$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d929c8a-04cd-3216-aa93-4ba90d33a77e.roa File: 3d929c8a-04cd-3216-aa93-4ba90d33a77e.roa (raw, json) Hash identifier: WfpO2Cj5xCh392GQL6Ja0xPE1mlfGK3jhfKl7sprgY0= Subject key identifier: 6F:C8:D0:A2:E2:95:9F:63:07:54:27:1D:A1:01:33:6C:59:D0:41:D7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F2E54F67EF5F0DA717C45A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d929c8a-04cd-3216-aa93-4ba90d33a77e.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 35994 IP address blocks: 23.67.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:4f:67:ef:5f:0d:a7:17:c4:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=091d5726-5a92-4ad9-bdfa-7c18939d9ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:29:fa:ae:a3:d7:84:c1:64:0b:cc:2d:27:a4: 47:03:9f:60:12:2b:b0:6e:f9:c2:f0:c3:f8:77:50: dd:fc:bc:6a:34:cf:e0:84:4c:62:57:47:49:eb:51: 69:33:0d:13:41:1a:67:c6:3e:6d:25:ae:c5:fa:0a: 60:26:27:d4:a8:c4:ab:1b:63:51:28:49:0c:4c:06: cd:23:16:18:28:91:dc:82:b1:8c:04:b0:03:25:96: b2:57:ff:55:e9:5e:b2:b5:b4:0d:df:11:ee:06:46: 16:6c:8e:11:a0:5a:fa:4a:e7:e2:29:6f:36:3c:e4: 3e:4e:4e:62:4b:0c:4b:c2:4c:50:2a:9b:fe:d4:f0: bf:e7:95:b7:e5:cc:41:68:c9:42:3d:98:09:f0:a5: 40:2e:53:e6:77:65:b0:db:0a:d9:74:ba:c3:b7:c3: 13:86:03:bc:d7:53:c8:cf:a3:f8:16:0b:70:a2:15: 1c:69:02:bc:3a:e6:29:83:c7:49:26:c7:fd:66:43: 26:42:3e:1d:91:d6:8d:ca:bc:ae:2d:d4:3f:d8:bd: d3:8a:2b:7a:49:f7:71:6f:6b:c2:8d:8a:11:29:60: 94:d8:ae:17:78:2a:d0:ad:ad:b9:e9:a0:f7:16:04: 3d:49:bb:96:2a:68:72:e5:ec:0d:88:0d:47:51:86: bb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C8:D0:A2:E2:95:9F:63:07:54:27:1D:A1:01:33:6C:59:D0:41:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d929c8a-04cd-3216-aa93-4ba90d33a77e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.67.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:bf:6a:04:7c:0b:03:be:c9:da:4e:c6:e9:7e:1f:b4:d1:b8: 61:3d:4c:ef:fb:fe:db:65:dd:c1:71:53:5e:5e:d0:8f:7d:a7: 09:27:af:73:fa:9e:29:b6:8a:92:0d:d3:d8:d4:f3:79:63:a8: a9:80:6c:58:0b:ed:a2:62:7e:e3:f2:c0:2b:14:b3:25:19:90: 45:fd:db:d9:d1:db:f1:c5:a1:68:0b:3e:b1:d7:22:8c:26:a2: 40:bd:fa:6d:b4:6b:28:6c:6e:9c:53:2d:34:83:66:ce:ee:06: de:60:71:a8:b2:50:e7:40:23:e4:8b:a9:bc:00:76:87:9b:68: a8:7e:2c:3b:2c:d9:ad:14:8e:a2:b7:2c:c8:53:80:ce:24:32: 7e:5b:b3:c7:f0:82:5e:fa:c9:0b:c2:6b:3d:45:59:3c:ca:0b: 3a:da:9a:d9:76:51:06:fd:21:bd:e5:5a:3e:0a:c4:7f:25:5e: c9:f9:38:69:69:69:5e:ce:9a:95:e5:75:ab:e0:1a:3c:bd:20: 76:51:4e:34:23:f5:da:b5:de:fa:10:98:5f:5a:74:ab:14:44: a4:ca:2f:ba:ba:97:60:fe:da:88:3e:f8:7e:97:b9:ea:11:86: 86:40:3e:34:55:e5:51:94:b5:de:9e:fc:2e:0c:f9:3f:d7:fa: ba:8d:91:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5U9n718NpxfEWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk MDkxZDU3MjYtNWE5Mi00YWQ5LWJkZmEtN2MxODkzOWQ5ZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyn6rqPXhMFkC8wtJ6RHA59gEiuwbvnC8MP4 d1Dd/LxqNM/ghExiV0dJ61FpMw0TQRpnxj5tJa7F+gpgJifUqMSrG2NRKEkMTAbN IxYYKJHcgrGMBLADJZayV/9V6V6ytbQN3xHuBkYWbI4RoFr6SufiKW82POQ+Tk5i SwxLwkxQKpv+1PC/55W35cxBaMlCPZgJ8KVALlPmd2Ww2wrZdLrDt8MThgO811PI z6P4FgtwohUcaQK8OuYpg8dJJsf9ZkMmQj4dkdaNyryuLdQ/2L3Tiit6Sfdxb2vC jYoRKWCU2K4XeCrQra256aD3FgQ9SbuWKmhy5ewNiA1HUYa7kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/I0KLilZ9jB1QnHaEBM2xZ0EHXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Q5MjljOGEtMDRjZC0z MjE2LWFhOTMtNGJhOTBkMzNhNzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0OYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+/agR8CwO+ydpOxul+H7TRuGE9TO/7/ttl3cFxU15e0I99pwknr3P6 nim2ipIN09jU83ljqKmAbFgL7aJifuPywCsUsyUZkEX929nR2/HFoWgLPrHXIowm okC9+m20ayhsbpxTLTSDZs7uBt5gcaiyUOdAI+SLqbwAdoebaKh+LDss2a0UjqK3 LMhTgM4kMn5bs8fwgl76yQvCaz1FWTzKCzramtl2UQb9Ib3lWj4KxH8lXsn5OGlp aV7OmpXldavgGjy9IHZRTjQj9dq13voQmF9adKsURKTKL7q6l2D+2og++H6XueoR hoZAPjRV5VGUtd6e/C4M+T/X+rqNkfA= -----END CERTIFICATE-----Generated at Sat Jun 7 14:51:28 2025 by rpki-client