$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f5c572a-a3ec-3de8-acbf-43b0ba5887f0.roa File: 9f5c572a-a3ec-3de8-acbf-43b0ba5887f0.roa (raw, json) Hash identifier: fFqSzBvygcN9VwOWto3wQC5d7hbAjbrORNWXZnJFbBo= Subject key identifier: 52:1F:4C:33:CB:A1:52:C3:30:BB:C6:32:02:0C:FE:56:41:B0:71:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A2D8598E7A9D90F159E6C92F0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f5c572a-a3ec-3de8-acbf-43b0ba5887f0.roa Signing time: Fri 13 Jun 2025 13:01:04 +0000 ROA not before: Fri 13 Jun 2025 13:01:04 +0000 ROA not after: Thu 11 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.33.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:85:98:e7:a9:d9:0f:15:9e:6c:92:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 13 13:01:04 2025 GMT Not After : Sep 11 13:01:04 2025 GMT Subject: CN=126c6d3b-ee8a-4a3c-85cc-1c24429107b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a4:b7:4f:1a:09:18:27:44:94:33:bb:b1:72: 8b:b4:3d:33:ee:aa:70:8f:ea:98:4b:4d:09:b0:35: 68:8f:a5:44:c2:d5:6c:c0:26:11:06:61:e6:de:bb: 35:45:8e:de:c6:ff:bb:fe:d3:23:04:ac:3b:66:07: c4:50:30:df:ab:d9:9d:ef:9c:34:64:b3:b6:19:c5: f1:02:51:4f:e6:50:4e:e8:e4:10:e8:59:25:8f:d6: d4:2d:37:21:2c:d3:c9:20:9a:65:ea:a6:e4:57:64: e0:91:f3:54:a5:ca:06:74:68:ac:98:6c:1f:fa:b6: 17:8d:3b:7a:ce:26:72:53:98:f4:c0:82:06:cf:af: 59:90:d5:52:fb:69:03:50:e9:3f:14:e2:47:8a:02: 2e:2b:3d:f9:2e:72:b2:6f:64:5d:00:20:59:f9:29: 12:c0:33:6b:89:1a:e1:12:47:97:8d:14:f1:8c:27: c4:de:05:81:11:72:94:e1:1b:d5:de:a2:79:9d:31: f7:fa:bf:69:e0:42:06:31:aa:2d:24:21:f5:18:8c: 3b:e8:41:4d:13:82:c0:a1:6e:e5:54:27:7c:59:59: 18:0b:1f:30:21:f4:f3:f8:1c:a3:b0:25:97:df:1f: 0d:c8:78:25:06:29:f4:09:24:2b:63:31:ec:53:ae: 5f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1F:4C:33:CB:A1:52:C3:30:BB:C6:32:02:0C:FE:56:41:B0:71:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f5c572a-a3ec-3de8-acbf-43b0ba5887f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:81:ea:b0:13:5f:af:9a:5f:f1:f1:0c:62:2f:94:fa:d8:b2: cd:e0:eb:35:d2:ad:1c:89:cd:9a:a4:bd:10:d1:75:92:d5:ca: 1f:12:d5:cd:a7:8d:87:d4:24:27:ed:ed:0f:26:dc:db:08:c8: 10:25:ec:c1:14:84:80:10:36:ae:b6:9d:33:85:bd:41:b5:9f: 74:fe:8c:2c:11:18:89:8f:8b:68:d2:a4:ff:0a:eb:06:38:f1: c7:e0:0f:0b:2f:be:d3:a3:7a:f1:a9:2a:8c:22:ff:7e:1a:8a: 92:ac:fc:f9:f2:7a:a8:73:a3:f6:a8:b3:9a:46:c1:d3:fc:e3: 03:67:e0:10:c6:ab:7f:0c:fc:f7:ff:db:bd:a1:7d:5f:a2:c0: a5:df:68:60:32:a7:07:12:8e:9c:35:6d:eb:e8:0d:76:36:15: ce:3a:02:03:34:39:cd:39:2b:b2:25:fa:fc:a0:47:59:49:12: fc:12:8b:c7:ae:1b:0e:ea:df:79:c8:41:04:9e:5c:a1:bf:b1: 10:bc:b4:ed:bd:59:cb:b7:24:ff:58:bd:e2:6e:ad:65:8f:83: 1b:46:3e:ea:56:21:fd:2f:96:ae:24:a1:0d:e2:8d:6a:90:a8: b9:8e:45:65:61:ff:88:12:29:49:75:24:35:0f:7e:d9:c8:7a: 48:02:fa:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothZjnqdkPFZ5skvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk MTI2YzZkM2ItZWU4YS00YTNjLTg1Y2MtMWMyNDQyOTEwN2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqS3TxoJGCdElDO7sXKLtD0z7qpwj+qYS00J sDVoj6VEwtVswCYRBmHm3rs1RY7exv+7/tMjBKw7ZgfEUDDfq9md75w0ZLO2GcXx AlFP5lBO6OQQ6Fklj9bULTchLNPJIJpl6qbkV2TgkfNUpcoGdGismGwf+rYXjTt6 ziZyU5j0wIIGz69ZkNVS+2kDUOk/FOJHigIuKz35LnKyb2RdACBZ+SkSwDNriRrh EkeXjRTxjCfE3gWBEXKU4RvV3qJ5nTH3+r9p4EIGMaotJCH1GIw76EFNE4LAoW7l VCd8WVkYCx8wIfTz+ByjsCWX3x8NyHglBin0CSQrYzHsU65fCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIfTDPLoVLDMLvGMgIM/lZBsHH4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWY1YzU3MmEtYTNlYy0z ZGU4LWFjYmYtNDNiMGJhNTg4N2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyGOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOB6rATX6+aX/HxDGIvlPrYss3g6zXSrRyJzZqkvRDRdZLVyh8S1c2n jYfUJCft7Q8m3NsIyBAl7MEUhIAQNq62nTOFvUG1n3T+jCwRGImPi2jSpP8K6wY4 8cfgDwsvvtOjevGpKowi/34aipKs/Pnyeqhzo/aos5pGwdP84wNn4BDGq38M/Pf/ 272hfV+iwKXfaGAypwcSjpw1bevoDXY2Fc46AgM0Oc05K7Il+vygR1lJEvwSi8eu Gw7q33nIQQSeXKG/sRC8tO29Wcu3JP9YveJurWWPgxtGPupWIf0vlq4koQ3ijWqQ qLmORWVh/4gSKUl1JDUPftnIekgC+ss= -----END CERTIFICATE-----Generated at Sun Jun 15 18:59:46 2025 by rpki-client