$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cce31ee9-71cb-386e-b209-674205848eee.roa File: cce31ee9-71cb-386e-b209-674205848eee.roa (raw, json) Hash identifier: hHlY3Pv7iBq+s3q9fyQgIva9juTzPfRVsgHJzeQpjvw= Subject key identifier: E8:59:AA:55:F0:31:15:74:82:5B:89:00:9A:29:E1:46:48:46:5F:D8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A093AAE657300C2F74E9BD8B8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cce31ee9-71cb-386e-b209-674205848eee.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.219.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:ae:65:73:00:c2:f7:4e:9b:d8:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=14b8bd6d-fcb6-4345-8897-f85c82724345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6f:79:d3:26:d5:95:ac:bc:c2:c4:05:ea:f6: 51:75:98:46:44:a6:73:1a:7b:51:02:a9:11:ef:41: 48:c1:3e:62:e4:d0:ca:f0:5d:1a:ba:59:bd:3e:01: f9:f7:4c:27:fe:76:f6:55:cb:67:d2:1c:6b:2e:cc: 1d:c0:da:e3:e3:d0:5c:25:ef:31:b9:84:ba:ca:54: fe:09:9a:25:0c:2e:56:51:ac:7d:33:ff:1b:7f:9b: 11:8c:3f:4b:85:42:e8:7c:93:f8:f8:92:17:7a:af: 57:fd:ac:9d:ba:e3:e2:89:04:4f:d4:00:2f:78:60: 0e:84:c6:b5:9a:1d:53:72:c6:ae:91:0d:82:70:66: 2b:36:b9:10:1c:ca:63:9e:e9:a9:7a:b1:15:5c:07: 30:a2:42:42:16:1d:2d:69:91:61:4e:cf:df:58:7c: 78:ec:54:b3:9c:87:5d:3f:d3:da:7e:d1:ba:14:e1: 70:37:63:ea:8c:0a:db:c5:b3:b2:26:50:06:b8:5c: c2:4c:f4:9b:88:1e:16:76:34:28:ac:8c:8e:7d:98: c8:05:12:7b:81:7c:97:36:6c:ba:d1:2d:6f:22:43: ce:ef:5c:de:57:81:b8:e9:93:db:29:3e:38:aa:02: 33:4a:dd:cb:99:6b:d2:83:29:ef:e5:d4:91:80:49: 1d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:59:AA:55:F0:31:15:74:82:5B:89:00:9A:29:E1:46:48:46:5F:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cce31ee9-71cb-386e-b209-674205848eee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:13:bd:53:b7:26:50:46:27:c0:dd:46:08:85:57:82:36:59: 2c:28:f5:dd:46:32:2a:02:b8:13:53:e7:85:3b:4b:06:78:1b: 04:66:ff:e0:0b:63:d3:af:97:82:05:d0:69:1b:4f:6c:a4:a9: 8f:b5:91:19:40:1a:2b:cf:15:2b:d3:08:ea:13:20:91:c6:d2: c4:9e:60:1d:46:3f:f1:5a:41:bb:3e:35:8c:d8:eb:6b:54:31: c9:cd:5d:05:53:67:e3:f3:05:a0:86:c7:d9:5f:21:68:ba:99: c9:2f:4a:42:eb:46:14:1d:7c:9c:00:fb:9b:89:a4:9a:fa:5a: 07:cc:c6:7d:3d:95:2f:af:1c:7c:aa:92:19:07:c2:31:ba:c7: 83:fd:36:b4:d8:09:be:5b:62:d3:ad:21:4d:aa:76:b1:ba:1c: 17:25:21:12:63:7f:c4:a6:06:bc:cb:bd:d5:ae:62:13:58:5c: 0c:72:14:cf:d1:db:da:78:9c:a9:5c:6d:40:bd:c0:1b:8a:8b: ce:b6:19:75:66:dd:59:63:fe:d0:11:8f:0d:e9:5e:ce:70:f9: 32:9d:16:04:bd:29:1a:87:f2:3f:b0:3d:ed:a5:87:bc:7a:27: dd:10:d2:90:44:ca:56:5a:ff:1f:3a:36:11:ab:5b:ff:8c:41: cf:d2:7f:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOq5lcwDC906b2LgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk MTRiOGJkNmQtZmNiNi00MzQ1LTg4OTctZjg1YzgyNzI0MzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2950ybVlay8wsQF6vZRdZhGRKZzGntRAqkR 70FIwT5i5NDK8F0aulm9PgH590wn/nb2Vctn0hxrLswdwNrj49BcJe8xuYS6ylT+ CZolDC5WUax9M/8bf5sRjD9LhULofJP4+JIXeq9X/ayduuPiiQRP1AAveGAOhMa1 mh1TcsaukQ2CcGYrNrkQHMpjnumperEVXAcwokJCFh0taZFhTs/fWHx47FSznIdd P9PaftG6FOFwN2PqjArbxbOyJlAGuFzCTPSbiB4WdjQorIyOfZjIBRJ7gXyXNmy6 0S1vIkPO71zeV4G46ZPbKT44qgIzSt3LmWvSgynv5dSRgEkdvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhZqlXwMRV0gluJAJop4UZIRl/YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2NlMzFlZTktNzFjYi0z ODZlLWIyMDktNjc0MjA1ODQ4ZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9ukMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsTvVO3JlBGJ8DdRgiFV4I2WSwo9d1GMioCuBNT54U7SwZ4GwRm/+AL Y9Ovl4IF0GkbT2ykqY+1kRlAGivPFSvTCOoTIJHG0sSeYB1GP/FaQbs+NYzY62tU McnNXQVTZ+PzBaCGx9lfIWi6mckvSkLrRhQdfJwA+5uJpJr6WgfMxn09lS+vHHyq khkHwjG6x4P9NrTYCb5bYtOtIU2qdrG6HBclIRJjf8SmBrzLvdWuYhNYXAxyFM/R 29p4nKlcbUC9wBuKi862GXVm3Vlj/tARjw3pXs5w+TKdFgS9KRqH8j+wPe2lh7x6 J90Q0pBEylZa/x86NhGrW/+MQc/Sf7g= -----END CERTIFICATE-----Generated at Sat Jun 7 23:33:09 2025 by rpki-client