$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5a8528e-3838-3b6a-8c91-cb48849a1fbe.roa File: d5a8528e-3838-3b6a-8c91-cb48849a1fbe.roa (raw, json) Hash identifier: coFWyZDAMzrqONqwg0D/PGoQxURa9GZghQnMhQdVuoE= Subject key identifier: E7:80:2D:EF:D5:87:C2:25:D5:3A:BA:24:AB:B9:91:34:8B:D2:75:FF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A2D8599398B6096B3062C4040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5a8528e-3838-3b6a-8c91-cb48849a1fbe.roa Signing time: Fri 13 Jun 2025 13:01:04 +0000 ROA not before: Fri 13 Jun 2025 13:01:04 +0000 ROA not after: Thu 11 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 23.33.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:85:99:39:8b:60:96:b3:06:2c:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 13 13:01:04 2025 GMT Not After : Sep 11 13:01:04 2025 GMT Subject: CN=953c902e-4686-4197-8906-a817cc74dc28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ed:e0:a4:fb:66:01:9b:23:e7:0e:89:78:79: 93:ed:86:bf:66:0c:46:c7:ef:61:78:2d:47:5c:f8: 88:b6:39:52:4e:45:48:0e:1d:3b:aa:6e:3a:59:1e: e3:cf:54:70:54:5e:75:4a:bd:c1:0a:7d:5d:71:af: 76:11:0e:ea:c6:51:fc:11:56:1a:ec:99:86:d9:5c: 30:2e:d8:0a:41:7d:66:2b:71:cc:93:27:05:2b:0f: ad:fa:f3:ae:00:06:d7:15:5d:0a:05:a9:1c:db:fd: 87:62:3e:55:75:4c:ec:b5:77:de:15:db:9b:84:b8: d9:6a:94:b7:a4:ec:5d:b9:65:2c:9b:5f:49:70:05: b4:b1:c0:9d:42:89:5f:67:93:7b:e9:1e:39:56:ac: ac:ed:32:8c:b9:6f:e4:fa:15:3c:2b:24:c8:a1:0b: 92:83:2b:8d:36:54:a2:61:b3:04:dc:df:75:76:75: 32:d0:5f:ce:31:5a:91:53:58:8d:c6:70:10:b6:4a: 3a:05:20:7f:b5:17:bd:40:65:de:33:2c:9f:3a:eb: ab:ae:a6:95:ea:b1:94:2a:3b:64:c0:2c:11:51:5f: ec:86:d8:38:a6:ed:e3:8c:28:7b:d7:ef:c1:5f:60: fe:bf:a0:5a:0c:54:80:7f:a2:0d:12:8b:35:ce:58: 4b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:80:2D:EF:D5:87:C2:25:D5:3A:BA:24:AB:B9:91:34:8B:D2:75:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5a8528e-3838-3b6a-8c91-cb48849a1fbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:bb:52:dd:e4:c4:cc:3f:07:bf:5b:0f:bd:a3:fa:62:49:c8: 98:64:0e:1e:20:eb:a7:af:72:f5:a5:c1:f3:7c:f7:37:e2:4c: 4f:8b:17:dd:aa:e8:92:50:82:74:9c:af:27:85:3a:f1:ad:ba: c2:56:ef:c4:5f:41:da:35:7a:8c:c0:aa:bc:3c:98:71:1b:bf: 0c:6e:76:0f:d5:3c:4e:cb:78:9f:e0:a4:51:31:40:55:3c:06: 7d:bf:e7:42:5c:53:58:a3:1d:39:5d:87:82:8b:b5:66:19:89: f5:77:14:92:68:59:b8:04:04:26:9d:3a:4b:5d:a7:f6:0a:ae: 6a:6b:fc:a1:ac:62:5c:04:78:57:e4:d8:46:fa:42:6c:a2:df: 75:0d:43:ef:b4:bd:24:65:46:ff:ef:43:c0:e3:b8:8a:fd:ef: df:e7:7e:5f:7d:b4:2e:9d:ec:1b:0c:0e:e4:6c:e6:29:5f:30: bd:79:3c:ff:4b:5a:26:f3:7f:bb:9f:a6:a2:b3:ad:d3:ee:4e: 10:df:5a:9d:3f:87:94:33:12:c4:16:26:66:4e:38:fb:82:21: 79:9d:1e:01:10:8c:61:9c:51:39:6c:48:66:e0:18:82:58:38: e6:16:04:81:05:64:43:00:e9:f3:ce:67:b7:cd:27:c0:eb:e7: 87:a7:00:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothZk5i2CWswYsQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk OTUzYzkwMmUtNDY4Ni00MTk3LTg5MDYtYTgxN2NjNzRkYzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO3gpPtmAZsj5w6JeHmT7Ya/ZgxGx+9heC1H XPiItjlSTkVIDh07qm46WR7jz1RwVF51Sr3BCn1dca92EQ7qxlH8EVYa7JmG2Vww LtgKQX1mK3HMkycFKw+t+vOuAAbXFV0KBakc2/2HYj5VdUzstXfeFdubhLjZapS3 pOxduWUsm19JcAW0scCdQolfZ5N76R45Vqys7TKMuW/k+hU8KyTIoQuSgyuNNlSi YbME3N91dnUy0F/OMVqRU1iNxnAQtko6BSB/tRe9QGXeMyyfOuurrqaV6rGUKjtk wCwRUV/shtg4pu3jjCh71+/BX2D+v6BaDFSAf6INEos1zlhLUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeALe/Vh8Il1Tq6JKu5kTSL0nX/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDVhODUyOGUtMzgzOC0z YjZhLThjOTEtY2I0ODg0OWExZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHO7Ut3kxMw/B79bD72j+mJJyJhkDh4g66evcvWlwfN89zfiTE+LF92q 6JJQgnScryeFOvGtusJW78RfQdo1eozAqrw8mHEbvwxudg/VPE7LeJ/gpFExQFU8 Bn2/50JcU1ijHTldh4KLtWYZifV3FJJoWbgEBCadOktdp/YKrmpr/KGsYlwEeFfk 2Eb6Qmyi33UNQ++0vSRlRv/vQ8DjuIr979/nfl99tC6d7BsMDuRs5ilfML15PP9L Wibzf7ufpqKzrdPuThDfWp0/h5QzEsQWJmZOOPuCIXmdHgEQjGGcUTlsSGbgGIJY OOYWBIEFZEMA6fPOZ7fNJ8Dr54enAIY= -----END CERTIFICATE-----Generated at Sun Jun 15 19:11:27 2025 by rpki-client