$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6866678a-1fbe-3db2-b5f1-733240a2fd8b.roa File: 6866678a-1fbe-3db2-b5f1-733240a2fd8b.roa (raw, json) Hash identifier: mBxuXySohXFcLPnX3rI7ENYy8PCfzTpcgqaDBAeb7wY= Subject key identifier: 02:32:02:D3:34:D9:66:8C:50:55:81:CB:F4:D4:13:F2:0C:4A:96:41 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849E2251EBAECB64C8D62D01200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6866678a-1fbe-3db2-b5f1-733240a2fd8b.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 35994 IP address blocks: 23.205.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:1e:ba:ec:b6:4c:8d:62:d0:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=0a41e3c5-051c-42c4-ab40-f444b5dd4429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bb:9b:59:3e:08:01:a1:62:b8:91:92:ed:ef: 63:34:f8:a6:66:75:36:e7:98:fc:49:65:5e:0d:e6: a3:ec:a6:e8:51:8a:6f:97:03:3f:50:14:b4:69:7f: db:27:76:c6:cb:64:20:c6:27:be:dc:56:33:2d:99: 75:e6:8f:87:3b:e3:8e:f6:81:a3:21:74:76:03:97: 11:44:7b:e4:5a:05:f6:7d:ec:c8:f8:33:c4:87:21: 6e:6a:90:b9:07:64:86:72:d2:8b:52:c6:29:fa:55: 60:6d:26:bf:ce:75:d2:8a:e5:85:64:0d:02:c8:d4: 38:54:9b:12:00:f0:6f:24:74:f6:a1:ee:af:1d:7d: b6:f2:2c:55:bd:de:6e:70:5d:bb:73:05:7e:7f:74: 0b:6f:44:c6:a4:3f:f7:6f:77:02:19:12:75:c7:ed: a0:b1:a6:b0:4a:3b:a4:a2:94:57:27:18:58:2c:df: 71:26:ff:5c:51:79:d2:3b:bf:e6:b6:e7:3b:a1:ea: 4c:b7:11:ef:69:46:91:49:33:e6:ff:d6:43:ef:01: 8d:1f:23:f1:b8:1a:1c:b5:91:09:86:71:bd:9d:64: 58:a4:58:4e:6d:d5:92:03:64:62:83:77:ad:53:e1: 77:19:b6:5e:5c:d3:ac:64:be:bc:e7:6a:64:0d:20: 69:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:32:02:D3:34:D9:66:8C:50:55:81:CB:F4:D4:13:F2:0C:4A:96:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6866678a-1fbe-3db2-b5f1-733240a2fd8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ec:39:24:c3:33:76:e9:a0:b6:65:df:da:35:68:67:f6:39: 5a:1a:6d:e6:38:d2:d7:93:46:a7:83:1b:cc:fc:3a:46:37:ca: da:9a:8a:e3:d0:74:06:48:6f:18:d5:b7:00:60:5c:da:e4:bf: a5:1c:d1:6b:ff:50:ce:d0:3b:63:6e:1f:3f:b4:0a:2c:b0:2d: 60:f1:22:35:64:63:17:39:2a:d5:48:65:77:06:c3:1e:f4:4c: 15:47:21:1e:84:36:7e:f4:54:47:8c:db:72:ba:98:9f:68:3f: 60:72:40:2f:4b:50:20:76:14:95:59:a2:78:1a:c6:2b:c5:03: 42:23:3a:13:f3:a8:fb:69:cc:a3:2b:08:68:d1:75:93:4e:d7: 1a:c1:17:02:0f:fd:f8:e8:a0:f1:6d:08:61:a5:e8:90:a3:d4: 0f:e1:5b:75:fa:2f:b1:ee:85:6a:07:2a:7e:43:4d:8f:2c:cd: 0c:4c:56:de:32:1c:83:06:1d:1b:ec:af:dd:15:e1:42:2a:d1: 47:fa:5a:59:21:20:88:38:b5:c4:8d:24:ea:f3:52:98:64:96: a0:71:a0:dc:2b:15:36:1d:45:25:a3:b5:86:ad:f0:b8:66:b1: 1e:48:82:f9:80:3b:2c:bd:c2:0e:95:a5:22:ad:6d:c7:1f:86: 91:e3:a2:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJR667LZMjWLQEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk MGE0MWUzYzUtMDUxYy00MmM0LWFiNDAtZjQ0NGI1ZGQ0NDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbubWT4IAaFiuJGS7e9jNPimZnU255j8SWVe Deaj7KboUYpvlwM/UBS0aX/bJ3bGy2Qgxie+3FYzLZl15o+HO+OO9oGjIXR2A5cR RHvkWgX2fezI+DPEhyFuapC5B2SGctKLUsYp+lVgbSa/znXSiuWFZA0CyNQ4VJsS APBvJHT2oe6vHX228ixVvd5ucF27cwV+f3QLb0TGpD/3b3cCGRJ1x+2gsaawSjuk opRXJxhYLN9xJv9cUXnSO7/mtuc7oepMtxHvaUaRSTPm/9ZD7wGNHyPxuBoctZEJ hnG9nWRYpFhObdWSA2Rig3etU+F3GbZeXNOsZL6852pkDSBpQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIyAtM02WaMUFWBy/TUE/IMSpZBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjg2NjY3OGEtMWZiZS0z ZGIyLWI1ZjEtNzMzMjQwYTJmZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF815MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvsOSTDM3bpoLZl39o1aGf2OVoabeY40teTRqeDG8z8OkY3ytqaiuPQ dAZIbxjVtwBgXNrkv6Uc0Wv/UM7QO2NuHz+0CiywLWDxIjVkYxc5KtVIZXcGwx70 TBVHIR6ENn70VEeM23K6mJ9oP2ByQC9LUCB2FJVZongaxivFA0IjOhPzqPtpzKMr CGjRdZNO1xrBFwIP/fjooPFtCGGl6JCj1A/hW3X6L7HuhWoHKn5DTY8szQxMVt4y HIMGHRvsr90V4UIq0Uf6WlkhIIg4tcSNJOrzUphklqBxoNwrFTYdRSWjtYat8Lhm sR5IgvmAOyy9wg6VpSKtbccfhpHjojg= -----END CERTIFICATE-----Generated at Sat Jun 7 22:59:20 2025 by rpki-client