$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/429401a2-a73b-3bc5-96b6-b0d701e95e5a.roa File: 429401a2-a73b-3bc5-96b6-b0d701e95e5a.roa (raw, json) Hash identifier: fLmPny/daFRYx9hEmmYA9kgfcOfgIGqXQjljkHusvNk= Subject key identifier: B2:B5:87:EB:31:F4:C8:51:83:EA:86:E1:14:D9:0C:A4:B9:E6:DC:76 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A1B6016FC4AF22ED9EC6E7780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/429401a2-a73b-3bc5-96b6-b0d701e95e5a.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 35994 IP address blocks: 23.39.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:16:fc:4a:f2:2e:d9:ec:6e:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=4eebac38-aefa-4c09-b0a6-f136bc709772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:24:96:6b:a9:3d:07:e8:25:90:15:d0:b2:34: b5:04:7a:e8:37:62:18:cc:40:56:df:4a:9c:a2:f8: f5:8e:3c:e3:bf:03:b6:18:be:00:f5:01:02:64:15: a3:26:d5:a5:32:85:e1:d8:a2:7b:b5:24:ad:3e:65: 69:cd:18:52:b6:b8:b6:05:6c:37:7d:72:ec:41:4e: 34:79:8f:1a:32:89:95:37:05:88:bb:61:f6:42:40: 51:73:e2:d0:f6:df:9d:70:26:c3:c1:2f:c1:fe:b1: 77:8d:5c:ab:4f:61:1b:5c:5e:b0:70:43:a1:b3:f0: 8d:14:7e:18:57:ef:3d:d6:d9:0a:b2:29:ce:a9:c5: cc:99:8a:f2:d1:dd:94:33:d2:b2:d8:4b:89:4b:de: 5e:3d:6d:23:b8:73:80:ee:da:60:dd:17:e0:69:39: 6a:40:87:63:a7:8a:20:31:1d:9c:f3:de:7d:c6:92: dd:55:a1:7d:1f:31:9e:65:a7:69:13:2a:f0:b9:03: 24:23:56:74:86:c2:a7:61:fb:8f:b5:59:d0:d7:3c: 43:00:c4:a5:49:93:b2:df:a9:f6:28:8f:bb:f7:39: b2:6b:d4:da:12:cb:05:c6:ba:62:c9:ab:81:fd:b2: 76:ef:64:90:09:29:a9:a1:64:a2:a5:7a:4f:79:0b: 16:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B5:87:EB:31:F4:C8:51:83:EA:86:E1:14:D9:0C:A4:B9:E6:DC:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/429401a2-a73b-3bc5-96b6-b0d701e95e5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:ff:be:d1:bc:91:e2:1c:e1:5b:60:d1:4b:9c:9e:28:f3:f1: 85:8a:48:6c:bb:eb:9b:d3:37:71:de:ac:8a:64:19:da:d2:61: dc:88:24:19:9c:25:aa:34:1c:c8:5d:89:68:ed:0b:62:ab:78: 42:90:08:0f:f8:bc:43:a4:ce:44:37:e8:33:8e:fe:3b:91:91: 0b:83:2c:7d:1d:ce:7e:a8:58:b7:df:97:e3:1f:ec:dd:51:b6: 73:9e:6f:96:74:e3:e3:8f:90:90:79:d5:4a:30:af:33:bf:4f: 23:6f:e1:37:41:a2:25:13:82:4e:10:8c:54:d3:67:c6:ea:f2: 36:e2:91:34:fb:06:7d:d1:45:93:7e:87:e8:12:ad:3e:6d:36: db:1c:7b:2a:f1:d9:f5:70:08:ea:bd:9c:a5:f6:f5:12:c6:11: 90:89:06:3d:93:50:9a:da:f5:24:3f:ce:df:38:82:15:ce:b6: 79:34:f5:3e:6d:bd:90:38:a3:da:73:e8:83:8b:4d:fc:e3:fb: 9e:00:f2:d1:5e:0c:55:c0:5e:30:2b:33:0e:25:55:de:e2:00: 09:bd:fe:17:a6:07:43:e1:01:68:6c:d0:ae:e9:6f:98:6e:b5: 84:5a:e0:e3:7a:eb:bf:6f:15:8f:86:bc:0e:72:88:17:67:e4: e6:d6:51:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYBb8SvIu2exud4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk NGVlYmFjMzgtYWVmYS00YzA5LWIwYTYtZjEzNmJjNzA5NzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArySWa6k9B+glkBXQsjS1BHroN2IYzEBW30qc ovj1jjzjvwO2GL4A9QECZBWjJtWlMoXh2KJ7tSStPmVpzRhStri2BWw3fXLsQU40 eY8aMomVNwWIu2H2QkBRc+LQ9t+dcCbDwS/B/rF3jVyrT2EbXF6wcEOhs/CNFH4Y V+891tkKsinOqcXMmYry0d2UM9Ky2EuJS95ePW0juHOA7tpg3RfgaTlqQIdjp4og MR2c8959xpLdVaF9HzGeZadpEyrwuQMkI1Z0hsKnYfuPtVnQ1zxDAMSlSZOy36n2 KI+79zmya9TaEssFxrpiyauB/bJ272SQCSmpoWSipXpPeQsWbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLK1h+sx9MhRg+qG4RTZDKS55tx2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDI5NDAxYTItYTczYi0z YmM1LTk2YjYtYjBkNzAxZTk1ZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyeoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIT/vtG8keIc4Vtg0Uucnijz8YWKSGy765vTN3HerIpkGdrSYdyIJBmc Jao0HMhdiWjtC2KreEKQCA/4vEOkzkQ36DOO/juRkQuDLH0dzn6oWLffl+Mf7N1R tnOeb5Z04+OPkJB51UowrzO/TyNv4TdBoiUTgk4QjFTTZ8bq8jbikTT7Bn3RRZN+ h+gSrT5tNtsceyrx2fVwCOq9nKX29RLGEZCJBj2TUJra9SQ/zt84ghXOtnk09T5t vZA4o9pz6IOLTfzj+54A8tFeDFXAXjArMw4lVd7iAAm9/hemB0PhAWhs0K7pb5hu tYRa4ON6679vFY+GvA5yiBdn5ObWUU4= -----END CERTIFICATE-----Generated at Sat Jun 7 13:59:22 2025 by rpki-client