$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f61c8797-40ef-3b8a-b6a1-d30f9604ac98.roa File: f61c8797-40ef-3b8a-b6a1-d30f9604ac98.roa (raw, json) Hash identifier: mLAS7quGh5EP7ZOhvUyaG493Mbn85dxMcsBSMnSck4U= Subject key identifier: 6C:8C:2E:71:54:88:E1:4F:91:7F:FE:19:20:54:96:8F:85:9A:DB:2F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A023FC71DF3A78C66C7CE5980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f61c8797-40ef-3b8a-b6a1-d30f9604ac98.roa Signing time: Thu 29 May 2025 01:00:50 +0000 ROA not before: Thu 29 May 2025 01:00:50 +0000 ROA not after: Wed 27 Aug 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.36.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:02:3f:c7:1d:f3:a7:8c:66:c7:ce:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 01:00:50 2025 GMT Not After : Aug 27 01:00:50 2025 GMT Subject: CN=d2d7b7c7-264e-4d03-9812-8d80f7781102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ea:0c:0a:23:94:16:c9:50:2d:ec:7f:d0:31: 62:77:54:07:48:8a:d3:90:c6:97:74:85:77:fb:02: 2f:2e:da:b7:79:e4:3e:4c:1e:3f:11:85:02:43:62: 6e:c7:a8:aa:da:d7:da:54:1d:91:cc:45:c4:79:ad: 54:19:54:71:b5:b0:5a:41:af:1d:7e:9a:1b:29:24: d8:d3:8c:46:6a:5b:47:3e:aa:fd:49:90:65:34:ef: 42:db:3d:17:5b:fd:07:e9:60:54:f5:f7:61:35:d5: 56:a1:ca:c5:95:d0:59:2f:6f:c6:f9:8f:6b:ec:f1: 48:1c:d6:af:c8:6c:4f:a8:dc:3a:f6:e1:1d:f7:14: b6:b1:46:a7:a5:46:99:d4:fb:46:ed:3e:e7:4b:52: 1d:59:18:28:0e:05:07:67:45:19:86:f2:aa:9b:d3: d2:9e:17:f5:46:bb:c4:53:ea:bf:fe:84:4e:5f:b5: e2:1b:b3:93:86:86:61:d8:94:35:90:bc:3e:00:9f: 44:14:8c:b0:55:e3:42:64:40:53:a0:53:3a:6b:e9: 20:12:8c:1c:89:9c:7f:be:c5:85:6d:71:f1:bc:80: cf:ab:f8:79:45:94:f1:a0:3b:30:25:f3:2f:06:93: bd:18:fd:80:f5:18:26:15:cf:d8:72:d5:d3:03:b6: d8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8C:2E:71:54:88:E1:4F:91:7F:FE:19:20:54:96:8F:85:9A:DB:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f61c8797-40ef-3b8a-b6a1-d30f9604ac98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:ed:14:ae:8d:1f:33:6d:5e:86:b6:c5:89:dd:52:9a:eb:4c: dd:7c:1d:46:43:3c:17:fc:3e:f2:77:2b:d7:5f:75:16:e0:9d: 25:80:92:95:4d:42:63:f7:1a:8c:a7:e0:08:02:d2:cf:a6:83: 0e:73:5c:6b:9c:91:20:9c:66:59:dd:ea:f2:ad:0a:00:53:db: 73:bf:41:af:9b:77:a4:9f:9a:68:3d:5d:32:91:b3:9b:b0:d2: 8a:91:88:59:ea:dd:c3:4a:76:77:c8:5d:b0:be:49:1d:da:58: 83:43:1d:13:f8:13:84:d2:6c:7b:a9:8a:ec:74:26:54:ae:98: 36:52:92:0d:00:85:1a:88:36:16:27:ab:37:90:18:e7:b4:46: c6:9b:76:1f:68:85:18:e2:76:3f:69:91:e2:64:17:65:04:79: f1:15:8a:c9:79:43:9b:60:f9:4d:37:93:6f:9e:9f:05:5c:e3: 20:73:b4:98:e7:a0:3e:84:7e:8d:f2:0c:7d:9b:a9:c9:93:9f: 2d:ec:27:3c:2a:88:1b:11:f4:6e:86:a9:39:21:4d:55:70:8f: 09:4d:c5:bd:ba:6a:ff:0c:69:37:92:c4:5b:e7:2c:4b:f8:5e: cd:03:56:6f:f5:b9:e1:91:75:ca:1c:ce:0b:34:79:f0:84:8a: cd:73:f0:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoCP8cd86eMZsfOWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTAxMDA1MFoXDTI1MDgyNzAxMDA1MFowLzEtMCsGA1UEAxMk ZDJkN2I3YzctMjY0ZS00ZDAzLTk4MTItOGQ4MGY3NzgxMTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOoMCiOUFslQLex/0DFid1QHSIrTkMaXdIV3 +wIvLtq3eeQ+TB4/EYUCQ2Jux6iq2tfaVB2RzEXEea1UGVRxtbBaQa8dfpobKSTY 04xGaltHPqr9SZBlNO9C2z0XW/0H6WBU9fdhNdVWocrFldBZL2/G+Y9r7PFIHNav yGxPqNw69uEd9xS2sUanpUaZ1PtG7T7nS1IdWRgoDgUHZ0UZhvKqm9PSnhf1RrvE U+q//oROX7XiG7OThoZh2JQ1kLw+AJ9EFIywVeNCZEBToFM6a+kgEowciZx/vsWF bXHxvIDPq/h5RZTxoDswJfMvBpO9GP2A9RgmFc/YctXTA7bY8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyMLnFUiOFPkX/+GSBUlo+FmtsvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjYxYzg3OTctNDBlZi0z YjhhLWI2YTEtZDMwZjk2MDRhYzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPtFK6NHzNtXoa2xYndUprrTN18HUZDPBf8PvJ3K9dfdRbgnSWAkpVN QmP3Goyn4AgC0s+mgw5zXGuckSCcZlnd6vKtCgBT23O/Qa+bd6Sfmmg9XTKRs5uw 0oqRiFnq3cNKdnfIXbC+SR3aWINDHRP4E4TSbHupiux0JlSumDZSkg0AhRqINhYn qzeQGOe0Rsabdh9ohRjidj9pkeJkF2UEefEVisl5Q5tg+U03k2+enwVc4yBztJjn oD6Efo3yDH2bqcmTny3sJzwqiBsR9G6GqTkhTVVwjwlNxb26av8MaTeSxFvnLEv4 Xs0DVm/1ueGRdcoczgs0efCEis1z8Co= -----END CERTIFICATE-----Generated at Thu Jun 5 18:23:16 2025 by rpki-client