$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2277a8-acf1-30fd-9e0e-2d7a0559f8aa.roa File: cf2277a8-acf1-30fd-9e0e-2d7a0559f8aa.roa (raw, json) Hash identifier: IrNqmQ4cae7HI/2BkKZ7fqMLoWPxF7qQ5mLrspA+EUE= Subject key identifier: 66:04:45:2B:4A:1E:49:85:E3:C3:C9:0D:3B:5A:AF:E2:B8:59:00:01 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A2D8593BA46220EFDBAB9E880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2277a8-acf1-30fd-9e0e-2d7a0559f8aa.roa Signing time: Fri 13 Jun 2025 13:01:04 +0000 ROA not before: Fri 13 Jun 2025 13:01:04 +0000 ROA not after: Thu 11 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 23.33.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:85:93:ba:46:22:0e:fd:ba:b9:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 13 13:01:04 2025 GMT Not After : Sep 11 13:01:04 2025 GMT Subject: CN=f8afefb0-7c70-4769-b217-87d96302dc89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:be:a6:cc:02:82:fd:2e:69:44:8e:44:b7:64: 3b:91:c4:ad:40:b4:0b:94:0a:a0:6c:8d:7c:3d:69: ca:81:3e:b9:97:0b:ef:a6:e8:c8:d7:d1:6e:ce:5f: 9e:da:4c:34:86:17:48:48:3a:ef:f9:48:49:02:62: df:3a:30:60:33:38:fa:78:40:e0:ab:96:7f:ff:13: 4c:d5:25:19:2a:14:fd:7e:34:74:46:e6:9a:4a:93: bf:4c:b7:a1:7e:46:d0:7e:46:b7:7f:e5:e7:f8:6a: 0d:77:10:44:3f:70:8b:20:48:2d:c5:94:08:2d:e0: 7f:66:cc:9e:fa:2b:15:28:b5:6e:99:7b:9e:30:91: 53:7f:c2:57:41:33:8d:f5:e8:2e:ab:99:3c:3c:d9: 72:1f:8d:4d:b5:8f:51:d3:1a:d1:0d:70:20:87:97: 16:36:d2:a3:1d:be:1e:88:f7:cb:c2:3c:d8:b6:05: 8b:70:6f:af:27:be:48:8d:3e:02:e3:fc:26:a2:1e: 2f:c4:bf:de:b6:23:fb:6b:4a:ee:c9:a3:36:29:bf: 91:82:77:a5:59:78:0c:48:bf:1c:78:59:b7:be:7a: 40:9e:1d:f9:00:13:b1:c6:85:11:87:6f:c1:6f:fe: 15:86:61:a3:a0:9b:c8:95:eb:19:02:26:fb:57:f4: d4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:04:45:2B:4A:1E:49:85:E3:C3:C9:0D:3B:5A:AF:E2:B8:59:00:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2277a8-acf1-30fd-9e0e-2d7a0559f8aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:09:a0:ee:8b:3e:fd:89:0f:c4:c2:4e:6f:e3:e3:3e:ed:52: eb:20:02:fb:d3:05:c0:78:10:21:eb:62:c9:38:55:78:91:e0: 93:13:34:62:fe:21:b0:a6:44:6e:70:c9:a6:54:5f:4f:6d:02: ca:7f:47:d5:ba:14:69:fb:2a:d5:72:9f:b1:67:4b:b1:9a:dd: a5:51:72:fa:4f:ae:d0:66:9c:6f:d8:d4:aa:c8:18:ad:79:5d: 1e:d9:39:28:f4:f3:e2:d7:4d:b4:bd:7b:50:13:f2:1f:0e:5a: 47:b0:2b:68:1a:2b:cb:6b:c2:8a:17:0d:a7:cf:4e:79:71:e4: 63:e1:17:e5:f4:c3:29:a5:18:5e:f5:3a:ce:80:a3:c4:f3:fb: 8b:50:17:2e:b8:91:6d:ef:b5:5e:f6:ad:69:26:a3:50:73:8e: be:41:c0:aa:45:5e:f2:60:14:bf:1d:79:46:5f:6f:7d:2d:fe: df:db:e7:7a:28:2d:b6:67:ea:69:4b:58:15:42:b2:18:e1:04: 2b:40:cf:ae:f3:b2:81:f4:65:5b:d5:b0:1f:98:03:8d:75:9d: 51:db:10:53:cf:82:4e:38:c0:ec:d2:f3:11:79:1a:f2:e6:4d: 69:80:8f:7e:69:4f:a3:0e:aa:a6:67:55:37:4a:5e:6c:78:d0: e2:55:fc:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothZO6RiIO/bq56IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk ZjhhZmVmYjAtN2M3MC00NzY5LWIyMTctODdkOTYzMDJkYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb6mzAKC/S5pRI5Et2Q7kcStQLQLlAqgbI18 PWnKgT65lwvvpujI19Fuzl+e2kw0hhdISDrv+UhJAmLfOjBgMzj6eEDgq5Z//xNM 1SUZKhT9fjR0RuaaSpO/TLehfkbQfka3f+Xn+GoNdxBEP3CLIEgtxZQILeB/Zsye +isVKLVumXueMJFTf8JXQTON9eguq5k8PNlyH41NtY9R0xrRDXAgh5cWNtKjHb4e iPfLwjzYtgWLcG+vJ75IjT4C4/wmoh4vxL/etiP7a0ruyaM2Kb+RgnelWXgMSL8c eFm3vnpAnh35ABOxxoURh2/Bb/4VhmGjoJvIlesZAib7V/TUfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYERStKHkmF48PJDTtar+K4WQABMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2YyMjc3YTgtYWNmMS0z MGZkLTllMGUtMmQ3YTA1NTlmOGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgJoO6LPv2JD8TCTm/j4z7tUusgAvvTBcB4ECHrYsk4VXiR4JMTNGL+ IbCmRG5wyaZUX09tAsp/R9W6FGn7KtVyn7FnS7Ga3aVRcvpPrtBmnG/Y1KrIGK15 XR7ZOSj08+LXTbS9e1AT8h8OWkewK2gaK8trwooXDafPTnlx5GPhF+X0wymlGF71 Os6Ao8Tz+4tQFy64kW3vtV72rWkmo1Bzjr5BwKpFXvJgFL8deUZfb30t/t/b53oo LbZn6mlLWBVCshjhBCtAz67zsoH0ZVvVsB+YA411nVHbEFPPgk44wOzS8xF5GvLm TWmAj35pT6MOqqZnVTdKXmx40OJV/KQ= -----END CERTIFICATE-----Generated at Sun Jun 15 18:53:43 2025 by rpki-client