$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39c06ad6-c6d3-3427-93f1-c7af7259a5e7.roa File: 39c06ad6-c6d3-3427-93f1-c7af7259a5e7.roa (raw, json) Hash identifier: 9uLKYnZTV/v3kQ6dAP17X143FGwmu/44Hjcz88vgO+A= Subject key identifier: 5B:C2:7B:A3:0D:7C:48:0A:37:68:0F:57:5E:8C:4A:6A:08:58:5E:63 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A90A0DF616746C5C18666C200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39c06ad6-c6d3-3427-93f1-c7af7259a5e7.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 20940 IP address blocks: 23.32.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:df:61:67:46:c5:c1:86:66:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=94f0f2ef-7ef0-4bfd-a38a-19924dc6550e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ce:b3:cc:5e:2d:b8:da:27:4a:fd:5c:19:2f: e3:47:4a:ee:a2:07:f8:43:3e:12:51:57:c9:b7:f5: 1a:d4:56:20:89:47:b1:45:91:bd:1c:b7:bb:6b:2d: cf:b1:c7:0e:fb:09:e4:7b:b2:5c:ed:e1:e0:41:7d: 7f:8b:fb:77:2e:0f:31:e9:27:13:8d:3c:91:c8:55: e0:0e:2f:4c:ef:2e:ca:f8:46:94:e4:77:e8:e2:fd: 9c:67:44:2d:06:4f:4b:3b:aa:ad:a0:10:85:0b:b7: 71:ed:46:66:30:27:9e:d7:0a:dc:7b:b1:e2:da:4f: 4c:6d:ce:cc:77:17:12:63:06:e2:9c:bd:a2:6c:de: ac:23:42:4e:43:0e:55:64:c1:4e:cc:b7:74:8b:26: d2:22:c7:53:9c:33:be:60:10:c9:20:d9:6d:54:db: 38:e8:e5:4b:7a:5a:0c:b5:9f:74:41:36:d7:2d:e7: 4b:96:6d:cf:16:5b:08:b2:f6:79:d6:91:18:4b:7f: 1e:86:4d:51:e5:ac:ea:96:b8:31:cd:7f:9a:b8:26: 60:53:0d:e0:1e:66:8b:c0:77:13:0f:5b:a7:31:ce: 7f:8c:d1:49:ae:bc:48:e9:b2:9f:c8:d9:18:57:8f: c9:27:29:df:c1:d1:36:75:6f:6e:c6:ff:ca:8c:3a: b7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C2:7B:A3:0D:7C:48:0A:37:68:0F:57:5E:8C:4A:6A:08:58:5E:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39c06ad6-c6d3-3427-93f1-c7af7259a5e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:3d:02:94:6a:d0:82:bb:4c:9b:d6:68:03:43:4f:b8:55:ba: 20:be:7f:1b:70:8a:73:a9:fe:a4:19:60:09:0a:fb:60:bb:84: 0d:d4:3a:c3:49:8f:58:5d:9f:4c:d5:a3:67:22:8c:52:0d:ae: 49:fe:5b:52:94:b7:94:7b:49:89:2d:4c:e7:e7:83:2b:95:a7: fa:94:7f:31:89:a4:5e:aa:92:96:33:d1:2a:07:db:34:2a:5a: 3f:9c:5f:b6:9f:2c:ed:b0:ec:fb:de:5b:89:f9:4c:48:c5:89: 25:2e:17:38:c1:8b:6b:da:c5:2c:48:e0:3a:4c:e8:31:b6:c9: 2c:17:6b:44:82:d9:cf:81:61:7d:0f:fb:d5:77:25:b5:4b:97: fd:2e:2b:22:a0:e4:b7:e2:01:ed:4a:34:9a:a5:8c:3e:e5:1d: 85:32:71:2a:16:66:26:31:c7:3e:88:43:5d:f8:79:64:30:24: b8:9e:59:20:ed:fb:d7:ad:e8:15:92:78:68:3d:4e:49:46:49: 87:12:2a:76:8e:42:82:7e:d3:3b:31:1a:7f:67:fb:d0:26:9a: 48:fd:03:4f:a8:f6:33:3d:62:83:10:2a:56:63:67:bc:8e:c6: 6a:19:a4:46:8b:06:88:5d:a4:cb:34:11:b8:1c:d4:9a:88:16: 12:75:71:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoN9hZ0bFwYZmwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk OTRmMGYyZWYtN2VmMC00YmZkLWEzOGEtMTk5MjRkYzY1NTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM6zzF4tuNonSv1cGS/jR0ruogf4Qz4SUVfJ t/Ua1FYgiUexRZG9HLe7ay3PsccO+wnke7Jc7eHgQX1/i/t3Lg8x6ScTjTyRyFXg Di9M7y7K+EaU5Hfo4v2cZ0QtBk9LO6qtoBCFC7dx7UZmMCee1wrce7Hi2k9Mbc7M dxcSYwbinL2ibN6sI0JOQw5VZMFOzLd0iybSIsdTnDO+YBDJINltVNs46OVLeloM tZ90QTbXLedLlm3PFlsIsvZ51pEYS38ehk1R5azqlrgxzX+auCZgUw3gHmaLwHcT D1unMc5/jNFJrrxI6bKfyNkYV4/JJynfwdE2dW9uxv/KjDq3RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvCe6MNfEgKN2gPV16MSmoIWF5jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzljMDZhZDYtYzZkMy0z NDI3LTkzZjEtYzdhZjcyNTlhNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyAVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACo9ApRq0IK7TJvWaANDT7hVuiC+fxtwinOp/qQZYAkK+2C7hA3UOsNJ j1hdn0zVo2cijFINrkn+W1KUt5R7SYktTOfngyuVp/qUfzGJpF6qkpYz0SoH2zQq Wj+cX7afLO2w7PveW4n5TEjFiSUuFzjBi2vaxSxI4DpM6DG2ySwXa0SC2c+BYX0P +9V3JbVLl/0uKyKg5LfiAe1KNJqljD7lHYUycSoWZiYxxz6IQ134eWQwJLieWSDt +9et6BWSeGg9TklGSYcSKnaOQoJ+0zsxGn9n+9Ammkj9A0+o9jM9YoMQKlZjZ7yO xmoZpEaLBohdpMs0Ebgc1JqIFhJ1cSs= -----END CERTIFICATE-----Generated at Tue Jul 22 19:32:49 2025 by rpki-client