$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/633a8e7d-dc57-3e15-91e9-5705fc4d7027.roa File: 633a8e7d-dc57-3e15-91e9-5705fc4d7027.roa (raw, json) Hash identifier: g3Myk0FjETXR7Qlq8uZPzoH9HZAUwWpPrQNEmeVpnuc= Subject key identifier: 8E:B2:C6:64:84:05:D3:28:C2:8B:B2:C1:F2:63:74:8B:71:10:C0:63 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A2C202B5B0A560DDFEB251B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/633a8e7d-dc57-3e15-91e9-5705fc4d7027.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.32.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:2b:5b:0a:56:0d:df:eb:25:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=6c7f48c8-65c8-435a-a6d4-e0af03e83e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:37:53:a4:49:e8:0c:15:24:15:18:f3:1c:ad: 89:cf:03:8c:bb:33:f2:5b:23:4e:52:d7:32:95:69: d1:bc:14:13:cf:d5:a9:24:40:76:9d:fb:d5:33:f2: 93:26:6f:34:aa:63:59:20:24:41:b3:86:c7:9b:c6: b9:42:d4:0e:cb:06:1b:58:78:7b:ad:b6:83:5e:16: db:b1:dd:b9:f8:cd:57:1c:1b:ae:1a:bb:8e:45:01: cb:50:fe:b6:b9:5e:20:ac:71:35:3c:4b:8c:be:d1: b6:61:dc:82:da:90:1e:ab:26:34:64:7c:0a:07:37: 51:e8:7f:35:7a:63:93:87:d4:8c:73:55:45:24:c3: 41:2c:df:de:bf:ef:1c:43:b4:43:c6:37:3f:0b:7e: a6:10:54:c1:cd:73:32:29:d4:b6:ad:6f:54:fb:66: 5d:b1:38:01:cb:93:c5:cb:f5:30:38:86:43:7c:c6: 9f:a8:69:56:c8:ce:ef:c0:e1:d9:85:18:78:bc:fa: d4:67:ae:58:1b:ae:ef:61:50:76:cb:dc:d3:2b:dd: 25:c0:91:ab:12:08:7f:de:7f:b5:57:24:25:09:92: 06:ba:ee:df:f4:40:10:87:57:c0:bb:ea:63:30:0d: 1f:29:44:01:eb:5b:60:d5:80:56:27:a1:42:cd:38: 2c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B2:C6:64:84:05:D3:28:C2:8B:B2:C1:F2:63:74:8B:71:10:C0:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/633a8e7d-dc57-3e15-91e9-5705fc4d7027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:3d:f7:47:d1:76:3f:a3:df:97:bb:ea:6e:47:37:d7:73:7e: 87:fc:36:d9:5b:ad:a3:58:d9:c8:2f:32:c8:32:b9:ee:41:74: 85:b6:cb:55:8a:e6:5e:b8:07:2d:5c:d6:80:55:39:32:b1:af: 96:02:46:a0:ec:1c:22:81:cb:18:1f:5d:b4:25:4e:b4:ef:4a: c5:ca:2d:dc:90:13:87:68:0b:2e:31:94:98:54:98:d0:ef:c9: 5d:f9:a8:2d:09:d8:19:f6:4f:8c:3a:01:55:e1:9e:06:53:db: a2:d1:d9:7b:ea:b7:78:5a:b1:65:50:4a:be:75:24:21:83:fe: 5b:2f:62:8a:77:66:9c:5c:51:8a:74:0f:95:97:5a:35:f4:b0: 5b:bd:ad:bc:e9:6d:06:41:b5:c1:05:94:a2:00:9d:3c:ca:79: 56:74:05:b1:aa:97:c8:79:fd:2d:c7:26:f8:ac:8b:e7:77:de: 45:c8:cb:a8:2c:b0:cf:1e:f9:84:61:1b:4c:d0:ca:05:9c:83: 28:15:a5:db:cc:c3:5c:0e:ab:37:4a:65:1a:4a:e7:05:1f:0f: a9:8c:59:d1:c0:07:1e:5a:f7:1e:ec:15:36:1b:aa:42:1f:f7: 13:e6:2e:82:ef:20:f9:43:c1:0a:d9:ee:00:15:3c:c5:a9:4c: a9:70:89:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosICtbClYN3+slGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk NmM3ZjQ4YzgtNjVjOC00MzVhLWE2ZDQtZTBhZjAzZTgzZTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizdTpEnoDBUkFRjzHK2JzwOMuzPyWyNOUtcy lWnRvBQTz9WpJEB2nfvVM/KTJm80qmNZICRBs4bHm8a5QtQOywYbWHh7rbaDXhbb sd25+M1XHBuuGruORQHLUP62uV4grHE1PEuMvtG2YdyC2pAeqyY0ZHwKBzdR6H81 emOTh9SMc1VFJMNBLN/ev+8cQ7RDxjc/C36mEFTBzXMyKdS2rW9U+2ZdsTgBy5PF y/UwOIZDfMafqGlWyM7vwOHZhRh4vPrUZ65YG67vYVB2y9zTK90lwJGrEgh/3n+1 VyQlCZIGuu7f9EAQh1fAu+pjMA0fKUQB61tg1YBWJ6FCzTgsFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6yxmSEBdMowouywfJjdItxEMBjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjMzYThlN2QtZGM1Ny0z ZTE1LTkxZTktNTcwNWZjNGQ3MDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyCaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADE990fRdj+j35e76m5HN9dzfof8NtlbraNY2cgvMsgyue5BdIW2y1WK 5l64By1c1oBVOTKxr5YCRqDsHCKByxgfXbQlTrTvSsXKLdyQE4doCy4xlJhUmNDv yV35qC0J2Bn2T4w6AVXhngZT26LR2Xvqt3hasWVQSr51JCGD/lsvYop3ZpxcUYp0 D5WXWjX0sFu9rbzpbQZBtcEFlKIAnTzKeVZ0BbGql8h5/S3HJvisi+d33kXIy6gs sM8e+YRhG0zQygWcgygVpdvMw1wOqzdKZRpK5wUfD6mMWdHABx5a9x7sFTYbqkIf 9xPmLoLvIPlDwQrZ7gAVPMWpTKlwifs= -----END CERTIFICATE-----Generated at Sun Jun 15 11:42:54 2025 by rpki-client