$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96c96246-6bf7-3032-89a5-9aec6eb0db9d.roa File: 96c96246-6bf7-3032-89a5-9aec6eb0db9d.roa (raw, json) Hash identifier: Ck17+NATaIer9+IDC1LlaAFixdi1VWr0R1xw1xpHtSA= Subject key identifier: 81:4B:0B:D1:0A:79:E7:EA:7A:58:5C:A2:1A:20:44:37:DA:12:75:57 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A14658BBC7B83E1D7E94CFE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96c96246-6bf7-3032-89a5-9aec6eb0db9d.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.217.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:8b:bc:7b:83:e1:d7:e9:4c:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=ab7ed4f5-c064-4c84-b8e8-6bbce6d8b765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0d:e4:ff:a3:f7:e7:0b:c8:a7:45:87:f5:0f: be:ba:1b:6b:9b:ca:23:27:09:f3:ab:3a:60:7d:77: 20:e2:ad:d0:a1:0b:7a:7a:7f:f5:e1:ff:1b:12:7d: 8f:6f:61:2a:9a:60:18:d5:8e:99:85:70:39:05:5c: c2:d3:da:f7:d3:3b:ce:9e:7d:59:ca:2e:69:6e:ed: f6:49:62:51:24:a2:16:39:b9:60:29:b5:76:0a:42: 5c:a0:56:dd:6a:0d:eb:30:8a:ed:57:94:74:18:20: 0f:b5:d0:6f:1c:0f:a4:cf:b8:31:00:df:9f:34:ed: 25:ed:8c:fb:dc:4d:b2:54:13:43:d0:97:5c:b1:d0: 84:40:3d:1b:67:5c:2b:c0:7f:e8:8f:23:fc:ff:31: 0a:8e:4d:34:e9:7b:ea:27:c0:d6:09:83:1e:d5:64: 01:29:1c:d9:f0:59:20:a2:8c:32:de:14:bb:f8:cf: 83:9e:d7:96:6e:0e:d8:67:6f:71:f2:09:2b:ae:f6: e8:8d:cf:8a:66:d6:b6:f4:ee:57:c7:47:c8:36:26: 6a:ae:6b:80:ea:2a:c4:b1:fd:22:46:fa:ce:71:18: 21:ca:a6:7c:58:59:f4:6c:53:b3:45:ae:a1:99:3b: 96:e2:72:a1:58:8b:18:ea:aa:80:06:13:7b:81:f7: 77:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:4B:0B:D1:0A:79:E7:EA:7A:58:5C:A2:1A:20:44:37:DA:12:75:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96c96246-6bf7-3032-89a5-9aec6eb0db9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:18:26:6f:75:6d:fb:f5:0c:a1:f6:09:c5:19:f6:5b:00:cc: 9a:2b:d2:e7:23:aa:b3:8e:9a:7d:29:32:17:61:27:4b:15:28: 35:34:39:8d:5d:e7:84:16:e7:d6:28:fe:c4:80:44:a1:81:20: b2:04:94:1a:fc:df:90:cf:b6:a4:60:6c:a0:27:db:02:07:ee: e5:22:70:e9:18:aa:2b:d9:2a:be:8e:c4:f6:44:9c:5b:1a:52: 47:dd:f9:8f:67:b8:f8:aa:54:a2:95:67:c8:d2:bd:2c:f0:bd: 8e:0f:67:73:94:ba:b4:03:73:c4:d2:38:2f:9f:1f:a5:a5:35: a5:c5:57:b7:d8:24:be:35:58:9e:ea:cb:a0:93:5f:b4:e4:34: a1:ba:55:3e:21:17:e6:b6:7b:b5:bc:f6:83:5c:4f:52:a3:f8: 6f:66:c2:9a:e0:61:5d:46:ff:02:a2:59:42:34:4f:b3:0b:01: 3c:0a:0b:53:20:32:90:da:38:14:83:4d:fc:e8:d1:bb:b7:5f: 02:d7:59:2a:7d:65:87:44:73:ce:34:a0:8c:f9:91:07:87:61: c5:07:5b:02:b5:4f:d2:b7:77:8b:75:60:3c:ca:87:71:21:22: e7:0a:4b:8c:be:fa:aa:8b:15:2e:fd:32:eb:c4:b0:67:ea:7d: f6:a3:01:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZYu8e4Ph1+lM/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk YWI3ZWQ0ZjUtYzA2NC00Yzg0LWI4ZTgtNmJiY2U2ZDhiNzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA3k/6P35wvIp0WH9Q++uhtrm8ojJwnzqzpg fXcg4q3QoQt6en/14f8bEn2Pb2EqmmAY1Y6ZhXA5BVzC09r30zvOnn1Zyi5pbu32 SWJRJKIWOblgKbV2CkJcoFbdag3rMIrtV5R0GCAPtdBvHA+kz7gxAN+fNO0l7Yz7 3E2yVBND0JdcsdCEQD0bZ1wrwH/ojyP8/zEKjk006XvqJ8DWCYMe1WQBKRzZ8Fkg oowy3hS7+M+DnteWbg7YZ29x8gkrrvbojc+KZta29O5Xx0fINiZqrmuA6irEsf0i RvrOcRghyqZ8WFn0bFOzRa6hmTuW4nKhWIsY6qqABhN7gfd3yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFLC9EKeefqelhcohogRDfaEnVXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTZjOTYyNDYtNmJmNy0z MDMyLTg5YTUtOWFlYzZlYjBkYjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9mLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkYJm91bfv1DKH2CcUZ9lsAzJor0ucjqrOOmn0pMhdhJ0sVKDU0OY1d 54QW59Yo/sSARKGBILIElBr835DPtqRgbKAn2wIH7uUicOkYqivZKr6OxPZEnFsa Ukfd+Y9nuPiqVKKVZ8jSvSzwvY4PZ3OUurQDc8TSOC+fH6WlNaXFV7fYJL41WJ7q y6CTX7TkNKG6VT4hF+a2e7W89oNcT1Kj+G9mwprgYV1G/wKiWUI0T7MLATwKC1Mg MpDaOBSDTfzo0bu3XwLXWSp9ZYdEc840oIz5kQeHYcUHWwK1T9K3d4t1YDzKh3Eh IucKS4y++qqLFS79MuvEsGfqffajAS8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:23:26 2025 by rpki-client