$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d7ade67-82b3-3174-8f2c-6ff9e873bdc0.roa File: 0d7ade67-82b3-3174-8f2c-6ff9e873bdc0.roa (raw, json) Hash identifier: 9on/6EIsqFQA8sq3eYE7nZ7uC+mcEPoImbfAwzWcf/Y= Subject key identifier: 44:32:0B:D2:A1:0D:9D:F5:68:D4:F8:99:04:C0:AC:63:87:EB:1F:45 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF4975444102437E4CFF300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d7ade67-82b3-3174-8f2c-6ff9e873bdc0.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.213.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:97:54:44:10:24:37:e4:cf:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=37526b47-4148-4ea8-8226-9a44e774c935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:37:fc:c0:18:42:7d:36:2e:46:7e:fc:ec:49: 8c:03:06:71:5a:e4:59:db:8d:73:e5:01:f6:fb:53: c1:e7:84:72:8f:cf:60:85:ba:da:e8:c2:66:9f:83: cf:fa:cf:f3:b2:d3:ee:dc:51:5f:fd:b5:6e:4a:90: 3f:c2:1b:ea:d5:5c:04:49:a5:b8:c1:a4:8a:4f:45: 10:15:1b:a1:94:d2:0b:bf:9b:36:01:c7:ba:04:3b: 53:3b:4a:4b:c3:a0:40:cc:86:4c:e6:8c:ee:c9:99: 49:1c:74:32:ca:aa:5c:e0:39:97:e7:d8:0d:0b:0c: b4:c2:7d:83:16:95:63:96:37:a0:4f:84:9a:8d:5f: 00:c5:a9:66:44:b4:ba:0d:34:f3:dd:93:6e:f3:3e: f6:7d:0e:26:d2:3f:be:ee:1c:6b:ea:2f:87:46:d7: 8e:5a:a4:69:2b:38:80:86:0a:cb:3f:61:43:4a:a9: 5e:a5:11:11:66:4b:22:ab:90:32:ab:b3:cb:58:df: 5c:df:ff:2e:2d:10:01:f0:1b:0f:a5:ec:df:02:d5: e3:71:69:3c:83:84:59:e5:9b:ca:d2:55:53:f0:8b: e3:4f:b1:05:b2:d8:4c:82:22:1a:ca:3b:8d:a9:4b: 16:22:1c:cd:65:03:cc:86:fe:60:15:6d:38:bc:4b: 54:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:32:0B:D2:A1:0D:9D:F5:68:D4:F8:99:04:C0:AC:63:87:EB:1F:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d7ade67-82b3-3174-8f2c-6ff9e873bdc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:b6:63:50:f0:72:df:0b:8d:74:33:2c:c3:9c:f6:32:b6:dd: 20:9a:50:2c:5a:24:b1:20:05:0b:3f:d2:07:33:c5:60:09:c5: 15:fc:24:2b:fa:d9:ed:83:79:66:97:d8:a7:3e:96:21:4c:50: 6e:be:b3:45:2b:e6:63:6f:02:de:a9:61:6d:c8:48:06:ae:16: ed:fd:5e:9f:32:07:27:78:30:49:c8:44:6c:d8:c0:3b:61:25: da:ca:87:2f:a2:ed:6a:ae:ac:86:d9:f6:3c:51:5c:6a:64:c1: 3b:2e:13:60:1c:13:01:b1:f9:ab:a4:18:04:57:d1:29:26:6f: 74:85:de:cf:61:a7:7a:9c:12:fd:3c:14:9a:1b:b0:24:2b:72: 7f:ce:c9:31:3c:70:53:12:5f:19:1a:2d:2e:32:c2:60:38:2b: a1:8f:a4:9a:6f:d5:49:04:b4:d1:8d:2d:b9:a1:5e:15:1f:d0: 89:a3:8a:e5:5d:64:b1:1f:d8:09:d8:31:83:1a:5f:f7:cb:1f: 0b:21:ec:da:5a:3a:6c:0f:2b:68:1d:89:aa:95:14:68:dc:1f: 24:9d:3a:6d:88:65:b7:1d:49:27:97:a3:73:4e:ef:28:e6:73: 84:72:87:d4:95:84:e5:68:b6:7a:fb:23:56:b5:b0:00:f9:24: 6b:3b:10:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JdURBAkN+TP8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk Mzc1MjZiNDctNDE0OC00ZWE4LTgyMjYtOWE0NGU3NzRjOTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDf8wBhCfTYuRn787EmMAwZxWuRZ241z5QH2 +1PB54Ryj89ghbra6MJmn4PP+s/zstPu3FFf/bVuSpA/whvq1VwESaW4waSKT0UQ FRuhlNILv5s2Ace6BDtTO0pLw6BAzIZM5ozuyZlJHHQyyqpc4DmX59gNCwy0wn2D FpVjljegT4SajV8AxalmRLS6DTTz3ZNu8z72fQ4m0j++7hxr6i+HRteOWqRpKziA hgrLP2FDSqlepRERZksiq5Ayq7PLWN9c3/8uLRAB8BsPpezfAtXjcWk8g4RZ5ZvK 0lVT8IvjT7EFsthMgiIayjuNqUsWIhzNZQPMhv5gFW04vEtUmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQyC9KhDZ31aNT4mQTArGOH6x9FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGQ3YWRlNjctODJiMy0z MTc0LThmMmMtNmZmOWU4NzNiZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9U1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAK2Y1Dwct8LjXQzLMOc9jK23SCaUCxaJLEgBQs/0gczxWAJxRX8JCv6 2e2DeWaX2Kc+liFMUG6+s0Ur5mNvAt6pYW3ISAauFu39Xp8yByd4MEnIRGzYwDth JdrKhy+i7WqurIbZ9jxRXGpkwTsuE2AcEwGx+aukGARX0Skmb3SF3s9hp3qcEv08 FJobsCQrcn/OyTE8cFMSXxkaLS4ywmA4K6GPpJpv1UkEtNGNLbmhXhUf0ImjiuVd ZLEf2AnYMYMaX/fLHwsh7NpaOmwPK2gdiaqVFGjcHySdOm2IZbcdSSeXo3NO7yjm c4Ryh9SVhOVotnr7I1a1sAD5JGs7EPk= -----END CERTIFICATE-----Generated at Sat Apr 26 19:52:37 2025 by rpki-client