$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36c4b9dc-45dc-3dab-b696-c53a884bf15e.roa File: 36c4b9dc-45dc-3dab-b696-c53a884bf15e.roa (raw, json) Hash identifier: fwmdd3+SewgARSDe85InJMSlvD8F/W/0PVe+0GT9/vs= Subject key identifier: BF:38:53:5B:4C:D5:C0:FC:02:9C:ED:28:05:37:68:65:D8:71:AB:7F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849E7A66EF69A98EEAEC8134F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36c4b9dc-45dc-3dab-b696-c53a884bf15e.roa Signing time: Mon 19 May 2025 12:20:54 +0000 ROA not before: Mon 19 May 2025 12:20:54 +0000 ROA not after: Sun 17 Aug 2025 12:20:54 +0000 asID: 20940 IP address blocks: 23.211.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:a6:6e:f6:9a:98:ee:ae:c8:13:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 19 12:20:54 2025 GMT Not After : Aug 17 12:20:54 2025 GMT Subject: CN=3831a255-b024-47bd-9d0d-76acef805c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cc:36:8f:e6:a1:3b:b7:a3:7f:77:8f:26:da: 6f:e3:fb:67:c7:8b:37:b1:f3:6b:77:63:2c:ee:5d: c2:40:8f:5a:28:01:15:06:17:da:c5:f6:47:45:a5: a0:7f:0e:6e:de:dd:e3:df:da:3a:4b:1b:a9:bb:49: 14:39:59:79:f0:26:2f:65:c8:fd:0e:53:26:b6:57: d6:ba:d8:8e:41:94:28:cb:76:82:fb:3d:c5:a5:a3: 01:85:f2:15:88:1e:c7:78:c6:9c:32:2a:91:5b:f5: 63:ea:ab:35:f6:05:d2:69:51:f5:fd:4a:75:7b:72: ab:7c:e5:93:83:e2:97:1e:86:2e:a7:ed:46:db:12: 5c:da:d3:2f:10:c1:4e:cc:d0:95:a3:38:2b:a9:d6: 67:6f:65:81:8c:1b:5d:5d:65:fc:08:06:d9:33:c4: 4a:8b:3d:76:f9:71:8e:5d:6c:56:7a:09:86:c2:82: ea:ff:8a:24:4d:97:b0:32:c5:91:b7:7e:31:a2:f8: 7f:bc:68:55:1e:bb:a3:a7:23:ce:36:94:38:74:76: f3:da:62:0a:bc:ba:35:88:71:c5:b7:f6:cd:e3:c3: 82:72:a1:d2:6f:53:6f:44:f8:02:c1:16:fa:ef:57: 02:80:b0:b2:e9:4b:07:14:b4:96:32:77:1e:a4:cd: f2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:38:53:5B:4C:D5:C0:FC:02:9C:ED:28:05:37:68:65:D8:71:AB:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36c4b9dc-45dc-3dab-b696-c53a884bf15e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:4d:3e:f8:3e:0a:8e:6c:90:9c:6d:34:88:19:d6:25:c5:6b: b2:08:7c:78:92:83:8e:37:98:b7:6c:39:1d:00:22:72:4b:9c: 16:a6:fc:03:4d:6b:04:66:6e:29:78:6c:6b:d8:45:24:0a:c2: fb:fc:c0:21:85:00:24:b8:dd:7b:9f:55:35:e5:07:60:5b:06: 54:62:ad:ec:f7:4d:b9:0b:d5:28:31:ea:ba:e7:33:1c:4a:bc: 7f:f4:0f:3d:67:58:b2:d5:e2:03:14:58:76:2c:c5:22:81:44: b8:6d:fe:ce:50:67:40:72:9e:56:17:a8:07:22:c5:40:f9:3f: 58:18:1b:a3:da:37:93:b7:2b:91:f7:b8:02:45:a0:30:76:09: 2b:98:9d:4a:3c:9f:c9:b1:0c:71:57:09:9b:e1:c2:2f:36:3f: bb:7c:2a:90:04:66:05:38:8b:2f:51:8e:19:e5:f5:9a:15:5e: 84:47:20:d0:ba:e1:2b:8a:28:1d:6c:91:c1:e2:5e:f6:7f:11: 32:f6:5a:63:f9:da:99:27:fa:a3:f8:9b:36:df:3e:7c:74:41: 16:06:46:0d:36:90:68:02:75:46:3e:31:b2:a1:76:96:97:4f: 16:7e:89:1f:f7:c8:4b:0e:3f:84:c8:f1:6a:80:5a:fb:65:8a: 44:40:1c:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnpm72mpjursgTT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxOTEyMjA1NFoXDTI1MDgxNzEyMjA1NFowLzEtMCsGA1UEAxMk MzgzMWEyNTUtYjAyNC00N2JkLTlkMGQtNzZhY2VmODA1YzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcw2j+ahO7ejf3ePJtpv4/tnx4s3sfNrd2Ms 7l3CQI9aKAEVBhfaxfZHRaWgfw5u3t3j39o6Sxupu0kUOVl58CYvZcj9DlMmtlfW utiOQZQoy3aC+z3FpaMBhfIViB7HeMacMiqRW/Vj6qs19gXSaVH1/Up1e3KrfOWT g+KXHoYup+1G2xJc2tMvEMFOzNCVozgrqdZnb2WBjBtdXWX8CAbZM8RKiz12+XGO XWxWegmGwoLq/4okTZewMsWRt34xovh/vGhVHrujpyPONpQ4dHbz2mIKvLo1iHHF t/bN48OCcqHSb1NvRPgCwRb671cCgLCy6UsHFLSWMncepM3yNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL84U1tM1cD8ApztKAU3aGXYcat/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzZjNGI5ZGMtNDVkYy0z ZGFiLWI2OTYtYzUzYTg4NGJmMTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9N/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRNPvg+Co5skJxtNIgZ1iXFa7IIfHiSg443mLdsOR0AInJLnBam/ANN awRmbil4bGvYRSQKwvv8wCGFACS43XufVTXlB2BbBlRirez3TbkL1Sgx6rrnMxxK vH/0Dz1nWLLV4gMUWHYsxSKBRLht/s5QZ0BynlYXqAcixUD5P1gYG6PaN5O3K5H3 uAJFoDB2CSuYnUo8n8mxDHFXCZvhwi82P7t8KpAEZgU4iy9Rjhnl9ZoVXoRHINC6 4SuKKB1skcHiXvZ/ETL2WmP52pkn+qP4mzbfPnx0QRYGRg02kGgCdUY+MbKhdpaX TxZ+iR/3yEsOP4TI8WqAWvtlikRAHAc= -----END CERTIFICATE-----Generated at Thu Jun 5 18:28:35 2025 by rpki-client