZHB7FC9gGa1xGt3QQY0FJDnuumqEQGQ7 zG3vXyokktCgjXA4tqKAbM4WFQ3c1CJunAFhcM7bAq4WaCdEyXsSiAGiLeDlxC6T jTldlDT6I/hb+UAr1wDhnSebgFn416Y= -----END CERTIFICATE-----Generated at Mon Jun 16 15:45:43 2025 by rpki-client