$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/db1d670d-f9e4-35a1-bd40-66bf6166ea15.roa File: db1d670d-f9e4-35a1-bd40-66bf6166ea15.roa (raw, json) Hash identifier: eWUd7T2inLdv4EXWdx5OCCnRJMXAPIOncZS9fJpUTM8= Subject key identifier: 9D:5B:40:99:11:AD:DF:78:2A:CB:0E:9B:26:E6:98:BC:10:21:62:C1 Certificate issuer: /CN=6d54b36a-c725-4c18-93e1-825afc645e2c Certificate serial: 010D0C9F43285849D42FA94BC8327CF62712BDA0 Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/db1d670d-f9e4-35a1-bd40-66bf6166ea15.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 23.227.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:a9:4b:c8:32:7c:f6:27:12:bd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=294690fc-1999-4229-90ce-d4fbea7884cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ff:d6:e7:23:58:4e:7d:d2:60:d0:c5:6a:c0: b8:58:15:a9:69:7c:33:d0:02:59:00:85:e9:4d:1d: 56:f8:d6:61:b4:cc:ee:4c:1a:d4:07:33:8f:ae:bc: 13:e7:4d:bb:65:87:ed:27:0a:32:83:61:0c:03:b3: ec:38:ad:55:26:a5:00:a0:33:77:25:fc:3c:2f:4c: d7:c0:72:08:7a:cf:14:ac:bf:ae:fd:33:f9:2b:29: 64:71:fa:83:6a:19:40:a2:6e:3c:3e:df:66:3d:e1: 2c:e9:2f:15:1b:7a:de:3e:99:68:b8:f6:42:8f:f1: 5e:5a:7a:92:6f:1c:25:a3:ac:a5:33:05:97:bb:dc: ba:16:0c:da:10:55:93:3c:eb:45:0f:af:db:20:65: 92:6f:cd:58:6b:24:80:6b:61:a9:df:7c:53:17:69: 04:8e:ae:56:c0:15:5c:d1:c5:2b:c5:ae:f8:17:e0: 20:56:74:b6:ef:43:6b:3a:0d:4a:39:79:ee:7e:a6: 1e:01:7c:63:c3:53:55:2e:32:33:d0:8a:df:08:6f: 98:7a:95:f6:93:a2:3c:3a:0e:32:ce:66:f7:fa:00: da:7d:26:2f:d5:46:eb:03:5e:1c:e9:bf:00:9f:95: b1:8e:9b:f5:0b:44:1e:a2:02:0c:6c:7d:08:35:47: c4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5B:40:99:11:AD:DF:78:2A:CB:0E:9B:26:E6:98:BC:10:21:62:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/db1d670d-f9e4-35a1-bd40-66bf6166ea15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl X509v3 Authority Key Identifier: keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer sbgp-ipAddrBlock: critical IPv4: 23.227.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:ef:37:72:ba:94:a8:53:c3:c6:50:16:a8:ac:bd:2b:e2:10: ac:3d:67:33:52:dd:b4:ef:1f:e9:96:22:73:b1:a3:c6:a8:9c: cf:65:b8:82:fc:a4:f8:33:ab:a1:c1:10:c4:11:49:ed:85:e0: b2:86:89:5b:3b:c9:14:40:e5:09:f0:a7:b9:57:74:83:f6:da: 2f:ef:80:25:67:08:64:66:d7:85:46:3e:30:ca:b5:d8:07:95: c5:ea:b9:29:84:2c:80:6c:af:26:bb:d2:94:bb:43:a8:b6:54: c2:19:71:69:27:bb:87:04:76:c4:4c:55:90:5a:b7:38:57:86: e5:c5:8b:2c:ac:74:38:20:f6:14:ab:7c:a5:7f:d0:78:ac:a9: c8:63:58:ba:66:8e:1b:c3:04:9b:7a:dd:21:d3:15:85:1e:db: e7:df:90:8e:aa:4e:d8:b4:c2:5d:9e:70:fa:ee:c7:b9:a2:79: 28:6a:c8:5d:f0:79:61:49:db:67:2a:a8:17:42:79:d1:87:13: c4:fa:da:cb:a4:30:8d:df:0a:7c:1d:e2:b2:02:fe:59:0a:8c: 60:4f:17:cd:ee:8f:3e:5d:a1:11:a9:2a:ac:cd:8b:17:bb:3b: 0d:c9:e3:2f:3e:09:ee:8b:a0:fd:2c:64:17:a6:43:d1:81:bc: 27:19:42:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL6lLyDJ89icSvaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ1NGIzNmEtYzcyNS00YzE4LTkzZTEtODI1YWZjNjQ1 ZTJjMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk Mjk0NjkwZmMtMTk5OS00MjI5LTkwY2UtZDRmYmVhNzg4NGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq//W5yNYTn3SYNDFasC4WBWpaXwz0AJZAIXp TR1W+NZhtMzuTBrUBzOPrrwT5027ZYftJwoyg2EMA7PsOK1VJqUAoDN3Jfw8L0zX wHIIes8UrL+u/TP5KylkcfqDahlAom48Pt9mPeEs6S8VG3rePplouPZCj/FeWnqS bxwlo6ylMwWXu9y6FgzaEFWTPOtFD6/bIGWSb81YaySAa2Gp33xTF2kEjq5WwBVc 0cUrxa74F+AgVnS270NrOg1KOXnufqYeAXxjw1NVLjIz0IrfCG+YepX2k6I8Og4y zmb3+gDafSYv1UbrA14c6b8An5Wxjpv1C0QeogIMbH0INUfEhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1bQJkRrd94KssOmybmmLwQIWLBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0 YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVhZmM2NDVlMmMvZGIxZDY3MGQtZjllNC0z NWExLWJkNDAtNjZiZjYxNjZlYTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmQ1NGIzNmEtYzcyNS00YzE4LTkz ZTEtODI1YWZjNjQ1ZTJjLzZkNTRiMzZhLWM3MjUtNGMxOC05M2UxLTgyNWFmYzY0 NWUyYy5jcmwwHwYDVR0jBBgwFoAUOFjVJZUYEHsaUpZxvbiCe8GGfbIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVh ZmM2NDVlMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+MmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDvN3K6lKhTw8ZQFqisvSviEKw9ZzNS3bTvH+mWInOxo8aonM9luIL8 pPgzq6HBEMQRSe2F4LKGiVs7yRRA5Qnwp7lXdIP22i/vgCVnCGRm14VGPjDKtdgH lcXquSmELIBsrya70pS7Q6i2VMIZcWknu4cEdsRMVZBatzhXhuXFiyysdDgg9hSr fKV/0HisqchjWLpmjhvDBJt63SHTFYUe2+ffkI6qTti0wl2ecPrux7mieShqyF3w eWFJ22cqqBdCedGHE8T62sukMI3fCnwd4rIC/lkKjGBPF83ujz5doRGpKqzNixe7 Ow3J4y8+Ce6LoP0sZBemQ9GBvCcZQhc= -----END CERTIFICATE-----Generated at Sun Jun 15 18:59:00 2025 by rpki-client