$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddfd7ffd-990f-391c-a9b8-bebe18389e8e.roa File: ddfd7ffd-990f-391c-a9b8-bebe18389e8e.roa (raw, json) Hash identifier: yzasdtQbsJBWx9ujqPot/jCGB6up5HXxNiSufXMOmNg= Subject key identifier: 4A:C9:FF:56:68:5C:3A:E5:DB:9B:7A:4F:30:7F:CC:9F:42:53:E8:3F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F01A9C65B88280756769C500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddfd7ffd-990f-391c-a9b8-bebe18389e8e.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 20940 IP address blocks: 23.34.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:9c:65:b8:82:80:75:67:69:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=1f963ae6-7a94-443b-ad2e-2e4e6dc30f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6d:57:5f:73:4d:09:45:16:af:a1:f5:48:e5: be:19:f4:9a:e1:ec:38:b9:1a:da:32:03:18:15:d0: 04:18:95:2d:63:21:55:a5:c3:62:d1:1c:5b:c1:5d: 51:a1:e5:c6:47:0a:43:a5:a2:6e:b3:ed:e4:d9:7a: 5f:a6:a5:f6:3e:7d:0e:f3:c9:d4:38:91:db:9e:0f: a0:a6:d7:b2:63:96:16:fb:51:01:ae:0b:7c:0c:47: 0f:e9:4a:3f:b9:67:01:84:d1:3c:aa:2d:f7:39:f9: 82:be:44:4a:bb:bb:1a:a4:e7:a8:fe:f4:a7:29:de: fa:19:2d:b0:67:08:3a:69:82:31:cc:a9:cc:ec:d6: 56:15:70:f2:41:ff:9e:b2:cb:66:e7:50:e3:e5:25: 23:89:ff:46:dc:2c:8e:78:c7:71:aa:62:b0:f1:6b: cf:86:87:6a:2a:5f:19:9a:18:82:5d:f0:d0:77:af: 49:b6:9f:c4:01:5f:12:40:8e:80:3c:58:82:14:d8: b8:12:fa:be:38:d6:af:d0:36:31:dd:9f:7f:2e:a4: 49:f8:b2:2f:f2:8f:3d:aa:be:aa:12:e6:e1:b9:ec: e0:2d:7f:85:81:2e:ff:16:ae:ce:99:08:65:1b:97: 7d:40:3a:ec:9d:cb:76:df:e1:b8:17:d1:5b:ef:cb: db:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C9:FF:56:68:5C:3A:E5:DB:9B:7A:4F:30:7F:CC:9F:42:53:E8:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddfd7ffd-990f-391c-a9b8-bebe18389e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:39:e9:f3:50:70:20:ab:6e:3f:c9:44:d0:21:37:69:01:d9: 8e:35:8e:89:23:c5:cf:66:e2:61:48:d4:cf:1d:9f:90:a9:1b: b7:5a:3f:ef:40:ad:60:32:6c:8b:16:0a:de:fa:f1:16:58:1e: 67:37:36:47:5e:01:25:99:9a:ae:67:d4:96:3f:23:cf:bf:b5: 52:49:7f:b9:68:85:c3:06:0c:b3:2d:fc:81:97:4e:cf:07:f0: 50:eb:ee:d5:73:ec:ab:1d:41:22:a7:85:4b:bb:b2:59:bb:4a: f7:d2:0c:ef:1d:50:20:df:40:10:3c:80:9f:ee:83:6b:de:b9: 79:e0:99:1b:a1:6e:b4:d5:e6:ce:8d:2b:b0:09:76:b2:74:27: 3d:3b:0f:81:c5:da:5d:ea:59:1b:e9:c9:b3:f0:54:8b:fb:0b: 74:b3:ee:b3:f9:15:59:4e:aa:e8:19:81:93:f1:6d:6c:e2:e9: 85:46:92:6b:e8:ed:5f:02:b2:9f:44:4f:2b:a7:c2:76:88:e4: f1:58:af:66:1e:1b:43:a0:c0:29:ea:ee:e2:31:dd:85:68:c7: d5:d0:30:a2:57:44:45:81:15:c4:30:0a:6a:e6:2e:4e:58:d1: 47:0d:38:60:e4:60:97:1d:13:e9:40:52:3d:21:10:79:ae:91: a8:f4:49:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGpxluIKAdWdpxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk MWY5NjNhZTYtN2E5NC00NDNiLWFkMmUtMmU0ZTZkYzMwZjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg21XX3NNCUUWr6H1SOW+GfSa4ew4uRraMgMY FdAEGJUtYyFVpcNi0RxbwV1RoeXGRwpDpaJus+3k2XpfpqX2Pn0O88nUOJHbng+g pteyY5YW+1EBrgt8DEcP6Uo/uWcBhNE8qi33OfmCvkRKu7sapOeo/vSnKd76GS2w Zwg6aYIxzKnM7NZWFXDyQf+esstm51Dj5SUjif9G3CyOeMdxqmKw8WvPhodqKl8Z mhiCXfDQd69Jtp/EAV8SQI6APFiCFNi4Evq+ONav0DYx3Z9/LqRJ+LIv8o89qr6q EubhuezgLX+FgS7/Fq7OmQhlG5d9QDrsnct23+G4F9Fb78vbfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErJ/1ZoXDrl25t6TzB/zJ9CU+g/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGRmZDdmZmQtOTkwZi0z OTFjLWE5YjgtYmViZTE4Mzg5ZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyLyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFo56fNQcCCrbj/JRNAhN2kB2Y41jokjxc9m4mFI1M8dn5CpG7daP+9A rWAybIsWCt768RZYHmc3NkdeASWZmq5n1JY/I8+/tVJJf7lohcMGDLMt/IGXTs8H 8FDr7tVz7KsdQSKnhUu7slm7SvfSDO8dUCDfQBA8gJ/ug2veuXngmRuhbrTV5s6N K7AJdrJ0Jz07D4HF2l3qWRvpybPwVIv7C3Sz7rP5FVlOqugZgZPxbWzi6YVGkmvo 7V8Csp9ETyunwnaI5PFYr2YeG0OgwCnq7uIx3YVox9XQMKJXREWBFcQwCmrmLk5Y 0UcNOGDkYJcdE+lAUj0hEHmukaj0SYc= -----END CERTIFICATE-----Generated at Sun Jun 15 18:53:44 2025 by rpki-client