$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ba3b7a1-2548-33ec-b31e-3657e86a0ce4.roa File: 8ba3b7a1-2548-33ec-b31e-3657e86a0ce4.roa (raw, json) Hash identifier: TdcC7svnO/COn4kL7llb7jebhoRpJYF3MPz1l5E7ijY= Subject key identifier: 98:D6:EE:6C:87:FD:D2:E7:C4:6E:19:E6:7E:1A:AB:C4:4B:9E:D6:1F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A90A0EE78F249D19DEEF9D000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ba3b7a1-2548-33ec-b31e-3657e86a0ce4.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 16625 IP address blocks: 23.39.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ee:78:f2:49:d1:9d:ee:f9:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=4dc444d8-755e-438e-8ce8-eac7fcd042c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f3:ff:a8:b5:e3:90:48:04:ba:26:54:a3:47: 7f:45:a7:a5:3e:20:4a:a2:4d:b1:5a:60:36:9b:d7: 1f:05:eb:48:0d:3e:00:59:05:7f:47:60:3d:29:5c: ae:e1:0f:b4:16:a2:34:13:94:5f:28:8e:54:0b:4c: 2b:fc:9e:13:fb:37:5f:c8:c9:f7:71:31:6b:85:e2: f9:8a:ed:f9:8b:48:18:2c:18:36:38:d4:70:2e:4c: 08:23:0e:01:e1:03:df:d3:21:36:15:d6:d2:68:ab: 98:f6:2b:8c:a9:76:67:1a:68:ea:9a:44:77:01:48: 74:05:b7:de:ee:b7:8a:00:41:ce:b5:6b:a3:59:5e: f2:e0:18:d8:23:76:d5:64:2a:6b:c7:cd:ec:19:0f: 0c:1a:9c:49:52:07:c7:e3:b3:ce:b3:91:b8:d1:fb: 78:27:b8:55:b3:1b:df:8f:5b:b4:9a:9d:ed:0c:ca: f4:55:80:5d:2e:f9:a6:43:c3:73:9e:c7:1d:38:f7: aa:ff:42:4b:27:2b:6a:60:64:e5:da:96:37:6c:4e: 90:da:82:fb:b8:9c:04:b5:48:ef:53:ba:c1:1f:56: 57:67:66:71:f1:82:a6:5e:54:9b:c3:2e:30:50:72: a5:aa:b4:93:f7:d4:77:68:05:2c:49:75:77:cc:04: a1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D6:EE:6C:87:FD:D2:E7:C4:6E:19:E6:7E:1A:AB:C4:4B:9E:D6:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ba3b7a1-2548-33ec-b31e-3657e86a0ce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:23:12:29:0b:a8:2e:30:e7:f5:27:d2:3c:8b:da:ba:a7:b9: 79:d1:3e:9c:16:0b:c0:e3:7d:b9:80:96:f7:68:38:2d:8b:84: 39:53:9d:9d:b9:44:76:52:84:fc:34:a9:d8:f1:29:64:0a:e8: 91:d9:a9:2a:f4:4f:bd:41:cd:8e:f5:48:f0:61:66:c6:8a:e7: 23:95:6f:b8:9a:1b:9f:f7:68:e1:62:4b:d8:65:c4:5a:93:7b: d4:b2:ee:71:21:f9:31:03:b5:d1:ca:78:58:33:89:a0:6b:9d: 19:e9:93:15:b2:c8:73:ad:b2:90:1b:4e:be:35:3f:e3:dd:f7: 91:b3:fb:74:65:8a:5a:99:18:74:77:84:26:23:6c:9d:f4:7b: db:b1:19:02:f8:f2:ac:b4:80:e5:fa:eb:7e:9c:1e:6b:f9:3d: 53:40:dd:18:98:2e:fd:fa:74:19:a2:9c:d4:91:fc:ae:9a:ec: 23:25:5b:b7:54:87:08:85:9f:51:28:f4:46:e0:fa:53:df:7b: da:b2:9e:c6:49:0f:97:98:93:63:81:68:07:bc:75:c7:66:3c: a4:9b:9d:56:3f:5a:a0:6a:df:fc:ff:db:2b:df:48:55:4e:52: f5:4a:af:c1:25:48:27:2b:3a:69:90:83:7d:c6:f1:cc:b4:5a: 6c:27:9b:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoO548knRne750AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NGRjNDQ0ZDgtNzU1ZS00MzhlLThjZTgtZWFjN2ZjZDA0MmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fP/qLXjkEgEuiZUo0d/RaelPiBKok2xWmA2 m9cfBetIDT4AWQV/R2A9KVyu4Q+0FqI0E5RfKI5UC0wr/J4T+zdfyMn3cTFrheL5 iu35i0gYLBg2ONRwLkwIIw4B4QPf0yE2FdbSaKuY9iuMqXZnGmjqmkR3AUh0Bbfe 7reKAEHOtWujWV7y4BjYI3bVZCprx83sGQ8MGpxJUgfH47POs5G40ft4J7hVsxvf j1u0mp3tDMr0VYBdLvmmQ8NznscdOPeq/0JLJytqYGTl2pY3bE6Q2oL7uJwEtUjv U7rBH1ZXZ2Zx8YKmXlSbwy4wUHKlqrST99R3aAUsSXV3zAShAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjW7myH/dLnxG4Z5n4aq8RLntYfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGJhM2I3YTEtMjU0OC0z M2VjLWIzMWUtMzY1N2U4NmEwY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYjEikLqC4w5/Un0jyL2rqnuXnRPpwWC8DjfbmAlvdoOC2LhDlTnZ25 RHZShPw0qdjxKWQK6JHZqSr0T71BzY71SPBhZsaK5yOVb7iaG5/3aOFiS9hlxFqT e9Sy7nEh+TEDtdHKeFgziaBrnRnpkxWyyHOtspAbTr41P+Pd95Gz+3RlilqZGHR3 hCYjbJ30e9uxGQL48qy0gOX6636cHmv5PVNA3RiYLv36dBminNSR/K6a7CMlW7dU hwiFn1Eo9Ebg+lPfe9qynsZJD5eYk2OBaAe8dcdmPKSbnVY/WqBq3/z/2yvfSFVO UvVKr8ElSCcrOmmQg33G8cy0Wmwnm0o= -----END CERTIFICATE-----Generated at Wed Jul 23 01:29:32 2025 by rpki-client