$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d7912ed-bdfa-3f4c-8d81-e989c50e2a8b.roa File: 8d7912ed-bdfa-3f4c-8d81-e989c50e2a8b.roa (raw, json) Hash identifier: yNIJ9n+eDkFgQJl7cbRW2/wHBEwmXpCyq0d5HcD4HhA= Subject key identifier: 7F:C2:4E:5C:9A:8C:1A:E5:DE:07:DD:60:C8:7E:AD:72:D5:97:2F:CC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7A4B5712EE9DA0573FBAD000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d7912ed-bdfa-3f4c-8d81-e989c50e2a8b.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.213.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:57:12:ee:9d:a0:57:3f:ba:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=0a6f3ab1-a156-4944-bb27-1813dac3ad4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:53:44:2a:81:9d:e6:68:71:ec:d5:12:a2:07: dd:e7:47:17:2a:3e:53:57:0d:ea:0b:34:37:af:a9: 43:64:a7:b2:be:e6:2a:8c:39:ed:81:33:ca:ce:5c: 9e:33:76:0f:36:35:10:e7:97:8d:ca:3b:c5:2a:9b: d1:1a:fa:7e:5a:80:f7:2c:38:96:3f:0c:48:75:f4: c2:de:3f:e6:cc:52:27:48:6d:26:f9:6e:10:d3:9a: 47:6c:09:d3:72:16:9d:08:b4:be:68:93:6e:a6:47: f1:84:11:97:c7:db:f6:75:0e:74:11:fe:b0:3c:08: 10:f4:66:17:ac:f0:de:19:12:aa:d7:f9:fe:1f:b8: 92:9f:2d:51:5f:a7:82:aa:bb:ad:11:63:a7:3d:7e: 96:53:0e:90:cf:97:47:3d:ed:8e:d1:bc:e5:ce:ba: 32:cd:51:01:0d:b8:77:6f:7a:eb:9a:d1:2c:59:dd: c2:4e:1c:a9:b5:6b:23:c9:1d:1c:04:de:aa:6f:68: 07:f9:06:b8:7c:ed:e4:be:c5:60:50:56:09:3f:74: 11:6b:50:6d:d8:9e:d2:16:bf:6a:ac:cf:8b:85:26: 9d:f1:1b:53:2a:b0:4f:94:ab:b9:f4:02:48:83:cc: db:bd:37:c2:53:a3:ff:34:26:1a:7e:4c:46:4b:8b: f9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C2:4E:5C:9A:8C:1A:E5:DE:07:DD:60:C8:7E:AD:72:D5:97:2F:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d7912ed-bdfa-3f4c-8d81-e989c50e2a8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:08:16:39:d4:36:b9:45:5e:32:a3:63:8e:79:5c:fd:6a:a7: 94:c3:a3:5a:d2:89:01:d6:d2:48:af:4a:be:ce:0b:30:42:8d: bb:ee:67:ce:38:56:ad:f6:0a:f0:76:9b:bf:1e:7a:7b:09:c1: 19:24:ca:34:a9:51:fb:ec:c3:3a:ef:f0:9c:f2:32:bc:5a:e3: 76:d9:11:45:35:69:4e:a8:42:ac:f2:af:1a:2b:49:09:53:7a: ca:73:a1:fc:73:f0:a4:8d:a7:14:e2:a2:f4:7d:b9:82:5b:ca: 77:0f:0b:c6:c3:12:36:c5:b6:0b:f3:cc:85:1a:5e:b5:a2:e6: 60:ab:58:3c:d6:99:57:ac:d4:cd:0a:e4:c4:38:cb:da:94:0d: c1:a3:95:a6:fe:bf:af:85:69:70:10:a9:02:cc:6f:a4:77:fd: a9:fd:97:b1:60:af:3a:96:8d:c5:3f:38:ac:08:c9:41:43:2a: 4a:27:96:e1:be:9e:22:bf:8a:41:c7:a7:73:25:42:ea:89:26: bb:33:4a:c4:5c:2f:bf:24:d6:21:8e:0a:49:f9:67:ca:bc:ec: 57:50:4e:57:ba:62:72:aa:8c:c3:06:84:46:23:cc:39:b2:c9: 92:fb:0e:3b:03:05:37:bc:4a:73:2b:39:f1:8a:91:f9:c3:5d: 15:08:2f:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S1cS7p2gVz+60AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk MGE2ZjNhYjEtYTE1Ni00OTQ0LWJiMjctMTgxM2RhYzNhZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFNEKoGd5mhx7NUSogfd50cXKj5TVw3qCzQ3 r6lDZKeyvuYqjDntgTPKzlyeM3YPNjUQ55eNyjvFKpvRGvp+WoD3LDiWPwxIdfTC 3j/mzFInSG0m+W4Q05pHbAnTchadCLS+aJNupkfxhBGXx9v2dQ50Ef6wPAgQ9GYX rPDeGRKq1/n+H7iSny1RX6eCqrutEWOnPX6WUw6Qz5dHPe2O0bzlzroyzVEBDbh3 b3rrmtEsWd3CThyptWsjyR0cBN6qb2gH+Qa4fO3kvsVgUFYJP3QRa1Bt2J7SFr9q rM+LhSad8RtTKrBPlKu59AJIg8zbvTfCU6P/NCYafkxGS4v5JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/CTlyajBrl3gfdYMh+rXLVly/MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGQ3OTEyZWQtYmRmYS0z ZjRjLThkODEtZTk4OWM1MGUyYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9XzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgIFjnUNrlFXjKjY455XP1qp5TDo1rSiQHW0kivSr7OCzBCjbvuZ844 Vq32CvB2m78eensJwRkkyjSpUfvswzrv8JzyMrxa43bZEUU1aU6oQqzyrxorSQlT espzofxz8KSNpxTiovR9uYJbyncPC8bDEjbFtgvzzIUaXrWi5mCrWDzWmVes1M0K 5MQ4y9qUDcGjlab+v6+FaXAQqQLMb6R3/an9l7FgrzqWjcU/OKwIyUFDKkonluG+ niK/ikHHp3MlQuqJJrszSsRcL78k1iGOCkn5Z8q87FdQTle6YnKqjMMGhEYjzDmy yZL7DjsDBTe8SnMrOfGKkfnDXRUIL74= -----END CERTIFICATE-----Generated at Wed Jul 23 01:36:03 2025 by rpki-client