$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bd1a6b3-2111-3624-9eff-1165e7320c7a.roa File: 4bd1a6b3-2111-3624-9eff-1165e7320c7a.roa (raw, json) Hash identifier: AWDo1H0otvms2L9M3EFAN30Wn893GxPDsdwdjXp9pxc= Subject key identifier: 40:EF:45:EE:87:D5:76:F2:0F:02:69:60:35:43:78:FE:1A:BB:03:69 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849E2252D0F495F2757C0838950 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bd1a6b3-2111-3624-9eff-1165e7320c7a.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 35994 IP address blocks: 23.63.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:2d:0f:49:5f:27:57:c0:83:89:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=cacb6d28-0662-467f-842f-b1791d672210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:82:3f:db:ab:dc:af:90:c0:45:23:e8:27:9c: 43:dd:9d:cd:78:3f:47:dd:bf:2f:73:27:78:45:37: f2:65:ca:b2:11:2d:f1:23:79:2c:f0:3a:d9:a2:17: 62:e9:fb:82:47:c5:a4:ad:3d:0b:39:ca:e3:2d:f8: f5:5b:4a:ce:66:73:ba:e2:ae:d6:3a:f5:18:8c:9a: 32:2e:c1:1f:06:48:ea:bb:80:74:f6:fc:cf:df:3b: 66:25:22:0a:bd:c5:b0:06:29:1b:c7:2d:ec:93:cf: 35:7f:bd:98:29:60:2d:22:d7:11:ea:02:ef:80:6c: 39:df:10:e7:00:94:98:cd:c1:d4:27:4d:ae:34:dd: 7e:64:4b:6f:64:a5:cd:1d:bc:5b:be:49:79:79:a6: 8e:e3:68:8f:ae:64:1d:d5:fe:29:63:92:76:87:b6: 5d:3a:41:43:8e:e7:2f:f9:e3:52:7d:2a:0d:64:0a: 1d:bb:69:57:02:bb:1b:ad:15:2a:82:8e:39:68:6b: 26:0b:b2:ae:bc:57:af:98:a0:f6:d7:8e:88:68:30: 85:5c:36:98:7c:0d:63:dd:44:1f:64:33:9d:a9:38: 0c:1b:e1:8c:ee:f5:aa:24:f5:56:22:4c:27:14:6d: a0:53:af:d5:c1:b2:42:99:bb:d9:76:32:dd:90:e1: 7a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EF:45:EE:87:D5:76:F2:0F:02:69:60:35:43:78:FE:1A:BB:03:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bd1a6b3-2111-3624-9eff-1165e7320c7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.63.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:c6:01:3b:36:9f:d5:90:b1:78:f2:af:46:3d:dc:a4:7a:96: 1b:13:43:e5:08:9d:19:71:35:56:9a:f9:79:a5:37:e8:f5:87: 74:ba:8d:ed:c3:fe:57:4d:3b:8f:5f:6d:80:a4:54:96:7d:8d: a0:80:f8:85:3f:3e:bf:e6:dc:a5:01:c7:6c:12:e7:2c:1f:9f: 25:e0:f0:8a:b7:92:0b:a0:81:26:0f:05:45:54:39:58:ad:d3: cf:ce:d3:01:65:38:1c:a0:4a:d4:72:58:a9:18:b5:85:b2:a6: c1:fe:56:65:b5:64:e3:77:d6:7c:4e:57:84:e3:4e:67:9e:bd: 5e:d0:52:76:a0:f2:5f:2b:c3:47:aa:71:0b:23:c9:63:28:84: 3e:e2:2c:9c:09:46:3c:8d:d0:6e:22:eb:fd:7b:76:dd:0e:fd: ee:8b:ac:19:3e:21:69:42:46:86:c0:e6:e4:bd:53:81:79:25: f0:4e:f2:5c:83:b3:a1:48:81:af:21:c1:99:de:29:06:83:8f: 37:08:30:4f:e6:da:ee:b1:3e:13:84:5a:d5:8d:35:e1:8e:08: f0:c6:35:8d:bc:66:4a:f9:56:a9:4d:6d:4a:89:76:ee:92:d9: 18:8e:ac:76:c8:8e:1f:b2:d1:76:87:d2:b7:bd:fa:de:bc:b1: b2:da:30:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJS0PSV8nV8CDiVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk Y2FjYjZkMjgtMDY2Mi00NjdmLTg0MmYtYjE3OTFkNjcyMjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlII/26vcr5DARSPoJ5xD3Z3NeD9H3b8vcyd4 RTfyZcqyES3xI3ks8DrZohdi6fuCR8WkrT0LOcrjLfj1W0rOZnO64q7WOvUYjJoy LsEfBkjqu4B09vzP3ztmJSIKvcWwBikbxy3sk881f72YKWAtItcR6gLvgGw53xDn AJSYzcHUJ02uNN1+ZEtvZKXNHbxbvkl5eaaO42iPrmQd1f4pY5J2h7ZdOkFDjucv +eNSfSoNZAodu2lXArsbrRUqgo45aGsmC7KuvFevmKD2146IaDCFXDaYfA1j3UQf ZDOdqTgMG+GM7vWqJPVWIkwnFG2gU6/VwbJCmbvZdjLdkOF6BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDvRe6H1XbyDwJpYDVDeP4auwNpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGJkMWE2YjMtMjExMS0z NjI0LTllZmYtMTE2NWU3MzIwYzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz/qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjGATs2n9WQsXjyr0Y93KR6lhsTQ+UInRlxNVaa+XmlN+j1h3S6je3D /ldNO49fbYCkVJZ9jaCA+IU/Pr/m3KUBx2wS5ywfnyXg8Iq3kguggSYPBUVUOVit 08/O0wFlOBygStRyWKkYtYWypsH+VmW1ZON31nxOV4TjTmeevV7QUnag8l8rw0eq cQsjyWMohD7iLJwJRjyN0G4i6/17dt0O/e6LrBk+IWlCRobA5uS9U4F5JfBO8lyD s6FIga8hwZneKQaDjzcIME/m2u6xPhOEWtWNNeGOCPDGNY28Zkr5VqlNbUqJdu6S 2RiOrHbIjh+y0XaH0re9+t68sbLaMMI= -----END CERTIFICATE-----Generated at Sat Jun 7 15:33:01 2025 by rpki-client