$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfcb7ddb-75c0-32e9-9c7c-669b70146c3d.roa File: dfcb7ddb-75c0-32e9-9c7c-669b70146c3d.roa (raw, json) Hash identifier: GxJS/e1RVoT61jbyd5NDnhtGb0cV8Y+uJuIbd5b6yzE= Subject key identifier: 46:00:80:E4:08:CF:94:38:D6:37:FB:92:48:E6:CF:52:EB:D0:FC:BA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A31B564805C698B27913EF348 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfcb7ddb-75c0-32e9-9c7c-669b70146c3d.roa Signing time: Sun 15 Jun 2025 01:00:49 +0000 ROA not before: Sun 15 Jun 2025 01:00:49 +0000 ROA not after: Sat 13 Sep 2025 01:00:49 +0000 asID: 20940 IP address blocks: 23.33.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:31:b5:64:80:5c:69:8b:27:91:3e:f3:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 15 01:00:49 2025 GMT Not After : Sep 13 01:00:49 2025 GMT Subject: CN=cd7c9542-de50-4239-bf41-7a6b822a4130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0f:1e:58:85:15:19:98:da:16:2b:cb:f0:e1: 58:a9:8f:de:e7:c1:35:ed:3e:bc:54:71:b8:8d:c4: e8:0a:44:50:be:38:05:72:7f:00:39:5b:81:f0:19: e9:df:0f:18:e3:e4:35:89:49:93:d5:b3:c1:29:92: 0a:7c:ae:d9:94:1e:85:66:37:59:e7:53:5e:32:03: 10:e0:a3:76:15:62:e2:12:f7:e7:60:e1:a4:70:06: bc:88:7b:28:e4:f8:58:4f:9b:76:75:e3:1a:4b:f2: 94:59:6d:c6:07:13:bd:10:2e:08:2b:4f:bc:b7:0c: 68:65:94:8b:2c:26:37:98:81:8c:ca:93:fc:ad:42: 77:bf:e5:b8:c1:83:70:a2:75:00:56:43:7d:2a:74: a3:11:c8:ec:ef:26:4f:f3:be:da:74:4a:85:be:56: f5:bc:00:5b:7b:65:dd:84:b6:f6:69:6a:2b:08:fd: 40:24:24:b9:30:9c:82:1c:a3:34:aa:36:80:20:95: f2:78:9b:dc:fe:27:e6:19:c7:fe:9c:92:6f:7c:bf: 92:de:f5:6a:d5:37:dd:c6:b0:91:8b:0d:9a:0e:c5: 88:ab:3c:c6:8b:a8:e4:90:97:33:23:bb:6d:23:c6: 54:2d:65:1a:53:d7:b7:57:da:4c:c3:e1:f4:9c:ab: 62:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:00:80:E4:08:CF:94:38:D6:37:FB:92:48:E6:CF:52:EB:D0:FC:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfcb7ddb-75c0-32e9-9c7c-669b70146c3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:b4:d7:9d:11:a7:4f:d3:f4:c3:85:63:45:68:9c:57:0e:a4: 2e:19:fa:e2:5b:2a:1d:e6:bc:0f:77:23:8e:52:93:ca:40:d5: e4:cf:54:0f:de:4d:df:d3:df:38:75:71:1f:79:c3:ac:06:d1: 75:f4:8f:31:2c:83:d0:95:41:05:eb:9e:4d:e6:54:5a:8d:b8: ba:54:97:b5:3e:7e:cb:38:58:d1:0a:3a:4a:00:7d:f7:5a:8f: 4e:82:12:5d:07:71:fb:a3:6f:da:4e:42:05:c8:17:73:48:db: 59:75:65:94:29:f2:5a:43:c1:e3:e0:7b:e9:d1:f8:55:ff:e9: c3:71:ce:d0:41:87:c6:08:a9:f2:58:04:4e:f4:b6:e3:0c:39: 6f:56:d9:1b:57:ec:25:92:cc:4a:cb:c1:9f:7e:a4:de:27:1f: 6b:59:23:24:6b:07:0f:f9:b9:d7:0c:01:20:63:47:29:5a:f6: 4a:cf:43:a9:13:95:05:3d:9f:75:25:75:39:a7:23:d6:24:5d: d6:e4:8e:d4:f7:35:b5:76:7d:26:51:a5:af:9b:fe:1b:fe:dc: c9:13:ef:87:43:20:a8:09:4f:68:1b:c1:cc:01:bb:31:f8:aa: f3:02:ed:2c:4d:6c:a9:bc:85:e9:5e:b6:2c:96:7f:38:00:42: 79:3e:41:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoxtWSAXGmLJ5E+80gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxNTAxMDA0OVoXDTI1MDkxMzAxMDA0OVowLzEtMCsGA1UEAxMk Y2Q3Yzk1NDItZGU1MC00MjM5LWJmNDEtN2E2YjgyMmE0MTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw8eWIUVGZjaFivL8OFYqY/e58E17T68VHG4 jcToCkRQvjgFcn8AOVuB8Bnp3w8Y4+Q1iUmT1bPBKZIKfK7ZlB6FZjdZ51NeMgMQ 4KN2FWLiEvfnYOGkcAa8iHso5PhYT5t2deMaS/KUWW3GBxO9EC4IK0+8twxoZZSL LCY3mIGMypP8rUJ3v+W4wYNwonUAVkN9KnSjEcjs7yZP877adEqFvlb1vABbe2Xd hLb2aWorCP1AJCS5MJyCHKM0qjaAIJXyeJvc/ifmGcf+nJJvfL+S3vVq1TfdxrCR iw2aDsWIqzzGi6jkkJczI7ttI8ZULWUaU9e3V9pMw+H0nKtiHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYAgOQIz5Q41jf7kkjmz1Lr0Py6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGZjYjdkZGItNzVjMC0z MmU5LTljN2MtNjY5YjcwMTQ2YzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyF/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACy0150Rp0/T9MOFY0VonFcOpC4Z+uJbKh3mvA93I45Sk8pA1eTPVA/e Td/T3zh1cR95w6wG0XX0jzEsg9CVQQXrnk3mVFqNuLpUl7U+fss4WNEKOkoAffda j06CEl0Hcfujb9pOQgXIF3NI21l1ZZQp8lpDwePge+nR+FX/6cNxztBBh8YIqfJY BE70tuMMOW9W2RtX7CWSzErLwZ9+pN4nH2tZIyRrBw/5udcMASBjRyla9krPQ6kT lQU9n3UldTmnI9YkXdbkjtT3NbV2fSZRpa+b/hv+3MkT74dDIKgJT2gbwcwBuzH4 qvMC7SxNbKm8heletiyWfzgAQnk+Qfw= -----END CERTIFICATE-----Generated at Sun Jun 15 11:07:15 2025 by rpki-client