$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a68aa592-841f-3fcd-b6a9-79fe0ac36d39.roa File: a68aa592-841f-3fcd-b6a9-79fe0ac36d39.roa (raw, json) Hash identifier: Z1HYrjiWUUKay2I/gXsBtOwQE3vXh6afQcZq3IACaNc= Subject key identifier: 40:46:BA:18:87:10:08:74:58:1C:5D:6E:17:A7:6C:2C:47:26:44:7A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A2C202981408677A0A23BBB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a68aa592-841f-3fcd-b6a9-79fe0ac36d39.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 33650 IP address blocks: 23.32.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:29:81:40:86:77:a0:a2:3b:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=a2e56f95-4fbe-42ce-b140-de3ad1125bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:43:45:07:59:60:83:da:09:03:02:6d:df:87: 10:72:2a:2c:6d:78:10:8c:99:cc:48:2b:d0:8e:6c: ee:28:94:d2:c2:eb:49:69:7a:03:2e:0a:46:f4:8a: 1e:bc:3d:61:a7:68:1b:50:4d:cc:ae:82:9a:57:4c: 63:00:44:48:7c:8d:38:ac:aa:4d:c5:6a:c1:9d:39: 3d:3b:6f:79:23:62:c2:0c:59:01:95:39:4f:a9:39: 55:4e:e2:2d:ab:bc:2b:81:62:cb:1b:12:60:5a:f2: 96:72:f7:80:30:7c:6a:e3:0d:8d:d4:aa:2c:34:9a: 6c:a4:74:70:39:c8:4b:19:87:37:cc:df:f3:15:30: f9:36:55:cd:8c:50:6d:13:e2:b6:04:e3:3a:f2:59: 2a:c8:a3:53:38:b7:c6:63:f7:48:a8:15:af:3d:16: 97:31:92:cc:0e:83:f9:9c:46:aa:e7:79:76:c5:20: ad:48:a3:b7:ac:7e:1d:e0:93:08:d3:c1:e7:19:84: 50:2c:c7:17:08:d3:86:5b:54:fb:66:26:b2:17:14: 1c:02:21:7d:1d:4f:d1:aa:eb:4d:28:f2:40:6e:9e: 97:f2:df:56:3f:58:6b:3b:cf:c1:a0:51:9c:af:0d: 2c:0b:69:f9:fb:37:7f:37:4d:8f:c8:04:c1:18:63: 45:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:46:BA:18:87:10:08:74:58:1C:5D:6E:17:A7:6C:2C:47:26:44:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a68aa592-841f-3fcd-b6a9-79fe0ac36d39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:a9:4c:d4:5d:55:dd:c0:49:12:8f:34:61:66:ae:62:45:fd: 09:3f:4b:ba:d1:9e:54:f0:de:f0:df:e3:80:7c:03:5d:0f:b4: 2b:ac:e5:24:a7:09:54:b9:41:94:7b:8b:4f:1c:0d:da:98:17: 8c:dd:e2:93:b8:94:e7:68:e7:2c:be:7e:2b:bd:97:db:8e:ad: 41:78:25:4c:f1:1b:4f:46:e5:fc:2e:ac:30:8a:ae:bb:8e:e1: c3:c6:b6:c5:30:27:a9:3f:77:50:88:ca:53:8d:fe:2e:21:bd: 9c:15:ac:7b:36:cc:a4:e9:c7:6e:fb:56:6b:a1:88:51:a4:6f: b9:1b:cf:08:b1:8d:2a:b3:65:83:ab:c5:6a:ad:58:cd:11:11: 14:b9:6c:f6:5f:37:d4:9d:90:b2:53:71:94:32:52:a1:86:37: 00:37:ad:9a:8c:53:28:98:f8:ce:7a:e7:ab:ed:da:62:b5:60: 97:f3:f4:da:a6:28:e3:53:93:b9:78:7b:2f:4f:b7:8c:a9:a2: f5:f8:9e:0b:18:e5:92:64:4c:31:60:44:8e:e8:b0:ed:c9:3b: c9:78:54:54:ab:60:93:46:ec:66:07:95:18:90:5f:ed:1f:e0: 2f:3c:fa:37:17:a3:28:d2:e2:5a:f8:75:db:c3:6b:41:1c:0d: 0e:7a:40:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosICmBQIZ3oKI7u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk YTJlNTZmOTUtNGZiZS00MmNlLWIxNDAtZGUzYWQxMTI1YmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0NFB1lgg9oJAwJt34cQciosbXgQjJnMSCvQ jmzuKJTSwutJaXoDLgpG9IoevD1hp2gbUE3MroKaV0xjAERIfI04rKpNxWrBnTk9 O295I2LCDFkBlTlPqTlVTuItq7wrgWLLGxJgWvKWcveAMHxq4w2N1KosNJpspHRw OchLGYc3zN/zFTD5NlXNjFBtE+K2BOM68lkqyKNTOLfGY/dIqBWvPRaXMZLMDoP5 nEaq53l2xSCtSKO3rH4d4JMI08HnGYRQLMcXCNOGW1T7ZiayFxQcAiF9HU/RqutN KPJAbp6X8t9WP1hrO8/BoFGcrw0sC2n5+zd/N02PyATBGGNFSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBGuhiHEAh0WBxdbhenbCxHJkR6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTY4YWE1OTItODQxZi0z ZmNkLWI2YTktNzlmZTBhYzM2ZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyAuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWpTNRdVd3ASRKPNGFmrmJF/Qk/S7rRnlTw3vDf44B8A10PtCus5SSn CVS5QZR7i08cDdqYF4zd4pO4lOdo5yy+fiu9l9uOrUF4JUzxG09G5fwurDCKrruO 4cPGtsUwJ6k/d1CIylON/i4hvZwVrHs2zKTpx277VmuhiFGkb7kbzwixjSqzZYOr xWqtWM0RERS5bPZfN9SdkLJTcZQyUqGGNwA3rZqMUyiY+M5656vt2mK1YJfz9Nqm KONTk7l4ey9Pt4ypovX4ngsY5ZJkTDFgRI7osO3JO8l4VFSrYJNG7GYHlRiQX+0f 4C88+jcXoyjS4lr4ddvDa0EcDQ56QGQ= -----END CERTIFICATE-----Generated at Mon Jun 16 02:02:08 2025 by rpki-client