$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d843801a-c918-3b30-982b-7bc8bfd4a785.roa File: d843801a-c918-3b30-982b-7bc8bfd4a785.roa (raw, json) Hash identifier: pI4Su56I4fdzcfKBqp4ZfDXJRUQEcg4ofOXgRFXqI8E= Subject key identifier: D7:45:1F:10:E9:A9:2E:94:C3:C8:B6:82:D2:FE:50:1C:AE:E4:67:6D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A2D8598A9E1A3D8D8977CC100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d843801a-c918-3b30-982b-7bc8bfd4a785.roa Signing time: Fri 13 Jun 2025 13:01:04 +0000 ROA not before: Fri 13 Jun 2025 13:01:04 +0000 ROA not after: Thu 11 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.33.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:85:98:a9:e1:a3:d8:d8:97:7c:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 13 13:01:04 2025 GMT Not After : Sep 11 13:01:04 2025 GMT Subject: CN=4216ed20-e02d-467d-bb9e-4ee60255f157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d8:d2:a3:63:d4:4c:98:d7:1c:2c:2a:a2:a9: 9d:16:eb:61:fd:11:44:6e:6a:04:80:ba:3a:2d:03: 40:4e:02:4f:7d:f8:0f:7f:10:e5:f1:13:6a:de:47: 9a:a9:3f:4e:b7:17:18:05:ba:f4:07:39:7a:fe:ba: f5:68:fd:d9:a6:40:84:b0:e0:d4:ea:e2:88:f1:be: fe:d8:d0:84:e6:c2:8a:2d:54:b8:32:b2:13:86:d7: 11:d6:57:75:3e:62:33:1f:f4:ca:22:c9:47:49:06: 5c:7d:6f:dd:17:da:4a:e0:15:ab:f8:df:45:9a:0b: 7b:71:92:28:28:c1:27:68:7f:93:c3:20:c3:7b:06: 4a:e0:bc:e0:68:5d:b7:f7:f6:70:63:f6:be:d7:f4: 64:c6:ba:ac:11:b8:f1:dc:4c:59:8a:67:16:89:89: 5b:4b:3c:1c:da:4e:9d:1f:8c:fd:3c:40:0a:f7:32: 06:dc:15:3e:47:3d:a2:29:bf:dc:b1:34:65:92:5b: f2:ab:f8:4a:7f:df:d6:69:82:3e:19:dc:17:d6:2b: 70:a9:03:8f:6f:bd:fa:26:7a:30:de:fe:5e:06:68: 18:57:99:f3:81:69:15:73:73:c1:d1:e8:3b:ff:a4: fd:63:89:e2:2d:ee:09:16:3d:a6:ee:f4:f5:12:cf: 10:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:45:1F:10:E9:A9:2E:94:C3:C8:B6:82:D2:FE:50:1C:AE:E4:67:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d843801a-c918-3b30-982b-7bc8bfd4a785.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a6:a4:4b:6b:90:05:1d:07:48:c5:98:a5:fa:ed:e7:e3:36: 92:72:33:4b:f2:96:36:d1:39:f6:1c:62:44:01:0c:6d:90:3a: 1e:c0:ad:20:8a:fe:03:12:e3:f7:50:28:c0:ee:3a:46:76:f0: 65:66:14:72:e3:68:8a:5c:8c:43:8b:eb:28:49:1e:0d:55:65: 74:13:85:6c:15:b7:7b:9a:df:64:b7:72:6a:e6:fe:c8:e1:79: 70:0b:0a:70:d7:4d:05:fb:e7:dd:2a:8b:9f:fb:b5:5a:c8:e9: b6:a4:56:aa:ec:83:c0:e1:00:4d:48:c0:94:1c:d5:65:b1:3d: 4b:a7:3d:d0:14:77:f7:6c:0d:0a:b4:de:59:84:bf:23:0b:bc: cf:a4:fc:9c:98:56:cf:44:c8:e9:57:d1:17:31:58:96:46:c8: aa:1b:e8:2c:e0:73:70:1c:76:a2:f8:60:4a:17:e3:cc:c8:2f: b7:12:ea:05:17:74:e7:91:d5:07:14:cf:c8:d1:52:ee:29:00: ee:73:29:ab:d0:33:40:d3:55:9f:f8:16:f4:6f:4d:76:5b:72: 84:15:e2:49:85:bd:c1:e9:e6:5f:44:b9:fb:40:e7:38:b1:cb: 5f:c6:28:bb:cd:d3:c0:e7:38:29:9a:f8:36:f7:3f:d7:f7:98: d3:21:60:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothZip4aPY2Jd8wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk NDIxNmVkMjAtZTAyZC00NjdkLWJiOWUtNGVlNjAyNTVmMTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49jSo2PUTJjXHCwqoqmdFuth/RFEbmoEgLo6 LQNATgJPffgPfxDl8RNq3keaqT9OtxcYBbr0Bzl6/rr1aP3ZpkCEsODU6uKI8b7+ 2NCE5sKKLVS4MrIThtcR1ld1PmIzH/TKIslHSQZcfW/dF9pK4BWr+N9Fmgt7cZIo KMEnaH+TwyDDewZK4LzgaF239/ZwY/a+1/RkxrqsEbjx3ExZimcWiYlbSzwc2k6d H4z9PEAK9zIG3BU+Rz2iKb/csTRlklvyq/hKf9/WaYI+GdwX1itwqQOPb736Jnow 3v5eBmgYV5nzgWkVc3PB0eg7/6T9Y4niLe4JFj2m7vT1Es8QKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdFHxDpqS6Uw8i2gtL+UByu5GdtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDg0MzgwMWEtYzkxOC0z YjMwLTk4MmItN2JjOGJmZDRhNzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABimpEtrkAUdB0jFmKX67efjNpJyM0vyljbROfYcYkQBDG2QOh7ArSCK /gMS4/dQKMDuOkZ28GVmFHLjaIpcjEOL6yhJHg1VZXQThWwVt3ua32S3cmrm/sjh eXALCnDXTQX7590qi5/7tVrI6bakVqrsg8DhAE1IwJQc1WWxPUunPdAUd/dsDQq0 3lmEvyMLvM+k/JyYVs9EyOlX0RcxWJZGyKob6Czgc3AcdqL4YEoX48zIL7cS6gUX dOeR1QcUz8jRUu4pAO5zKavQM0DTVZ/4FvRvTXZbcoQV4kmFvcHp5l9EuftA5zix y1/GKLvN08DnOCma+Db3P9f3mNMhYKI= -----END CERTIFICATE-----Generated at Sun Jun 15 13:02:48 2025 by rpki-client