$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/067c4cf4-ab7c-3506-85c9-c4b92a0c6f1c.roa File: 067c4cf4-ab7c-3506-85c9-c4b92a0c6f1c.roa (raw, json) Hash identifier: y3uF4UuPr7XcKpvxPR4GtEoIvBATYqrZcXwDyXD56rQ= Subject key identifier: F4:35:F4:68:01:5D:B0:19:78:61:29:97:87:70:30:F7:C1:00:86:17 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF49616902DE4E0A4943F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/067c4cf4-ab7c-3506-85c9-c4b92a0c6f1c.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.212.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:96:16:90:2d:e4:e0:a4:94:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=90d31505-58c7-44fb-bbf0-94b1ad147013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:42:59:6c:6a:a8:50:74:3d:64:03:94:4c:54: 53:c3:b9:95:bf:27:c4:df:3a:1a:98:9d:1b:d7:15: fd:51:f5:ab:68:3f:7c:b9:20:3e:c9:ed:40:84:bf: f3:b2:cd:53:32:40:ab:d3:bf:65:89:66:9f:66:c7: b2:eb:a7:5e:a1:c2:40:8e:1e:1f:4e:6f:a5:43:ad: c9:52:45:a6:cc:3e:36:54:ea:0b:cc:c5:48:67:39: 54:14:5f:45:c5:45:74:d9:97:bd:d8:59:03:00:d2: 28:96:c3:89:77:8b:bb:37:6d:91:c2:27:52:14:dd: 4b:86:9b:c3:a3:42:cc:37:a6:62:06:cf:14:d5:95: 6e:34:54:97:29:96:c0:d4:2a:19:e4:60:79:0a:62: 06:05:88:49:bd:f5:a6:18:b0:b5:e8:22:57:a2:5e: e3:a4:b4:02:c4:3e:72:a1:6a:fe:51:83:b9:a6:7a: 8c:d3:0a:61:92:f4:ad:79:9a:31:d0:49:f1:7f:53: 99:10:99:98:c3:c7:55:15:28:e9:ee:b8:11:3a:3b: 0c:11:38:d9:8a:17:20:58:10:3f:72:a0:a9:e5:9b: af:8a:8d:cd:db:75:a6:48:7c:f7:51:92:ed:6d:b0: a9:8b:5d:b0:9d:55:15:99:08:27:c7:1d:d0:7c:b2: 8e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:35:F4:68:01:5D:B0:19:78:61:29:97:87:70:30:F7:C1:00:86:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/067c4cf4-ab7c-3506-85c9-c4b92a0c6f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:93:78:94:60:f6:0d:b1:a4:08:68:42:b3:b4:e2:1c:cf:b2: a5:fc:f6:11:03:8f:76:c4:16:9a:da:ab:8b:aa:d2:63:a4:0c: d9:ad:37:d6:7a:64:88:aa:2a:82:71:ff:93:13:22:f0:bc:db: 2e:50:1b:84:0b:9b:70:bf:a3:7e:af:d6:e6:b2:61:e6:88:f3: b8:67:15:7f:03:30:14:65:59:33:9f:f2:6e:7e:f2:ff:3d:87: af:26:02:e8:96:45:f1:22:cb:70:7e:d7:d8:c8:a8:9c:70:c1: 61:d4:53:b8:4a:68:ce:c3:61:dd:4a:9d:07:d6:a8:60:fb:05: 26:8d:5f:aa:22:5d:28:c5:f7:71:c0:2f:ec:3d:63:05:b4:ea: 0a:2a:0b:22:6e:17:89:58:5b:6b:4f:a3:f4:97:10:bb:49:ad: 12:79:1f:74:78:5d:95:2a:1b:94:f4:6b:88:ec:61:f9:16:69: 6b:fc:a8:fe:20:d6:fd:20:2e:4d:73:55:10:42:c4:29:a5:ae: 8f:c3:d1:6a:89:4f:44:54:41:1e:2c:36:e9:38:17:9a:1f:4c: 8e:ee:08:aa:da:18:1a:b3:d3:c6:49:e1:34:28:82:f9:cf:ea: f0:c1:ae:0c:0a:f0:de:69:14:26:87:9b:a6:ab:89:26:72:e7: 49:84:2b:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JYWkC3k4KSUPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk OTBkMzE1MDUtNThjNy00NGZiLWJiZjAtOTRiMWFkMTQ3MDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEJZbGqoUHQ9ZAOUTFRTw7mVvyfE3zoamJ0b 1xX9UfWraD98uSA+ye1AhL/zss1TMkCr079liWafZsey66deocJAjh4fTm+lQ63J UkWmzD42VOoLzMVIZzlUFF9FxUV02Ze92FkDANIolsOJd4u7N22RwidSFN1LhpvD o0LMN6ZiBs8U1ZVuNFSXKZbA1CoZ5GB5CmIGBYhJvfWmGLC16CJXol7jpLQCxD5y oWr+UYO5pnqM0wphkvSteZox0Enxf1OZEJmYw8dVFSjp7rgROjsMETjZihcgWBA/ cqCp5Zuvio3N23WmSHz3UZLtbbCpi12wnVUVmQgnxx3QfLKOKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQ19GgBXbAZeGEpl4dwMPfBAIYXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDY3YzRjZjQtYWI3Yy0z NTA2LTg1YzktYzRiOTJhMGM2ZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9T7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWTeJRg9g2xpAhoQrO04hzPsqX89hEDj3bEFpraq4uq0mOkDNmtN9Z6 ZIiqKoJx/5MTIvC82y5QG4QLm3C/o36v1uayYeaI87hnFX8DMBRlWTOf8m5+8v89 h68mAuiWRfEiy3B+19jIqJxwwWHUU7hKaM7DYd1KnQfWqGD7BSaNX6oiXSjF93HA L+w9YwW06goqCyJuF4lYW2tPo/SXELtJrRJ5H3R4XZUqG5T0a4jsYfkWaWv8qP4g 1v0gLk1zVRBCxCmlro/D0WqJT0RUQR4sNuk4F5ofTI7uCKraGBqz08ZJ4TQogvnP 6vDBrgwK8N5pFCaHm6ariSZy50mEK+8= -----END CERTIFICATE-----Generated at Sat Apr 26 15:52:24 2025 by rpki-client