$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e49a1991-fef0-3406-803c-c6f5a2bf64ae.roa File: e49a1991-fef0-3406-803c-c6f5a2bf64ae.roa (raw, json) Hash identifier: sarNTqwShYUQ2d66fStXLNHmaWXgD3hjUkbb5mu8OhM= Subject key identifier: 53:43:0D:C3:21:B1:A4:4A:D8:06:9C:88:AF:E3:98:22:53:E3:D7:2A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A2D85995D56D1ED5A12633A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e49a1991-fef0-3406-803c-c6f5a2bf64ae.roa Signing time: Fri 13 Jun 2025 13:01:04 +0000 ROA not before: Fri 13 Jun 2025 13:01:04 +0000 ROA not after: Thu 11 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 23.34.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:85:99:5d:56:d1:ed:5a:12:63:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 13 13:01:04 2025 GMT Not After : Sep 11 13:01:04 2025 GMT Subject: CN=ecef3d87-8c49-47ed-9765-5a5cbb667f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1f:b4:c3:bb:d2:d0:67:63:08:27:e1:cc:44: 14:18:d2:8d:b9:21:1a:91:1b:40:29:33:e8:da:37: 24:87:a4:25:a4:62:6f:89:7e:c1:87:32:1c:59:12: c6:7e:4c:83:8f:c0:e3:8a:b6:a7:b1:12:c3:a1:b3: 15:50:69:46:ae:e9:6f:60:b2:6d:59:77:e2:62:8f: a8:8e:9c:dc:db:3a:66:f7:12:75:d6:68:75:23:8f: a4:87:eb:46:1d:2e:5e:3e:96:cf:93:80:60:04:1f: 8c:b4:5d:27:01:b7:66:c5:c9:c5:5f:ef:81:c9:6c: a4:a1:8f:05:60:3c:55:df:5b:f4:52:ca:df:69:8c: e9:d5:1c:0f:28:91:df:d3:f1:eb:7c:2b:92:61:fa: 86:d9:27:86:bb:f5:0a:f0:1b:94:ae:93:8e:f9:23: 25:11:54:9b:30:42:6b:a2:8b:00:e1:9e:84:2e:88: 02:39:9d:71:12:db:ac:af:f0:75:41:02:06:60:19: d8:e3:b9:49:6e:3f:dd:e7:b4:28:70:07:e3:e4:9f: c8:71:d9:2f:7c:8e:46:a6:a7:51:93:e7:54:be:96: ca:59:a6:db:16:da:7c:7a:5a:36:24:00:b7:cc:a1: 83:88:ea:cb:d3:dc:38:8a:11:43:fc:ba:0e:ab:a7: 7c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:43:0D:C3:21:B1:A4:4A:D8:06:9C:88:AF:E3:98:22:53:E3:D7:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e49a1991-fef0-3406-803c-c6f5a2bf64ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:5d:32:60:87:de:49:84:3d:e9:d0:dd:e8:89:a9:56:07:ba: b8:37:47:a3:a7:d9:de:b9:58:24:7b:bd:fd:4b:ce:5b:86:31: 14:ae:49:00:86:48:8e:59:f3:70:9c:c7:3d:ab:d5:83:ab:0e: 07:4e:45:ef:09:97:a2:09:75:00:da:6d:30:0e:66:f1:77:00: f1:16:2a:f4:3c:0c:cf:73:24:39:7b:92:a0:71:20:08:59:61: 75:ef:32:ad:c0:59:27:63:70:43:2d:83:22:28:00:31:03:ac: b7:b0:1e:cc:d4:a0:4d:28:a5:39:8d:c4:26:db:70:7c:37:17: 48:33:6e:9e:69:a0:e5:01:8b:e9:9f:b5:2f:f7:bb:9c:87:b7: fe:36:b5:c2:96:1f:82:3d:23:b3:71:cc:ec:05:6e:7c:79:d4: 12:02:a3:55:9d:e6:52:c9:09:a5:23:d8:87:22:d8:e3:f8:80: 40:b9:68:a8:62:b6:ba:a1:54:08:6f:c5:c3:da:b0:f6:47:fe: a3:59:ff:74:5b:7a:bb:82:05:26:d3:32:cc:22:6c:32:24:b4: 1c:50:08:32:00:5f:1c:8f:0f:0e:d8:e4:11:0d:15:b3:f4:4a: f8:b2:16:3f:b0:54:62:62:48:b3:e6:5e:1a:ad:b7:d0:a3:f7: 69:2c:27:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothZldVtHtWhJjOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk ZWNlZjNkODctOGM0OS00N2VkLTk3NjUtNWE1Y2JiNjY3Zjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR+0w7vS0GdjCCfhzEQUGNKNuSEakRtAKTPo 2jckh6QlpGJviX7BhzIcWRLGfkyDj8DjiransRLDobMVUGlGrulvYLJtWXfiYo+o jpzc2zpm9xJ11mh1I4+kh+tGHS5ePpbPk4BgBB+MtF0nAbdmxcnFX++ByWykoY8F YDxV31v0UsrfaYzp1RwPKJHf0/HrfCuSYfqG2SeGu/UK8BuUrpOO+SMlEVSbMEJr oosA4Z6ELogCOZ1xEtusr/B1QQIGYBnY47lJbj/d57QocAfj5J/IcdkvfI5GpqdR k+dUvpbKWabbFtp8elo2JAC3zKGDiOrL09w4ihFD/LoOq6d8xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNDDcMhsaRK2AaciK/jmCJT49cqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTQ5YTE5OTEtZmVmMC0z NDA2LTgwM2MtYzZmNWEyYmY2NGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpdMmCH3kmEPenQ3eiJqVYHurg3R6On2d65WCR7vf1LzluGMRSuSQCG SI5Z83Ccxz2r1YOrDgdORe8Jl6IJdQDabTAOZvF3APEWKvQ8DM9zJDl7kqBxIAhZ YXXvMq3AWSdjcEMtgyIoADEDrLewHszUoE0opTmNxCbbcHw3F0gzbp5poOUBi+mf tS/3u5yHt/42tcKWH4I9I7NxzOwFbnx51BICo1Wd5lLJCaUj2Ici2OP4gEC5aKhi trqhVAhvxcPasPZH/qNZ/3RberuCBSbTMswibDIktBxQCDIAXxyPDw7Y5BENFbP0 SviyFj+wVGJiSLPmXhqtt9Cj92ksJ1o= -----END CERTIFICATE-----Generated at Sun Jun 15 19:04:57 2025 by rpki-client