$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ced2fa84-0850-33a4-8ed9-14f5828b7a5b.roa File: ced2fa84-0850-33a4-8ed9-14f5828b7a5b.roa (raw, json) Hash identifier: 4TcZazea1XHl30Z+LC5QZM3KdBHIDRplWFUMd3PTt8E= Subject key identifier: 08:4E:A4:E8:DD:B3:6B:5B:7B:38:E7:E6:C0:E3:CE:49:E7:50:8E:5F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849E2251EAB299124C65E68BEE8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ced2fa84-0850-33a4-8ed9-14f5828b7a5b.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 35994 IP address blocks: 23.62.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:1e:ab:29:91:24:c6:5e:68:be:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=dd1000ea-152e-40ae-bbcd-f2757d2f918d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:18:b0:05:1b:f0:79:ed:98:31:d3:c3:3f:23: 18:17:97:dc:7f:4b:53:92:4a:6b:0a:e6:52:aa:ea: fc:8d:d3:94:ef:78:6d:a6:89:2c:2a:c9:37:6f:99: 55:c3:b6:4c:ca:14:1a:b9:6b:32:c8:c8:ef:6a:72: b6:c5:79:e4:0d:8e:b3:b5:37:fc:74:a7:aa:e2:c9: af:c5:88:01:ef:66:1e:82:05:6a:29:77:d2:57:29: 11:e0:4a:5f:a3:80:8b:8c:cd:35:41:ad:ae:fd:4d: 96:2e:64:25:9a:16:61:2d:2e:9b:b3:f1:3b:0d:96: 47:0d:0a:02:93:76:40:0b:91:7e:b0:04:e6:d3:bb: da:89:a8:7a:80:00:dd:df:29:44:9a:49:a1:34:0f: 68:b2:24:26:a7:a7:bd:6b:60:11:e0:a0:67:fc:33: bf:9a:8a:b2:f2:16:da:5a:78:bf:d8:6c:12:af:f4: cd:66:83:92:e1:ab:c8:bb:50:af:c4:13:fc:68:22: 03:dc:5d:01:82:0d:09:25:96:f9:7b:fa:0e:b3:74: 19:7f:73:f2:41:eb:36:04:38:74:94:90:66:26:4c: df:6f:a9:78:46:e5:c7:e7:d6:68:8a:7a:ca:87:f6: 40:41:f9:9a:8e:60:d3:47:0c:e3:da:d3:79:77:fe: ac:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4E:A4:E8:DD:B3:6B:5B:7B:38:E7:E6:C0:E3:CE:49:E7:50:8E:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ced2fa84-0850-33a4-8ed9-14f5828b7a5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.62.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:03:03:34:b7:ed:20:cf:3d:4b:fa:04:a8:9a:ea:cf:cc:87: ee:8f:cf:64:66:8f:72:5a:1b:2a:cc:71:c2:97:24:02:1a:02: 71:64:59:2f:69:14:7a:34:e8:c0:f9:a9:9e:c4:0e:4a:29:ff: 57:ca:fb:3e:7f:58:a8:4d:cf:3a:fe:fb:a5:12:85:ad:9c:03: af:36:59:cf:70:cf:26:8c:c6:58:ec:ea:27:a5:b2:78:ed:92: 69:4c:cb:c6:e9:f7:c9:98:72:9e:b9:47:0e:eb:d7:b4:ea:05: 9d:cb:98:8b:8c:80:d6:75:aa:bd:f0:10:8c:1f:69:96:c9:77: 0c:da:36:c1:11:a1:e8:c5:6e:fd:f7:22:8c:dd:35:73:d6:54: a2:c6:d6:51:f0:59:03:40:01:0a:c0:57:11:3d:2e:75:cb:da: f8:a2:9f:5d:29:e4:c9:51:61:a2:28:c9:09:65:9a:5a:3c:a5: 66:cb:06:01:97:98:1c:bd:8a:22:0f:ec:9a:4a:0d:eb:6f:96: 19:f8:79:c6:03:2d:8d:68:65:52:9f:b8:40:8d:50:6f:07:cf: 83:66:c7:06:ac:ad:7f:24:47:9b:8b:b4:cd:42:6a:e6:bc:9c: d1:50:57:14:91:63:50:74:2f:19:14:69:27:75:34:89:1b:8e: 8b:a2:10:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJR6rKZEkxl5ovugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk ZGQxMDAwZWEtMTUyZS00MGFlLWJiY2QtZjI3NTdkMmY5MThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBiwBRvwee2YMdPDPyMYF5fcf0tTkkprCuZS qur8jdOU73htpoksKsk3b5lVw7ZMyhQauWsyyMjvanK2xXnkDY6ztTf8dKeq4smv xYgB72YeggVqKXfSVykR4Epfo4CLjM01Qa2u/U2WLmQlmhZhLS6bs/E7DZZHDQoC k3ZAC5F+sATm07vaiah6gADd3ylEmkmhNA9osiQmp6e9a2AR4KBn/DO/moqy8hba Wni/2GwSr/TNZoOS4avIu1CvxBP8aCID3F0Bgg0JJZb5e/oOs3QZf3PyQes2BDh0 lJBmJkzfb6l4RuXH59ZoinrKh/ZAQfmajmDTRwzj2tN5d/6sNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhOpOjds2tbezjn5sDjzknnUI5fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2VkMmZhODQtMDg1MC0z M2E0LThlZDktMTRmNTgyOGI3YTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz7tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgDAzS37SDPPUv6BKia6s/Mh+6Pz2Rmj3JaGyrMccKXJAIaAnFkWS9p FHo06MD5qZ7EDkop/1fK+z5/WKhNzzr++6USha2cA682Wc9wzyaMxljs6ielsnjt kmlMy8bp98mYcp65Rw7r17TqBZ3LmIuMgNZ1qr3wEIwfaZbJdwzaNsERoejFbv33 IozdNXPWVKLG1lHwWQNAAQrAVxE9LnXL2viin10p5MlRYaIoyQllmlo8pWbLBgGX mBy9iiIP7JpKDetvlhn4ecYDLY1oZVKfuECNUG8Hz4NmxwasrX8kR5uLtM1Caua8 nNFQVxSRY1B0LxkUaSd1NIkbjouiEKA= -----END CERTIFICATE-----Generated at Sat Jun 7 22:54:07 2025 by rpki-client