$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b6cbcc56-e96f-37d8-836d-a761712d8f76.roa File: b6cbcc56-e96f-37d8-836d-a761712d8f76.roa (raw, json) Hash identifier: HS8U2ZEgwrbwnK6jZie8nP2tJMKlcbLji8sp185XiWE= Subject key identifier: DE:E0:37:46:40:D0:65:77:7A:FE:0E:98:E7:48:CA:3A:88:01:0B:5A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A2D859730101A51CC003CBD80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b6cbcc56-e96f-37d8-836d-a761712d8f76.roa Signing time: Fri 13 Jun 2025 13:01:04 +0000 ROA not before: Fri 13 Jun 2025 13:01:04 +0000 ROA not after: Thu 11 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.33.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:85:97:30:10:1a:51:cc:00:3c:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 13 13:01:04 2025 GMT Not After : Sep 11 13:01:04 2025 GMT Subject: CN=ae338a0b-3112-470d-ba94-fcf01c8237a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:73:a3:d9:32:3c:2c:62:04:b5:fe:db:70:d5: e2:ed:f9:84:a4:52:6c:dc:16:34:88:c2:94:73:84: d4:6d:42:30:11:56:fd:7b:d8:ac:95:83:12:f0:c4: 7f:4f:ec:a2:9c:bd:cb:bf:57:14:56:54:d3:87:c1: c4:5c:0c:26:a1:b2:f8:d8:82:37:c3:3d:30:ab:4e: 25:ab:88:32:b1:aa:9e:29:ae:c2:42:41:f2:bb:ce: 02:c1:51:59:8e:18:4b:ee:09:57:bd:77:83:f5:14: 6f:62:56:37:6e:8d:0a:fa:8b:c6:f3:6b:f1:8d:c0: 60:b5:40:14:55:a9:7e:7d:03:a0:b8:1b:bb:b3:bc: 5c:97:af:01:54:d0:87:7d:da:d6:0c:28:87:69:3d: 20:2c:31:64:92:6a:55:47:2b:52:ba:a5:f7:c7:d0: c7:b3:89:71:fe:8c:43:5b:b4:42:cc:d7:cc:a8:4a: 9a:7e:08:76:ef:9a:93:5e:14:20:56:5e:a1:a9:a2: f5:ad:95:2f:47:4b:2d:d0:a6:de:99:34:cd:81:6b: 58:14:de:3e:cf:85:e7:49:b8:8a:b7:6b:58:13:10: 1b:48:de:3f:77:f2:82:ac:64:94:a6:02:b3:cc:fc: 7a:3b:d2:53:da:18:68:51:eb:b9:e2:60:58:f9:46: 4a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E0:37:46:40:D0:65:77:7A:FE:0E:98:E7:48:CA:3A:88:01:0B:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b6cbcc56-e96f-37d8-836d-a761712d8f76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:db:d2:d6:2f:5d:96:96:6d:44:b5:f4:da:87:6f:b1:05:51: 5c:da:9c:96:01:5e:50:dd:99:ba:9e:d0:8c:81:8a:46:86:1d: d1:c4:34:95:e9:83:cd:9b:7d:f5:60:58:f0:87:49:45:39:68: 7a:37:70:04:f2:c6:10:bf:94:21:9e:e1:79:03:e3:24:c7:5d: 56:d2:b6:b3:81:a9:86:42:9d:6d:de:c2:98:a0:89:d2:a7:2c: 47:58:ab:51:bd:38:96:18:77:b0:c0:ed:1e:e9:1b:31:77:0d: 8d:54:df:19:a4:08:bf:71:82:a4:f6:d8:bb:3a:7b:4e:04:43: 02:25:3e:3b:41:29:b3:09:a0:a0:c0:94:24:28:a3:70:47:8d: fe:0c:f1:ba:3f:35:3c:6b:5f:e3:aa:f1:ee:a6:83:2e:1e:bf: 87:15:07:3c:5e:38:1b:e2:7a:b1:02:6a:80:7f:21:24:40:e5: c6:78:e3:6c:5d:1a:93:19:24:b7:cc:e0:7e:d8:23:ca:9b:40: 2e:0b:19:c9:39:12:ba:c9:9e:69:ca:f0:6e:19:b2:49:bf:59: 67:58:14:57:b5:c6:90:a5:64:6a:c0:89:6a:cc:d7:53:dd:18: 44:87:2e:68:29:91:ac:94:5f:ce:82:ef:0b:4c:63:a7:08:74: 4f:88:7f:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothZcwEBpRzAA8vYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk YWUzMzhhMGItMzExMi00NzBkLWJhOTQtZmNmMDFjODIzN2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHOj2TI8LGIEtf7bcNXi7fmEpFJs3BY0iMKU c4TUbUIwEVb9e9islYMS8MR/T+yinL3Lv1cUVlTTh8HEXAwmobL42II3wz0wq04l q4gysaqeKa7CQkHyu84CwVFZjhhL7glXvXeD9RRvYlY3bo0K+ovG82vxjcBgtUAU Val+fQOguBu7s7xcl68BVNCHfdrWDCiHaT0gLDFkkmpVRytSuqX3x9DHs4lx/oxD W7RCzNfMqEqafgh275qTXhQgVl6hqaL1rZUvR0st0KbemTTNgWtYFN4+z4XnSbiK t2tYExAbSN4/d/KCrGSUpgKzzPx6O9JT2hhoUeu54mBY+UZKCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7gN0ZA0GV3ev4OmOdIyjqIAQtaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjZjYmNjNTYtZTk2Zi0z N2Q4LTgzNmQtYTc2MTcxMmQ4Zjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyEWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzb0tYvXZaWbUS19NqHb7EFUVzanJYBXlDdmbqe0IyBikaGHdHENJXp g82bffVgWPCHSUU5aHo3cATyxhC/lCGe4XkD4yTHXVbStrOBqYZCnW3ewpigidKn LEdYq1G9OJYYd7DA7R7pGzF3DY1U3xmkCL9xgqT22Ls6e04EQwIlPjtBKbMJoKDA lCQoo3BHjf4M8bo/NTxrX+Oq8e6mgy4ev4cVBzxeOBvierECaoB/ISRA5cZ442xd GpMZJLfM4H7YI8qbQC4LGck5ErrJnmnK8G4Zskm/WWdYFFe1xpClZGrAiWrM11Pd GESHLmgpkayUX86C7wtMY6cIdE+If5c= -----END CERTIFICATE-----Generated at Sun Jun 15 11:23:06 2025 by rpki-client