$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc3f34a2-3e57-3601-aca2-4d7c6e656a90.roa File: cc3f34a2-3e57-3601-aca2-4d7c6e656a90.roa (raw, json) Hash identifier: WsGPyJV2O1MdCposvnX1FzVLK4WMD6lHQSuKDtGnv2c= Subject key identifier: 5E:4D:11:FC:03:1F:32:54:31:0E:4F:94:FA:70:DA:6F:71:D6:5C:AB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A03A56BD92EA3601AE32CB260 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc3f34a2-3e57-3601-aca2-4d7c6e656a90.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.2.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:6b:d9:2e:a3:60:1a:e3:2c:b2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=a426122f-7e23-4dc7-8fbc-530d842bfa7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:dd:50:0f:2f:53:fa:0f:23:bb:ec:b4:e0:a7: 8b:ca:dd:6f:44:0b:eb:a2:a4:39:09:be:99:47:2f: 7f:3e:2d:f6:23:6d:de:ad:77:16:f8:94:78:67:da: 68:b9:7d:7d:f1:3a:12:da:3b:b9:81:7f:37:77:d8: 2a:82:8a:a1:dc:b3:1b:46:7b:30:31:95:88:6f:52: 8b:c0:6c:2e:d2:94:bf:f9:a2:1a:c9:44:dd:e2:6b: 17:db:6a:46:49:e8:d3:2d:d8:72:6f:51:70:9b:62: 21:73:ee:3d:6e:2e:7c:31:9c:37:57:cc:b6:ef:81: 33:8a:9c:cb:63:4e:ee:20:d7:77:1b:5a:f1:94:66: 92:9e:f6:b0:c5:12:f3:a0:02:37:50:4f:30:50:56: e5:b5:c6:33:d6:ac:cd:63:51:2b:cd:0a:ff:ff:cf: 30:63:59:b1:a5:9e:49:5e:13:e4:d0:07:27:a5:dc: 81:21:97:f0:a3:58:0c:d1:39:4e:7e:58:e7:bc:56: f5:7c:f2:7f:b2:74:48:00:6f:d6:09:9d:f2:93:32: c2:3e:4f:5a:24:f7:5b:41:0f:87:1f:db:4b:05:94: d7:c0:db:fe:09:ee:9d:f6:82:47:3b:0c:20:b2:7c: 9f:08:86:d0:56:5e:9e:d1:32:c4:86:31:73:c2:0a: 3a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4D:11:FC:03:1F:32:54:31:0E:4F:94:FA:70:DA:6F:71:D6:5C:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc3f34a2-3e57-3601-aca2-4d7c6e656a90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.2.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f7:14:e0:de:92:f6:36:b0:34:24:56:29:4c:9f:f2:f9:40: 62:2d:79:80:69:61:f2:11:5b:db:3e:1b:62:fe:49:6a:11:9f: 61:bf:7a:8d:bf:bf:11:a4:09:20:b5:f0:c1:69:fd:1c:98:89: 81:a8:fd:ea:27:7e:f9:65:44:f8:56:74:5e:1a:09:28:d6:f5: 4e:d0:bd:61:38:4b:a2:d9:6b:3c:89:e3:9b:b8:7f:c4:18:4e: 56:43:5e:8b:9f:44:89:a1:6b:be:9b:a7:b8:99:0a:31:c6:6e: 94:8a:b9:be:5c:67:a1:fa:bd:f1:f1:d2:f4:7d:49:23:df:b7: 12:cd:1b:bb:e8:88:31:fe:bf:6b:fb:a2:e2:c4:f2:9d:ac:97: e0:eb:71:0b:55:49:12:c6:83:e6:d2:c3:f3:ee:73:85:fe:2e: 42:88:5d:24:b6:3e:72:9f:86:30:ee:13:8a:c2:37:70:1c:d2: 37:c1:b1:72:77:7b:63:dd:2d:bb:4e:f8:43:4b:e6:8d:ca:4f: 2c:4b:94:af:01:83:12:43:1b:9e:8a:a6:62:ba:57:42:13:21: 7e:74:ac:45:4e:b9:40:ba:82:14:98:9e:ed:0f:50:b7:25:9f: 51:36:ce:bc:76:bd:22:9f:df:64:70:ca:4a:75:b3:65:5e:b2: 4e:c2:0f:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpWvZLqNgGuMssmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk YTQyNjEyMmYtN2UyMy00ZGM3LThmYmMtNTMwZDg0MmJmYTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd1QDy9T+g8ju+y04KeLyt1vRAvroqQ5Cb6Z Ry9/Pi32I23erXcW+JR4Z9pouX198ToS2ju5gX83d9gqgoqh3LMbRnswMZWIb1KL wGwu0pS/+aIayUTd4msX22pGSejTLdhyb1Fwm2Ihc+49bi58MZw3V8y274EzipzL Y07uINd3G1rxlGaSnvawxRLzoAI3UE8wUFbltcYz1qzNY1ErzQr//88wY1mxpZ5J XhPk0AcnpdyBIZfwo1gM0TlOfljnvFb1fPJ/snRIAG/WCZ3ykzLCPk9aJPdbQQ+H H9tLBZTXwNv+Ce6d9oJHOwwgsnyfCIbQVl6e0TLEhjFzwgo6XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5NEfwDHzJUMQ5PlPpw2m9x1lyrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2MzZjM0YTItM2U1Ny0z NjAxLWFjYTItNGQ3YzZlNjU2YTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwIkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEP3FODekvY2sDQkVilMn/L5QGIteYBpYfIRW9s+G2L+SWoRn2G/eo2/ vxGkCSC18MFp/RyYiYGo/eonfvllRPhWdF4aCSjW9U7QvWE4S6LZazyJ45u4f8QY TlZDXoufRImha76bp7iZCjHGbpSKub5cZ6H6vfHx0vR9SSPftxLNG7voiDH+v2v7 ouLE8p2sl+DrcQtVSRLGg+bSw/Puc4X+LkKIXSS2PnKfhjDuE4rCN3Ac0jfBsXJ3 e2PdLbtO+ENL5o3KTyxLlK8BgxJDG56KpmK6V0ITIX50rEVOuUC6ghSYnu0PULcl n1E2zrx2vSKf32Rwykp1s2Vesk7CDws= -----END CERTIFICATE-----Generated at Sat Jun 7 14:08:55 2025 by rpki-client