$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c21e5e33-f631-3625-97c9-42218a7ac51e.roa File: c21e5e33-f631-3625-97c9-42218a7ac51e.roa (raw, json) Hash identifier: IVM7XWH0ySywqdnEmO+ZCV3KUY7LqBJlusiMSWQdchk= Subject key identifier: 25:93:1F:CD:3A:90:B7:55:0A:E1:5B:21:2A:5F:2A:C8:46:4A:36:E6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A43DB13DF6F149F10824EEF98 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c21e5e33-f631-3625-97c9-42218a7ac51e.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.52.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:13:df:6f:14:9f:10:82:4e:ef:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=7e9359e3-a3e4-405e-bf95-45685497ece6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:00:56:b8:31:61:75:b0:a1:99:94:89:ac:1c: 1d:73:c3:c7:c8:90:98:e2:1a:23:e4:93:34:11:bf: fb:7b:2e:87:0a:47:82:18:13:29:7d:92:de:75:ee: ae:43:53:84:7e:4d:e4:c5:b8:0f:d5:c3:86:e5:8d: 05:ac:18:3b:3c:a3:c7:4b:7d:d8:fe:79:36:0d:c4: 26:88:5e:a6:56:87:11:a8:97:ef:82:78:6f:46:fb: d0:5e:ff:ce:0e:b8:a1:f7:fb:5f:47:91:e6:a0:63: 9e:75:36:b7:87:0d:cc:7e:6f:04:0e:00:ca:6a:33: 52:29:66:c4:98:77:e8:12:d6:46:58:fa:9c:89:17: fe:80:4e:94:9f:c6:48:6a:13:a5:11:0f:1c:8c:a0: ed:55:ee:c6:87:b2:20:fc:58:51:7b:c3:33:22:19: c0:7e:a7:ca:54:b7:b3:29:9e:36:3b:b9:97:32:d1: dc:a4:9b:20:6b:b0:bd:1a:9d:45:b8:58:c4:e4:5c: e7:29:f5:03:f1:ae:1f:44:f4:ac:56:09:3a:c5:02: fd:39:f7:d0:7e:d5:d7:1f:fb:91:00:a6:09:80:14: 82:ff:76:0c:85:df:12:a0:90:dc:f9:d6:d2:0f:9a: 6e:b2:e2:f7:dc:f9:d0:91:c8:2a:c6:1d:60:e9:ac: 91:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:93:1F:CD:3A:90:B7:55:0A:E1:5B:21:2A:5F:2A:C8:46:4A:36:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c21e5e33-f631-3625-97c9-42218a7ac51e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:a8:4c:c9:17:cf:51:c3:15:9a:f0:32:05:f6:bc:20:71:f3: 87:da:1b:d6:69:23:79:82:db:bf:ed:2c:ba:2c:a4:3d:e0:b0: f4:58:4f:21:d9:07:dd:5d:84:b4:de:76:72:07:48:b7:8e:77: e2:a8:6d:c5:1e:c6:30:84:8e:22:c3:96:c0:a0:26:97:c7:fa: cb:b7:42:b5:f8:e2:4a:b0:7d:24:b3:63:b8:db:9a:eb:c0:81: d0:34:61:da:3c:37:3a:3a:35:88:9b:a4:22:21:f8:13:26:d9: d9:7b:0d:4e:fb:e3:9a:64:56:8a:6c:9a:bd:06:62:e7:53:2d: 24:c6:81:98:4e:05:a2:3f:da:43:eb:90:45:3d:63:16:d6:0d: b4:f3:43:d5:7d:b6:d3:8d:26:84:95:29:2e:27:f0:01:95:c1: 10:b3:b5:3f:41:bc:e5:d4:a3:4f:08:0a:0d:0a:3b:12:35:83: 5c:ec:60:3d:00:9b:4c:79:fb:8f:36:4e:43:9a:c5:6a:cc:62: 44:ab:ef:61:b1:86:23:6f:38:7d:62:18:89:82:6d:b7:97:07: 15:22:03:3f:de:51:16:26:ff:32:f8:49:1b:69:a2:46:b5:13: 1b:f5:91:39:82:9a:69:45:0f:fa:20:d2:64:a7:d6:6b:5c:4b: 2a:f1:c9:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2xPfbxSfEIJO75gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk N2U5MzU5ZTMtYTNlNC00MDVlLWJmOTUtNDU2ODU0OTdlY2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgBWuDFhdbChmZSJrBwdc8PHyJCY4hoj5JM0 Eb/7ey6HCkeCGBMpfZLede6uQ1OEfk3kxbgP1cOG5Y0FrBg7PKPHS33Y/nk2DcQm iF6mVocRqJfvgnhvRvvQXv/ODrih9/tfR5HmoGOedTa3hw3Mfm8EDgDKajNSKWbE mHfoEtZGWPqciRf+gE6Un8ZIahOlEQ8cjKDtVe7Gh7Ig/FhRe8MzIhnAfqfKVLez KZ42O7mXMtHcpJsga7C9Gp1FuFjE5FznKfUD8a4fRPSsVgk6xQL9OffQftXXH/uR AKYJgBSC/3YMhd8SoJDc+dbSD5pusuL33PnQkcgqxh1g6ayRaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWTH806kLdVCuFbISpfKshGSjbmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzIxZTVlMzMtZjYzMS0z NjI1LTk3YzktNDIyMThhN2FjNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzSrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuoTMkXz1HDFZrwMgX2vCBx84faG9ZpI3mC27/tLLospD3gsPRYTyHZ B91dhLTednIHSLeOd+KobcUexjCEjiLDlsCgJpfH+su3QrX44kqwfSSzY7jbmuvA gdA0Ydo8Nzo6NYibpCIh+BMm2dl7DU7745pkVopsmr0GYudTLSTGgZhOBaI/2kPr kEU9YxbWDbTzQ9V9ttONJoSVKS4n8AGVwRCztT9BvOXUo08ICg0KOxI1g1zsYD0A m0x5+482TkOaxWrMYkSr72GxhiNvOH1iGImCbbeXBxUiAz/eURYm/zL4SRtpoka1 Exv1kTmCmmlFD/og0mSn1mtcSyrxyXs= -----END CERTIFICATE-----Generated at Sun Jun 29 14:15:41 2025 by rpki-client