$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0cdf082-babd-36ab-8ea0-ae4ff0f7d111.roa File: a0cdf082-babd-36ab-8ea0-ae4ff0f7d111.roa (raw, json) Hash identifier: stwFAUr6e0iD5HSzy7iy/Vp1FWxf9AdnHQotrodJdCY= Subject key identifier: D1:52:10:D0:61:8F:D8:01:26:EA:16:09:8F:E4:1C:C8:72:76:97:FC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A1B60114A0881EDC290CC0900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0cdf082-babd-36ab-8ea0-ae4ff0f7d111.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 3786 IP address blocks: 23.35.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:11:4a:08:81:ed:c2:90:cc:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=14ec6dff-61a7-413b-8fd6-46f2eab6e4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fe:ff:1c:09:3c:ad:86:37:67:da:b6:1c:89: a3:0a:5e:98:c1:44:4c:50:af:74:b9:03:30:63:68: 43:dd:93:e5:ef:bc:20:37:87:75:b6:ba:aa:14:64: 07:ee:5c:fb:1a:a6:54:4a:91:8a:36:02:39:42:39: dc:11:9e:5b:1f:16:7a:e6:73:27:e5:57:ad:2d:02: 71:70:3b:58:7d:9e:94:6f:d9:25:eb:0d:59:62:7e: 84:27:f8:c5:6b:85:a0:fe:8f:bf:13:47:0d:40:86: e8:a4:27:ff:be:27:e9:2d:7d:96:65:17:d6:71:28: 0f:fc:43:8e:77:be:53:96:bc:00:b4:b7:b6:eb:5c: 10:2f:37:79:9a:15:bb:23:e7:0c:06:da:1c:a9:f2: 28:68:9c:be:7a:15:88:28:e5:16:31:51:29:d4:a4: 0a:62:ad:02:52:4a:53:07:39:94:0e:88:fe:70:4e: 5c:20:e9:fc:f7:dc:6c:30:e6:50:79:3f:43:14:3b: 61:9c:34:d4:bb:5e:26:9f:b2:61:d6:ee:f2:54:76: 12:7a:0f:93:77:c6:99:73:d4:e5:c5:19:ae:e7:55: d3:a6:fb:a9:dd:10:3f:aa:a3:6d:23:c1:0e:6e:72: 57:4b:0a:d0:34:d8:64:13:98:97:08:01:81:38:79: be:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:52:10:D0:61:8F:D8:01:26:EA:16:09:8F:E4:1C:C8:72:76:97:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0cdf082-babd-36ab-8ea0-ae4ff0f7d111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:57:16:34:f2:20:cb:f0:99:30:52:f4:e6:64:01:f9:f2:f0: 56:35:fb:cd:37:27:9f:50:41:65:52:be:74:21:20:d7:9a:02: e8:1a:b4:1a:90:f3:a1:a7:9b:d4:cc:87:8c:bc:95:05:2e:77: 54:59:29:e3:a6:c3:61:54:6e:53:3f:54:50:ae:bc:f9:93:37: 44:0d:2b:33:5f:ef:93:97:4d:39:2e:fa:5c:98:cd:47:89:f8: 7d:0e:bd:0f:cd:00:53:63:0f:a3:e3:c8:62:a3:60:02:7a:49: 17:fa:a4:0e:57:8c:2c:3e:3e:25:4b:36:26:9b:41:0d:ca:fe: 86:0e:c4:6a:dc:54:fd:30:f9:a9:bf:69:6f:ec:23:93:91:a1: 9f:74:c1:18:c1:21:3e:0f:c1:80:ba:87:95:d7:a8:33:6f:6c: 8f:3c:07:0b:00:ed:e9:6c:a9:85:71:08:14:ed:46:b0:6c:33: 28:37:b5:ae:80:80:ea:4d:c9:0e:12:32:61:45:24:f0:d6:32: dd:fe:62:92:90:92:0a:cb:98:a5:02:2e:0a:33:54:21:20:9b: 28:b0:ac:58:0a:41:cf:a6:5d:34:a1:2c:35:21:0b:7b:d8:29: 85:02:82:16:58:3b:48:d6:1d:f9:1f:13:d3:7f:7c:7f:08:41: 99:40:c1:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYBFKCIHtwpDMCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk MTRlYzZkZmYtNjFhNy00MTNiLThmZDYtNDZmMmVhYjZlNGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov7/HAk8rYY3Z9q2HImjCl6YwURMUK90uQMw Y2hD3ZPl77wgN4d1trqqFGQH7lz7GqZUSpGKNgI5QjncEZ5bHxZ65nMn5VetLQJx cDtYfZ6Ub9kl6w1ZYn6EJ/jFa4Wg/o+/E0cNQIbopCf/vifpLX2WZRfWcSgP/EOO d75TlrwAtLe261wQLzd5mhW7I+cMBtocqfIoaJy+ehWIKOUWMVEp1KQKYq0CUkpT BzmUDoj+cE5cIOn899xsMOZQeT9DFDthnDTUu14mn7Jh1u7yVHYSeg+Td8aZc9Tl xRmu51XTpvup3RA/qqNtI8EObnJXSwrQNNhkE5iXCAGBOHm+9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFSENBhj9gBJuoWCY/kHMhydpf8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTBjZGYwODItYmFiZC0z NmFiLThlYTAtYWU0ZmYwZjdkMTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhXFjTyIMvwmTBS9OZkAfny8FY1+803J59QQWVSvnQhINeaAugatBqQ 86Gnm9TMh4y8lQUud1RZKeOmw2FUblM/VFCuvPmTN0QNKzNf75OXTTku+lyYzUeJ +H0OvQ/NAFNjD6PjyGKjYAJ6SRf6pA5XjCw+PiVLNiabQQ3K/oYOxGrcVP0w+am/ aW/sI5ORoZ90wRjBIT4PwYC6h5XXqDNvbI88BwsA7elsqYVxCBTtRrBsMyg3ta6A gOpNyQ4SMmFFJPDWMt3+YpKQkgrLmKUCLgozVCEgmyiwrFgKQc+mXTShLDUhC3vY KYUCghZYO0jWHfkfE9N/fH8IQZlAwYg= -----END CERTIFICATE-----Generated at Sat Jun 7 23:33:28 2025 by rpki-client