$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f97d212-04fe-3382-bcdd-869184340e2a.roa File: 6f97d212-04fe-3382-bcdd-869184340e2a.roa (raw, json) Hash identifier: whneQXK74rveDMQf5k2+gtIPmv2KhGHsQAFWokji4qU= Subject key identifier: 78:3A:76:F9:12:69:43:B8:CE:3F:A0:07:DB:85:16:EB:41:22:6D:82 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A15A5C52FC45878A9631F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f97d212-04fe-3382-bcdd-869184340e2a.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.41.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:a5:c5:2f:c4:58:78:a9:63:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=ff50d536-d2fe-4575-92b2-5b77044c0aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ad:d1:2b:7c:b8:20:ef:48:d2:e6:63:6f:23: 64:6a:99:6a:54:52:0b:eb:8b:dc:63:86:8b:77:af: 35:7d:cf:76:33:b9:5a:9c:d7:4f:b4:ca:aa:2f:4e: e9:90:73:6c:46:9b:1a:b1:b9:47:6a:12:d1:dc:95: ff:9c:5b:54:a0:0f:ab:1b:0e:28:17:c3:3c:39:93: cc:03:f5:2e:4c:03:73:04:85:aa:5f:ba:e8:08:18: aa:0f:de:ea:30:a2:bb:50:e5:7b:05:41:22:01:66: 8a:20:f7:16:dd:7d:91:af:53:f0:14:86:df:f0:c2: 5f:87:f9:22:a6:b1:64:da:09:b6:98:f6:83:c6:18: 90:a3:ba:62:d5:6f:ea:a5:47:66:0f:c9:9d:7e:cf: e5:25:59:bd:9d:00:86:85:d7:2c:c7:f0:88:0e:8e: 0e:1c:df:0d:22:b4:81:0e:4e:ba:8f:c9:44:ed:9d: ab:23:8e:f2:7c:6e:a1:49:db:92:65:73:79:bb:17: a3:a3:de:ca:51:71:87:d3:10:91:ec:8d:53:be:13: ba:ef:c6:40:59:f2:41:3a:a6:68:a5:93:be:af:b4: 31:29:6b:f7:70:30:15:d2:34:a2:60:7a:f2:d1:a3: 3a:a7:a1:d9:99:22:2e:d0:37:bd:58:77:0d:f4:1e: e2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3A:76:F9:12:69:43:B8:CE:3F:A0:07:DB:85:16:EB:41:22:6D:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f97d212-04fe-3382-bcdd-869184340e2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:89:b7:81:ea:4b:d7:69:61:23:16:8e:b5:c8:a6:da:c1:5e: d4:52:67:a8:bc:c0:a9:ec:66:c8:3d:64:12:00:1b:2f:24:a8: 1e:f0:12:5c:87:91:0d:fa:18:1e:34:d3:63:10:87:94:af:52: 8c:4a:5d:70:2e:fa:1a:fc:c0:91:9e:2b:12:69:5e:9a:f7:0e: f0:d8:cd:0f:dd:5b:c4:52:95:7a:b3:9c:19:cf:08:27:c5:df: cb:91:d3:2c:6f:51:8c:0c:09:34:88:78:b9:58:95:ad:55:ba: fa:90:04:55:64:f6:0a:77:4e:91:22:d3:70:4e:b9:dc:0e:18: 8f:37:8f:dd:19:91:cb:6a:d3:4c:dd:4a:91:87:71:c5:c7:69: b5:66:e4:bd:13:e1:29:78:81:8c:cf:7a:da:19:ca:58:85:26: fa:c1:fd:6b:71:d6:7e:fc:c5:5a:45:06:66:79:6c:30:e4:01: 8b:6d:d5:65:78:d2:4d:ea:87:d3:c3:d7:58:d0:a9:f0:a0:bd: 49:4e:c8:54:96:63:44:70:44:f0:d5:67:c1:5d:37:f6:64:9a: e7:5d:6e:5c:76:de:42:23:53:22:aa:86:c2:b2:62:c7:9a:c4: f0:8f:32:5d:2b:a3:19:a4:c2:c5:ad:c0:77:cf:24:8b:63:cd: 3e:44:52:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FaXFL8RYeKljHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk ZmY1MGQ1MzYtZDJmZS00NTc1LTkyYjItNWI3NzA0NGMwYWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK3RK3y4IO9I0uZjbyNkaplqVFIL64vcY4aL d681fc92M7lanNdPtMqqL07pkHNsRpsasblHahLR3JX/nFtUoA+rGw4oF8M8OZPM A/UuTANzBIWqX7roCBiqD97qMKK7UOV7BUEiAWaKIPcW3X2Rr1PwFIbf8MJfh/ki prFk2gm2mPaDxhiQo7pi1W/qpUdmD8mdfs/lJVm9nQCGhdcsx/CIDo4OHN8NIrSB Dk66j8lE7Z2rI47yfG6hSduSZXN5uxejo97KUXGH0xCR7I1TvhO678ZAWfJBOqZo pZO+r7QxKWv3cDAV0jSiYHry0aM6p6HZmSIu0De9WHcN9B7iNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHg6dvkSaUO4zj+gB9uFFutBIm2CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmY5N2QyMTItMDRmZS0z MzgyLWJjZGQtODY5MTg0MzQwZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyn5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2Jt4HqS9dpYSMWjrXIptrBXtRSZ6i8wKnsZsg9ZBIAGy8kqB7wElyH kQ36GB4002MQh5SvUoxKXXAu+hr8wJGeKxJpXpr3DvDYzQ/dW8RSlXqznBnPCCfF 38uR0yxvUYwMCTSIeLlYla1VuvqQBFVk9gp3TpEi03BOudwOGI83j90Zkctq00zd SpGHccXHabVm5L0T4Sl4gYzPetoZyliFJvrB/Wtx1n78xVpFBmZ5bDDkAYtt1WV4 0k3qh9PD11jQqfCgvUlOyFSWY0RwRPDVZ8FdN/Zkmuddblx23kIjUyKqhsKyYsea xPCPMl0roxmkwsWtwHfPJItjzT5EUmo= -----END CERTIFICATE-----Generated at Sun Jun 29 19:25:03 2025 by rpki-client