$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c71e3a2-ad9b-3ecd-a86d-27fc966d0a7a.roa File: 7c71e3a2-ad9b-3ecd-a86d-27fc966d0a7a.roa (raw, json) Hash identifier: IpWDQw9DtZqeor/MAS9P4a7Px2vdchDAyn1Hn3mfTYc= Subject key identifier: A5:8D:46:18:14:2D:CF:1A:0B:5A:E1:FF:7A:AA:8E:B9:D2:08:2C:F6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A15984BC344CF4EF60FB280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c71e3a2-ad9b-3ecd-a86d-27fc966d0a7a.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.39.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:98:4b:c3:44:cf:4e:f6:0f:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=bcf0b924-274c-41ca-b06b-7a74195e24ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:be:68:e5:3c:a7:16:88:85:b4:e6:54:42:9d: f3:d7:42:37:b0:8a:6c:5f:ab:73:1d:55:c3:a9:e5: 33:9e:57:06:b4:6c:4d:fc:c3:f2:ca:4f:9e:ff:a4: 45:61:ee:4c:6a:28:b5:09:6a:a9:73:e9:f8:55:48: 73:ed:75:5f:f0:2d:39:84:b4:df:66:62:b6:f0:34: 1a:a1:88:88:9f:9b:89:8c:fb:3b:0c:66:03:23:f2: 7c:70:0e:81:7a:35:9c:bb:0f:33:ac:a0:10:72:88: 61:5f:8c:23:04:22:00:dd:05:d3:71:a7:b7:b1:2b: 3a:85:4c:30:71:f6:8f:ad:65:71:f7:9b:e6:2c:fc: f0:d5:59:f9:63:64:ee:a7:dc:2b:61:17:79:24:20: 41:e9:da:b0:24:4c:d0:d5:57:8c:d6:b2:2f:5b:71: f7:cf:74:ca:f5:5b:c8:b7:24:81:46:95:fe:db:7c: 20:5c:87:c6:c9:d8:61:c2:b1:f5:6c:f2:2e:4d:bf: 7d:14:81:9a:57:f6:5a:55:ee:c4:d6:62:c0:d6:a5: 47:04:85:0c:e7:f7:01:da:42:1d:0d:a0:cb:c5:2f: 4a:17:1a:0f:de:c9:f7:8c:50:2d:aa:ea:2e:eb:2d: 6d:94:df:0d:7b:00:23:72:e5:8c:8e:f8:be:c1:20: 91:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8D:46:18:14:2D:CF:1A:0B:5A:E1:FF:7A:AA:8E:B9:D2:08:2C:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c71e3a2-ad9b-3ecd-a86d-27fc966d0a7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:77:a0:81:85:d4:7d:ad:7f:f8:ad:79:e9:e8:3f:cc:ec:af: f1:de:6c:2d:78:f0:9f:4e:ee:2a:13:64:2d:e5:db:07:74:8b: 5b:45:0a:4e:72:3c:f5:3a:07:f1:01:40:bd:ed:c5:62:a9:83: 4e:6c:65:50:99:5a:d1:bc:4e:1e:6b:94:21:be:46:78:c8:5f: 8e:c6:37:30:9d:6e:b3:b5:39:0f:6a:58:c2:a1:cf:63:96:fe: 2e:12:d1:ea:71:01:5c:66:ea:93:b9:35:e3:70:90:6e:60:db: 83:bc:97:e5:fc:5c:5e:8e:d8:35:87:de:57:e0:77:5d:d1:b8: a9:54:48:0e:e0:1e:2d:7e:ac:14:e8:c9:d6:7c:f1:52:fc:54: 68:61:6e:f1:10:5f:0d:0a:8d:1a:07:cf:62:2b:eb:80:f8:02: 08:41:8d:2a:23:c9:0f:c7:6d:9a:49:f9:6e:ae:1b:06:8d:62: 9c:e7:4b:8a:fe:77:3d:3a:95:b2:c5:c5:f7:46:9c:52:58:09: ff:76:a5:a6:2c:de:11:cd:e6:a7:c3:bf:ed:6e:40:57:29:d3: 31:6b:59:c5:6a:8c:58:d3:cd:cc:5a:57:59:7b:4a:f6:41:94: 8f:c3:d3:80:80:1e:64:4e:5f:23:30:0a:15:e8:42:ba:50:f9: c5:dd:b1:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZhLw0TPTvYPsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk YmNmMGI5MjQtMjc0Yy00MWNhLWIwNmItN2E3NDE5NWUyNGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr5o5TynFoiFtOZUQp3z10I3sIpsX6tzHVXD qeUznlcGtGxN/MPyyk+e/6RFYe5Maii1CWqpc+n4VUhz7XVf8C05hLTfZmK28DQa oYiIn5uJjPs7DGYDI/J8cA6BejWcuw8zrKAQcohhX4wjBCIA3QXTcae3sSs6hUww cfaPrWVx95vmLPzw1Vn5Y2Tup9wrYRd5JCBB6dqwJEzQ1VeM1rIvW3H3z3TK9VvI tySBRpX+23wgXIfGydhhwrH1bPIuTb99FIGaV/ZaVe7E1mLA1qVHBIUM5/cB2kId DaDLxS9KFxoP3sn3jFAtquou6y1tlN8NewAjcuWMjvi+wSCRIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWNRhgULc8aC1rh/3qqjrnSCCz2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2M3MWUzYTItYWQ5Yi0z ZWNkLWE4NmQtMjdmYzk2NmQwYTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyfdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD93oIGF1H2tf/iteenoP8zsr/HebC148J9O7ioTZC3l2wd0i1tFCk5y PPU6B/EBQL3txWKpg05sZVCZWtG8Th5rlCG+RnjIX47GNzCdbrO1OQ9qWMKhz2OW /i4S0epxAVxm6pO5NeNwkG5g24O8l+X8XF6O2DWH3lfgd13RuKlUSA7gHi1+rBTo ydZ88VL8VGhhbvEQXw0KjRoHz2Ir64D4AghBjSojyQ/HbZpJ+W6uGwaNYpznS4r+ dz06lbLFxfdGnFJYCf92paYs3hHN5qfDv+1uQFcp0zFrWcVqjFjTzcxaV1l7SvZB lI/D04CAHmROXyMwChXoQrpQ+cXdseg= -----END CERTIFICATE-----Generated at Sun Jun 29 12:33:00 2025 by rpki-client