$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/017358b3-68c3-3e85-b0ac-aa621b129bb7.roa File: 017358b3-68c3-3e85-b0ac-aa621b129bb7.roa (raw, json) Hash identifier: dG/EI+M/d7qIi6cvJ0emwEJPqx//aHw6PmkWEuJmZfc= Subject key identifier: BE:0C:8E:43:C0:23:F0:E6:62:40:02:F7:17:75:5F:C9:D9:2C:A8:0B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF48F84DA64EA451CBCE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/017358b3-68c3-3e85-b0ac-aa621b129bb7.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.217.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:48:f8:4d:a6:4e:a4:51:cb:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=8eab4327-ade8-44c7-bdad-abee8192b88b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:84:de:d3:7d:b2:99:dd:c6:43:77:1a:ff:d1: f5:bc:18:42:84:14:f7:93:b8:4e:0d:dd:39:0b:70: 8e:19:76:84:e7:1c:c9:b7:81:3d:af:7c:da:09:37: b0:f3:74:1f:4a:73:0e:e4:c0:de:ee:57:c9:36:ee: fc:3e:6d:02:ff:92:64:49:02:98:6b:05:6d:0b:60: 30:29:f0:83:92:4b:53:b0:d3:5c:24:4b:95:3b:26: 7d:47:42:8f:6d:a5:09:9d:5e:95:2f:32:d6:e3:6d: fc:53:67:8f:f7:65:45:cd:2a:c6:e8:2d:b3:eb:68: a7:5f:0d:50:b4:76:98:ad:d8:6a:14:16:15:44:f1: 33:8c:ca:50:50:0c:93:5d:fc:fa:45:ac:90:b2:2c: 37:02:92:64:11:a4:fa:2c:d3:0e:9a:35:41:41:22: 12:48:4d:ee:75:a9:06:03:00:48:ee:44:39:df:4f: 22:6e:83:10:db:73:35:11:cd:90:80:00:1a:63:e3: 80:22:b8:2c:0d:9b:ed:3f:d6:59:86:bc:2e:2e:3e: 07:24:22:ac:d7:d7:53:e3:f8:3d:93:fa:72:85:02: 96:71:79:52:0e:8e:0f:61:3d:2d:b4:3f:c9:ec:d6: 85:46:39:72:8f:07:14:6c:64:eb:ab:80:4a:d4:20: 4b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0C:8E:43:C0:23:F0:E6:62:40:02:F7:17:75:5F:C9:D9:2C:A8:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/017358b3-68c3-3e85-b0ac-aa621b129bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:1c:b6:2f:dc:36:5c:7e:63:ce:c7:e6:22:0d:9f:41:91:29: 36:75:14:0c:71:b0:e7:c3:5d:68:fc:d2:90:48:47:d5:e6:df: cc:fb:1f:ba:45:82:06:16:1e:31:9e:39:7d:38:5a:51:ee:50: 8e:42:ed:a0:d3:72:4b:8f:33:44:90:2a:72:4e:34:ef:a1:dd: dd:85:f0:86:4e:ba:70:3b:00:f7:21:70:e5:37:2d:33:6f:6b: 0c:59:0c:63:e7:77:6a:82:73:c3:97:50:d4:dc:3b:a9:dd:06: f3:b7:57:d5:b0:de:d8:dd:a2:28:f2:3d:23:bf:dc:73:c7:21: 77:1a:d5:bf:25:df:fd:39:33:d8:13:fe:21:55:eb:82:6a:ac: c6:f6:73:e5:c3:4b:37:c3:9e:70:f7:ba:00:9d:4c:4f:38:00: 06:06:45:7e:26:a6:7e:f2:60:13:78:31:65:4b:8f:30:e5:a6: ac:42:91:e4:3c:e0:fd:05:7f:fb:4d:2b:75:1f:31:75:32:e7: 57:fd:e1:da:1c:2b:a8:71:ff:96:74:8a:ae:16:d9:71:60:44: f8:ed:66:52:f0:07:a3:fc:8f:1a:22:2a:88:d8:73:f0:69:ba: 7d:8e:7f:ac:36:63:bb:61:2f:e9:fc:22:1d:ac:3c:4a:d5:bc: 61:ea:bf:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0j4TaZOpFHLzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk OGVhYjQzMjctYWRlOC00NGM3LWJkYWQtYWJlZTgxOTJiODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYTe032ymd3GQ3ca/9H1vBhChBT3k7hODd05 C3COGXaE5xzJt4E9r3zaCTew83QfSnMO5MDe7lfJNu78Pm0C/5JkSQKYawVtC2Aw KfCDkktTsNNcJEuVOyZ9R0KPbaUJnV6VLzLW4238U2eP92VFzSrG6C2z62inXw1Q tHaYrdhqFBYVRPEzjMpQUAyTXfz6RayQsiw3ApJkEaT6LNMOmjVBQSISSE3udakG AwBI7kQ5308iboMQ23M1Ec2QgAAaY+OAIrgsDZvtP9ZZhrwuLj4HJCKs19dT4/g9 k/pyhQKWcXlSDo4PYT0ttD/J7NaFRjlyjwcUbGTrq4BK1CBLWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4MjkPAI/DmYkAC9xd1X8nZLKgLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDE3MzU4YjMtNjhjMy0z ZTg1LWIwYWMtYWE2MjFiMTI5YmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9l4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwcti/cNlx+Y87H5iINn0GRKTZ1FAxxsOfDXWj80pBIR9Xm38z7H7pF ggYWHjGeOX04WlHuUI5C7aDTckuPM0SQKnJONO+h3d2F8IZOunA7APchcOU3LTNv awxZDGPnd2qCc8OXUNTcO6ndBvO3V9Ww3tjdoijyPSO/3HPHIXca1b8l3/05M9gT /iFV64JqrMb2c+XDSzfDnnD3ugCdTE84AAYGRX4mpn7yYBN4MWVLjzDlpqxCkeQ8 4P0Ff/tNK3UfMXUy51f94docK6hx/5Z0iq4W2XFgRPjtZlLwB6P8jxoiKojYc/Bp un2Of6w2Y7thL+n8Ih2sPErVvGHqvw4= -----END CERTIFICATE-----Generated at Sat Apr 26 16:00:53 2025 by rpki-client