$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9d50e60-bc48-3d82-b7ef-ebeda58db732.roa File: d9d50e60-bc48-3d82-b7ef-ebeda58db732.roa (raw, json) Hash identifier: 6lWlrNcddw1N3yvvzfk6qzGcJCz4wPkY1jWfzb/D1SU= Subject key identifier: C3:5D:5D:E8:EA:2E:3E:86:F9:F9:82:9F:0B:6D:A0:E7:61:2C:0E:9F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849E2251ED7182810DE922F7C40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9d50e60-bc48-3d82-b7ef-ebeda58db732.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 35994 IP address blocks: 23.219.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:1e:d7:18:28:10:de:92:2f:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=ff880771-559a-4113-98b7-fd1fe62987e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:59:99:ba:c8:aa:c3:76:b1:a2:59:69:7d:fe: 93:46:45:3e:32:7c:c0:3f:d1:b7:02:fd:fe:22:5e: e2:44:6f:56:8b:6d:a2:88:8e:5c:19:a7:06:e4:92: 28:64:a9:71:be:5a:60:1c:01:59:ec:c9:db:6e:27: 5f:73:a5:6f:da:90:51:1c:10:d6:b6:39:2b:dd:ad: 79:82:f0:2a:5a:cb:5d:41:b9:c5:30:c3:fc:c8:a8: 2c:bd:11:a1:e0:68:a2:5a:80:ff:61:89:2b:33:94: b1:a3:f7:e3:fd:0f:46:09:d3:74:ac:88:0a:e6:c3: ce:c6:b1:a4:8e:b3:94:26:fe:a8:24:1f:85:96:54: ff:01:9c:0a:4a:5e:16:eb:7a:ac:a6:57:75:6b:cb: b5:9f:fc:1f:0c:94:9f:9d:f3:ba:2a:86:d4:90:86: 0c:c3:09:e5:c5:84:a1:2d:41:2b:61:17:15:36:60: 6a:3a:b8:96:cc:e4:1f:00:7d:93:af:01:61:4a:b8: 18:61:c9:f9:ec:01:f5:a0:92:8c:fb:8d:a9:0a:2d: 53:dd:f7:59:d3:5d:7b:ab:2b:7e:97:a9:85:a8:2a: 07:d3:74:74:69:2f:92:34:16:1b:95:15:fd:03:29: 84:b0:8d:35:1e:c4:98:15:b0:7b:18:dd:a0:47:5b: b8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5D:5D:E8:EA:2E:3E:86:F9:F9:82:9F:0B:6D:A0:E7:61:2C:0E:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9d50e60-bc48-3d82-b7ef-ebeda58db732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:dc:72:c2:ed:b0:89:8b:ac:7d:b5:2c:14:a9:4b:b6:f0:d6: 38:b8:a7:a6:25:7f:a9:0f:9d:54:cc:e4:bf:21:61:db:3b:77: 72:26:bc:c2:6d:c4:8d:02:20:61:b2:64:a6:58:0c:8f:c0:b8: 12:f8:38:9a:0f:dd:0a:1b:56:5e:e8:df:06:29:0d:b1:82:3e: 87:6f:2e:2d:26:6a:e8:05:ef:77:40:b5:ea:d2:9c:c8:b6:fe: 4a:6d:03:df:e7:f1:2e:ba:fd:a0:40:4d:0d:de:46:f9:72:89: 8e:d1:f5:03:81:97:94:ed:f5:c0:69:90:3c:f5:71:26:80:bd: ce:e4:79:39:b9:4c:0d:bf:3f:03:ae:21:46:62:d2:14:cf:08: 82:c9:8e:c3:1c:b5:20:72:ae:a2:a2:3e:d5:0d:e3:9d:cd:00: a9:07:84:da:ba:48:70:0d:54:aa:07:3f:3e:e8:73:9e:b8:9d: b9:29:80:6d:60:fd:48:d2:ab:31:31:ce:bc:8a:23:80:93:67: b0:3e:be:de:4e:16:22:3c:21:a4:52:a9:1a:17:81:a7:fb:67: bf:ca:24:16:5f:2b:36:fd:40:ba:fa:c8:cc:bc:62:70:89:7c: 68:1b:34:0d:bb:c0:27:8c:63:96:d1:59:cf:3e:e7:db:ca:d6: e9:8e:3f:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJR7XGCgQ3pIvfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk ZmY4ODA3NzEtNTU5YS00MTEzLTk4YjctZmQxZmU2Mjk4N2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1mZusiqw3axollpff6TRkU+MnzAP9G3Av3+ Il7iRG9Wi22iiI5cGacG5JIoZKlxvlpgHAFZ7Mnbbidfc6Vv2pBRHBDWtjkr3a15 gvAqWstdQbnFMMP8yKgsvRGh4GiiWoD/YYkrM5Sxo/fj/Q9GCdN0rIgK5sPOxrGk jrOUJv6oJB+FllT/AZwKSl4W63qspld1a8u1n/wfDJSfnfO6KobUkIYMwwnlxYSh LUErYRcVNmBqOriWzOQfAH2TrwFhSrgYYcn57AH1oJKM+42pCi1T3fdZ0117qyt+ l6mFqCoH03R0aS+SNBYblRX9AymEsI01HsSYFbB7GN2gR1u4RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNdXejqLj6G+fmCnwttoOdhLA6fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDlkNTBlNjAtYmM0OC0z ZDgyLWI3ZWYtZWJlZGE1OGRiNzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9uDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLccsLtsImLrH21LBSpS7bw1ji4p6Ylf6kPnVTM5L8hYds7d3ImvMJt xI0CIGGyZKZYDI/AuBL4OJoP3QobVl7o3wYpDbGCPodvLi0maugF73dAterSnMi2 /kptA9/n8S66/aBATQ3eRvlyiY7R9QOBl5Tt9cBpkDz1cSaAvc7keTm5TA2/PwOu IUZi0hTPCILJjsMctSByrqKiPtUN453NAKkHhNq6SHANVKoHPz7oc564nbkpgG1g /UjSqzExzryKI4CTZ7A+vt5OFiI8IaRSqRoXgaf7Z7/KJBZfKzb9QLr6yMy8YnCJ fGgbNA27wCeMY5bRWc8+59vK1umOP5k= -----END CERTIFICATE-----Generated at Sun Jun 15 21:40:04 2025 by rpki-client