$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c621c77-9539-33db-8fef-a54d1803dc68.roa File: 1c621c77-9539-33db-8fef-a54d1803dc68.roa (raw, json) Hash identifier: S0yb/W+2iUqeDIZPUU2nLEPPabEO5R+K1r72EC3vElY= Subject key identifier: 48:B8:FE:24:7B:17:B6:07:F8:E9:BE:C0:0F:95:D9:C7:3E:1A:2A:CC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7A4B5D60C3AFC89703468880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c621c77-9539-33db-8fef-a54d1803dc68.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.212.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:5d:60:c3:af:c8:97:03:46:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=d1ce7ae9-298e-412c-b6ea-bce8b6ba6b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3a:77:91:a2:20:a6:e7:7d:16:6d:47:b5:67: 08:c4:48:06:d9:ea:75:44:c5:2b:1b:bd:a9:49:25: 55:a1:c5:57:0d:4a:84:92:8a:44:e5:5c:aa:26:9b: 86:e9:10:22:90:10:f3:68:cc:24:64:9c:b6:cf:f6: 94:19:7c:e2:a9:a0:03:9e:d7:59:cd:cb:f1:29:ec: 38:72:f6:f4:12:59:28:d6:2d:8b:e7:d0:24:08:39: 46:e5:5a:28:c9:ca:4e:63:7b:89:ec:2a:f8:ed:2f: 59:bc:8f:a9:7d:b7:f0:c1:ed:4c:d4:9c:0f:68:70: 99:21:1b:8f:ed:57:aa:83:db:c5:ca:0d:ec:fe:1e: 52:55:06:c6:0b:8b:8f:ac:81:fe:6d:ea:55:08:0c: 50:95:aa:54:80:f4:f8:80:4e:e7:55:e1:55:46:64: 1f:ac:f0:36:1a:60:79:8b:94:29:30:ef:55:0a:b8: 90:99:96:14:8e:46:69:c6:c4:aa:74:cf:33:36:50: 9c:f0:49:e5:8e:8f:08:57:b6:d0:a4:03:2b:a7:01: 5c:92:c0:9c:9d:39:2f:c9:4f:ca:cf:58:10:5f:dd: 18:5c:13:90:19:c9:29:c6:74:a3:3e:8b:cf:84:9a: 36:8e:d5:99:c9:c2:39:f5:95:5b:a8:86:6a:29:8e: 68:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B8:FE:24:7B:17:B6:07:F8:E9:BE:C0:0F:95:D9:C7:3E:1A:2A:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c621c77-9539-33db-8fef-a54d1803dc68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:2d:62:77:4a:4b:49:e1:88:8b:4a:bf:04:34:b4:1a:3e:c4: 14:60:4b:14:65:da:65:e6:32:2b:28:70:dc:ca:f9:24:2a:0e: 9f:fb:72:99:0d:97:14:ae:72:48:ff:41:82:7e:f8:f5:05:47: 63:59:da:52:c3:0f:2a:bf:01:9a:d2:ba:a7:0f:b9:88:23:ff: bd:98:c1:2d:e5:e7:35:57:eb:6d:19:16:a7:27:1c:22:30:c3: d5:76:52:e5:13:42:86:80:87:80:5c:05:39:d2:25:0a:5a:94: a3:15:56:da:fa:85:67:9c:06:b1:60:4d:76:3f:3d:86:d9:4e: ea:cb:49:dc:37:14:fb:7c:ed:46:9e:b4:ed:7e:91:c3:37:ab: 88:21:a1:61:74:c0:8e:ef:82:93:e6:df:d8:8b:33:e9:6c:af: 8d:17:51:9a:d9:9c:b5:56:68:1a:25:0f:a0:23:97:71:ba:9a: 10:11:4e:e8:13:04:ee:ec:3f:78:4c:84:8a:a1:f4:bb:94:df: 13:1d:73:6a:48:24:2d:a5:ef:cf:2e:9b:08:c8:af:92:45:1c: d0:12:b0:cb:ac:67:13:b3:0f:31:51:2c:04:df:01:f0:60:3b: 16:08:f0:83:54:f6:24:de:fd:f9:7c:20:2b:99:ae:dc:8c:b2: 6e:a1:2d:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S11gw6/IlwNGiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk ZDFjZTdhZTktMjk4ZS00MTJjLWI2ZWEtYmNlOGI2YmE2YjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjp3kaIgpud9Fm1HtWcIxEgG2ep1RMUrG72p SSVVocVXDUqEkopE5VyqJpuG6RAikBDzaMwkZJy2z/aUGXziqaADntdZzcvxKew4 cvb0Elko1i2L59AkCDlG5VooycpOY3uJ7Cr47S9ZvI+pfbfwwe1M1JwPaHCZIRuP 7Veqg9vFyg3s/h5SVQbGC4uPrIH+bepVCAxQlapUgPT4gE7nVeFVRmQfrPA2GmB5 i5QpMO9VCriQmZYUjkZpxsSqdM8zNlCc8Enljo8IV7bQpAMrpwFcksCcnTkvyU/K z1gQX90YXBOQGckpxnSjPovPhJo2jtWZycI59ZVbqIZqKY5oLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEi4/iR7F7YH+Om+wA+V2cc+GirMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWM2MjFjNzctOTUzOS0z M2RiLThmZWYtYTU0ZDE4MDNkYzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9S9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4tYndKS0nhiItKvwQ0tBo+xBRgSxRl2mXmMisocNzK+SQqDp/7cpkN lxSuckj/QYJ++PUFR2NZ2lLDDyq/AZrSuqcPuYgj/72YwS3l5zVX620ZFqcnHCIw w9V2UuUTQoaAh4BcBTnSJQpalKMVVtr6hWecBrFgTXY/PYbZTurLSdw3FPt87Uae tO1+kcM3q4ghoWF0wI7vgpPm39iLM+lsr40XUZrZnLVWaBolD6Ajl3G6mhARTugT BO7sP3hMhIqh9LuU3xMdc2pIJC2l788umwjIr5JFHNASsMusZxOzDzFRLATfAfBg OxYI8INU9iTe/fl8ICuZrtyMsm6hLRI= -----END CERTIFICATE-----Generated at Tue Jul 22 19:33:41 2025 by rpki-client