$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e99ef5f7-43b7-3d59-aa51-18ac2aea4cb7.roa File: e99ef5f7-43b7-3d59-aa51-18ac2aea4cb7.roa (raw, json) Hash identifier: D0/1OY6qWZ92wTZwyZX7/hpCeuZVNVP1PVzzSMRCFys= Subject key identifier: 85:BA:45:A3:0B:D0:DF:8C:4D:1E:88:35:87:F8:DC:CD:70:96:79:05 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A1B60167804A5BD1051D33D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e99ef5f7-43b7-3d59-aa51-18ac2aea4cb7.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 35994 IP address blocks: 23.36.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:16:78:04:a5:bd:10:51:d3:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=3213e5af-8ac9-465a-8d36-5141caaba531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ce:94:5e:8e:cb:33:51:b4:d0:eb:6e:20:ad: c4:3d:c7:b3:0d:db:56:1e:9d:9d:d2:28:b7:a1:51: b6:a4:a0:f0:39:b0:d5:7c:8b:71:c1:69:ff:94:48: 8c:3c:e6:a7:02:4b:29:6c:10:6b:9a:2e:0d:60:b6: 6a:57:30:95:38:93:c1:34:28:94:07:84:2a:a0:7f: 2f:c4:c4:0a:a5:66:7a:98:84:c7:2f:72:0b:50:83: f0:83:1c:13:4b:b6:50:a6:8f:5e:3c:c5:d8:23:df: 3f:9d:d8:bf:4f:fa:cc:2b:1e:c1:fe:cd:2b:8c:c4: c9:c9:d6:58:d9:d6:81:d7:62:29:53:97:c6:38:ba: 28:7c:5d:5c:0b:1d:f9:2e:67:74:68:52:c3:51:94: e6:16:bd:d0:53:b4:70:90:68:c0:64:cf:67:36:d6: e6:6a:e6:4b:72:f8:5f:06:5d:3c:c2:96:d7:3e:b3: 79:24:cb:48:5d:12:65:2a:1e:c3:f8:06:44:36:e1: c3:9a:e4:87:66:4d:20:1e:00:b0:74:c2:6e:12:27: 61:8d:b5:0b:14:ad:87:94:96:dc:bd:e1:bd:46:12: c4:be:99:e2:cb:da:75:31:68:70:2c:f3:c0:d1:98: 19:05:e3:04:56:ed:b7:96:33:aa:75:f8:74:a0:1d: 54:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BA:45:A3:0B:D0:DF:8C:4D:1E:88:35:87:F8:DC:CD:70:96:79:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e99ef5f7-43b7-3d59-aa51-18ac2aea4cb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ce:4d:6b:0b:8f:d4:5d:d8:01:ba:2b:28:96:bb:af:a5:f3: 55:5f:d0:9c:3a:8e:57:6b:a9:a4:ce:56:89:ab:08:95:9f:53: 0b:b8:46:fe:a9:6f:4d:6e:ce:ed:a3:01:d9:fa:6d:c4:66:68: 15:9a:6d:6f:1f:ca:24:a9:5b:95:31:5b:5e:35:53:21:69:38: de:c9:b3:d9:7c:46:00:99:c0:80:4f:6f:35:5d:06:d7:54:72: eb:5c:af:3f:da:40:2f:d5:dc:a2:f7:e5:55:78:c4:13:36:77: b5:29:3b:05:c3:02:51:d2:b1:4e:8c:3c:6b:91:99:9d:04:48: 87:eb:bd:d4:29:36:5b:7d:14:a6:00:a2:91:b8:3f:53:71:d9: be:59:55:ee:70:b9:97:3a:a8:c2:86:b0:2d:7a:79:c7:3d:ea: 36:5a:45:02:97:2f:0a:0b:fb:1b:17:74:11:ab:a3:ac:35:c7: 70:bf:b8:5c:94:36:9d:7e:1e:bb:a8:0d:80:45:21:fa:2a:89: 35:b4:39:2c:06:ac:87:02:f1:40:f4:8f:f0:0d:e6:9e:7e:88: 56:d9:2f:c5:9d:55:ef:f9:18:6c:71:75:ea:67:15:b7:de:5c: a5:f2:80:93:b0:c5:a0:22:c5:28:a4:d5:18:92:e4:b6:08:4a: 00:70:4d:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYBZ4BKW9EFHTPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk MzIxM2U1YWYtOGFjOS00NjVhLThkMzYtNTE0MWNhYWJhNTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM6UXo7LM1G00OtuIK3EPcezDdtWHp2d0ii3 oVG2pKDwObDVfItxwWn/lEiMPOanAkspbBBrmi4NYLZqVzCVOJPBNCiUB4QqoH8v xMQKpWZ6mITHL3ILUIPwgxwTS7ZQpo9ePMXYI98/ndi/T/rMKx7B/s0rjMTJydZY 2daB12IpU5fGOLoofF1cCx35Lmd0aFLDUZTmFr3QU7RwkGjAZM9nNtbmauZLcvhf Bl08wpbXPrN5JMtIXRJlKh7D+AZENuHDmuSHZk0gHgCwdMJuEidhjbULFK2HlJbc veG9RhLEvpniy9p1MWhwLPPA0ZgZBeMEVu23ljOqdfh0oB1U/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIW6RaML0N+MTR6INYf43M1wlnkFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTk5ZWY1ZjctNDNiNy0z ZDU5LWFhNTEtMThhYzJhZWE0Y2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyTnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLOTWsLj9Rd2AG6KyiWu6+l81Vf0Jw6jldrqaTOVomrCJWfUwu4Rv6p b01uzu2jAdn6bcRmaBWabW8fyiSpW5UxW141UyFpON7Js9l8RgCZwIBPbzVdBtdU cutcrz/aQC/V3KL35VV4xBM2d7UpOwXDAlHSsU6MPGuRmZ0ESIfrvdQpNlt9FKYA opG4P1Nx2b5ZVe5wuZc6qMKGsC16ecc96jZaRQKXLwoL+xsXdBGro6w1x3C/uFyU Np1+HruoDYBFIfoqiTW0OSwGrIcC8UD0j/AN5p5+iFbZL8WdVe/5GGxxdepnFbfe XKXygJOwxaAixSik1RiS5LYISgBwTeA= -----END CERTIFICATE-----Generated at Sat Jun 7 13:43:57 2025 by rpki-client