$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11584815-af34-3d7d-94d6-0f7eacdd53f2.roa File: 11584815-af34-3d7d-94d6-0f7eacdd53f2.roa (raw, json) Hash identifier: x8tqfzgtpH2wLYZ4kBxcjJ4K1pMdO7n7fDhEUVpoGqw= Subject key identifier: 1A:75:42:29:D1:51:A1:D2:0D:51:1D:DE:06:47:73:C8:1E:01:E2:D0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF49DF6A0127AF2AE9BF0E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11584815-af34-3d7d-94d6-0f7eacdd53f2.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.211.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:9d:f6:a0:12:7a:f2:ae:9b:f0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=3a626830-aebe-464b-8eaf-1bfc11ef4bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4d:b9:d1:b9:29:7c:70:e9:9a:db:8d:e5:4c: c1:9a:9a:ee:09:86:02:c2:aa:02:af:ca:fb:b2:b9: eb:9b:c0:b9:e0:e4:dd:d7:85:0e:55:a4:6e:df:12: 82:54:ff:a5:5c:32:8a:e3:8f:15:0c:5e:3a:fb:78: 0f:04:8b:bb:c1:3b:72:da:e4:64:89:6c:72:56:61: af:d6:9b:ca:b3:29:d6:bd:5e:5a:6e:b6:11:19:fb: 00:68:4c:78:cc:05:8f:c5:ef:0d:cd:6f:b0:ca:30: 68:c9:8e:de:1a:c5:44:a7:ac:8a:86:ef:6a:ef:77: d6:b9:c1:fb:dd:c4:3c:29:43:b1:b7:f6:a5:b2:28: 31:a5:15:c6:eb:50:67:2b:14:bf:46:d8:c8:64:76: a6:5d:71:2f:c3:2a:1f:34:07:85:15:72:79:a0:a9: 33:c6:0a:46:93:39:00:06:ec:d9:02:fd:cf:b9:55: d2:2e:4d:6f:87:66:8d:56:43:91:63:33:c1:76:bb: 0d:2b:26:ad:a7:2e:ec:1f:8f:8d:7d:23:af:30:6c: 43:15:ec:61:4d:bf:0b:c2:5a:0e:01:0c:40:38:5a: 07:65:f7:27:09:17:6e:34:14:d5:a2:c2:6f:8d:ad: 8d:96:fa:e2:46:d4:7e:e4:26:91:ee:39:e5:5d:f1: 13:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:75:42:29:D1:51:A1:D2:0D:51:1D:DE:06:47:73:C8:1E:01:E2:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11584815-af34-3d7d-94d6-0f7eacdd53f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:20:27:b6:c8:f9:ff:39:ff:70:ee:47:80:9f:cd:65:98:50: 16:f6:d7:7a:84:3c:33:3c:bd:f4:65:29:e6:ee:27:81:a3:84: 0c:d9:24:39:82:a0:64:3d:04:4d:95:4a:9d:86:29:14:66:81: 22:61:05:04:73:0d:d2:20:5c:1c:e1:10:14:7b:09:11:6f:00: f9:1a:29:4f:09:a0:9b:1f:7f:1b:30:26:d1:0e:fa:84:49:22: b4:bd:79:8c:f6:e7:ea:60:c2:1e:d7:65:74:b3:45:dc:a7:dc: aa:eb:92:47:4c:b2:5b:a5:84:56:fa:6e:51:dc:64:19:e9:16: d9:c3:09:b9:7f:69:b0:1f:94:26:e3:cb:ab:f5:f5:3c:ed:4e: 6a:a7:3f:31:83:06:84:23:b9:8f:52:b0:f0:7b:50:9d:39:19: d7:d8:35:51:ff:1c:cd:3d:63:14:33:ec:fe:4e:e5:39:06:c8: 51:76:4b:e2:cc:95:f2:ff:d9:19:5e:4a:58:f9:5d:7c:63:4d: 0a:5a:a0:62:61:e4:00:01:fa:7f:ed:35:ad:f7:ec:ac:cc:02: a7:7a:2f:0d:15:3f:1e:6d:79:d8:77:6b:c8:b1:31:f6:d6:81: 5a:e8:2e:03:ef:4b:21:0f:30:58:34:80:5f:ab:06:e6:1c:47: 18:24:4b:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9J32oBJ68q6b8OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk M2E2MjY4MzAtYWViZS00NjRiLThlYWYtMWJmYzExZWY0YmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0250bkpfHDpmtuN5UzBmpruCYYCwqoCr8r7 srnrm8C54OTd14UOVaRu3xKCVP+lXDKK448VDF46+3gPBIu7wTty2uRkiWxyVmGv 1pvKsynWvV5abrYRGfsAaEx4zAWPxe8NzW+wyjBoyY7eGsVEp6yKhu9q73fWucH7 3cQ8KUOxt/alsigxpRXG61BnKxS/RtjIZHamXXEvwyofNAeFFXJ5oKkzxgpGkzkA BuzZAv3PuVXSLk1vh2aNVkORYzPBdrsNKyatpy7sH4+NfSOvMGxDFexhTb8LwloO AQxAOFoHZfcnCRduNBTVosJvja2NlvriRtR+5CaR7jnlXfETjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBp1QinRUaHSDVEd3gZHc8geAeLQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTE1ODQ4MTUtYWYzNC0z ZDdkLTk0ZDYtMGY3ZWFjZGQ1M2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9PpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEogJ7bI+f85/3DuR4CfzWWYUBb213qEPDM8vfRlKebuJ4GjhAzZJDmC oGQ9BE2VSp2GKRRmgSJhBQRzDdIgXBzhEBR7CRFvAPkaKU8JoJsffxswJtEO+oRJ IrS9eYz25+pgwh7XZXSzRdyn3KrrkkdMslulhFb6blHcZBnpFtnDCbl/abAflCbj y6v19TztTmqnPzGDBoQjuY9SsPB7UJ05GdfYNVH/HM09YxQz7P5O5TkGyFF2S+LM lfL/2RleSlj5XXxjTQpaoGJh5AAB+n/tNa337KzMAqd6Lw0VPx5tedh3a8ixMfbW gVroLgPvSyEPMFg0gF+rBuYcRxgkS6g= -----END CERTIFICATE-----Generated at Sat Apr 26 16:04:12 2025 by rpki-client