$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9b51edf-d1d5-3af2-b67c-7c8bc4f37d23.roa File: b9b51edf-d1d5-3af2-b67c-7c8bc4f37d23.roa (raw, json) Hash identifier: CQaH9OI0CyR/gm+qLmyDcQR4GZyDvmnT2uBHH52MwvE= Subject key identifier: F1:45:A4:C7:CB:76:DE:52:6D:66:CF:17:CF:17:82:D0:3A:E0:FB:DA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A1597962AEB95DFB0BDE760 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9b51edf-d1d5-3af2-b67c-7c8bc4f37d23.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 24319 IP address blocks: 23.39.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:97:96:2a:eb:95:df:b0:bd:e7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=c506a1a4-f2b3-4092-ade1-432a58b96871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c9:1b:b4:aa:7b:c0:0d:f8:03:f3:fa:b7:73: 0b:74:ba:68:30:d2:be:7d:18:47:a7:6a:72:b1:4c: 88:67:04:14:88:99:c6:39:e2:7c:de:36:22:64:52: 27:0c:0d:7b:de:ec:40:b7:92:2d:83:54:e2:2d:fd: 38:97:08:29:d7:aa:54:bc:64:86:fd:05:6d:b6:69: 33:7e:37:bc:34:a5:84:95:38:41:a2:73:08:eb:37: e1:7d:e4:5c:d3:33:14:f3:24:07:a1:68:94:50:b2: 21:e1:6b:39:81:b9:c2:03:68:06:5d:bd:78:74:5a: d7:29:88:a9:0c:eb:4c:64:f7:f2:19:c5:11:21:47: e4:1e:e4:4d:11:ec:73:07:e1:52:b8:0c:73:23:69: 5d:a8:54:2f:4e:39:c1:4f:5c:7d:70:c8:75:31:c2: b8:92:88:9d:59:01:bc:92:c9:b7:76:3f:25:d5:b2: ac:e1:69:97:df:3a:b4:dc:e9:7a:f0:25:44:93:11: 36:06:d7:58:7c:b0:2a:c8:a0:88:87:61:cf:36:d9: 7d:85:73:c0:fa:48:06:e9:b1:eb:4b:4f:81:40:32: df:05:f0:1e:13:7a:37:80:75:2b:9b:1b:6d:af:48: 3f:7b:17:eb:87:8e:d7:4d:8e:d8:4a:01:4b:a0:2c: 86:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:45:A4:C7:CB:76:DE:52:6D:66:CF:17:CF:17:82:D0:3A:E0:FB:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9b51edf-d1d5-3af2-b67c-7c8bc4f37d23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f7:3c:ba:92:26:01:3a:18:a9:d0:77:ab:a9:49:c6:f6:b7: 27:5e:c3:58:2a:40:3e:ef:ee:99:71:6b:47:41:e9:67:b5:24: 4b:14:67:d4:7b:c5:46:6a:11:85:43:43:68:ef:29:ff:71:8c: c2:d6:aa:69:03:2f:65:2c:2e:d6:fc:7a:05:7e:87:ba:be:7e: 03:29:1a:e1:ef:35:94:ce:17:d0:32:0e:39:3f:53:e2:a7:a6: fe:44:88:6f:2a:58:b1:bf:d2:52:14:8c:e9:af:04:2d:52:1a: b4:94:5d:41:a5:52:55:59:88:6d:09:03:e9:b3:69:a3:12:61: 98:ab:68:32:56:bc:aa:29:c6:3f:95:5c:68:50:ab:f4:18:38: ea:2b:c6:e2:c4:47:84:06:62:9e:fc:a1:52:67:df:97:55:a0: 52:f4:e1:77:a5:2f:de:76:c1:71:85:ad:b9:b5:74:87:ab:2a: f9:3b:5e:ae:8c:5a:7c:1a:e5:c0:bc:03:33:79:c1:67:40:51: 09:e8:29:d5:a5:5c:e3:57:a9:92:ac:e8:ee:90:84:ab:2b:0b: a3:b9:5c:6b:ff:61:0f:6b:62:8a:b6:01:35:f6:26:77:84:76: f6:05:22:ff:f5:24:68:7a:a8:22:49:e6:0b:92:7a:ea:6b:5d: c5:ce:2d:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZeWKuuV37C952AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk YzUwNmExYTQtZjJiMy00MDkyLWFkZTEtNDMyYTU4Yjk2ODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8kbtKp7wA34A/P6t3MLdLpoMNK+fRhHp2py sUyIZwQUiJnGOeJ83jYiZFInDA173uxAt5Itg1TiLf04lwgp16pUvGSG/QVttmkz fje8NKWElThBonMI6zfhfeRc0zMU8yQHoWiUULIh4Ws5gbnCA2gGXb14dFrXKYip DOtMZPfyGcURIUfkHuRNEexzB+FSuAxzI2ldqFQvTjnBT1x9cMh1McK4koidWQG8 ksm3dj8l1bKs4WmX3zq03Ol68CVEkxE2BtdYfLAqyKCIh2HPNtl9hXPA+kgG6bHr S0+BQDLfBfAeE3o3gHUrmxttr0g/exfrh47XTY7YSgFLoCyGIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFFpMfLdt5SbWbPF88XgtA64PvaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjliNTFlZGYtZDFkNS0z YWYyLWI2N2MtN2M4YmM0ZjM3ZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyeZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr3PLqSJgE6GKnQd6upScb2tydew1gqQD7v7plxa0dB6We1JEsUZ9R7 xUZqEYVDQ2jvKf9xjMLWqmkDL2UsLtb8egV+h7q+fgMpGuHvNZTOF9AyDjk/U+Kn pv5EiG8qWLG/0lIUjOmvBC1SGrSUXUGlUlVZiG0JA+mzaaMSYZiraDJWvKopxj+V XGhQq/QYOOorxuLER4QGYp78oVJn35dVoFL04XelL952wXGFrbm1dIerKvk7Xq6M Wnwa5cC8AzN5wWdAUQnoKdWlXONXqZKs6O6QhKsrC6O5XGv/YQ9rYoq2ATX2JneE dvYFIv/1JGh6qCJJ5guSeuprXcXOLWQ= -----END CERTIFICATE-----Generated at Sun Jun 29 12:06:18 2025 by rpki-client