$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d2864ea-cc11-3cb8-8758-9df3964b9244.roa File: 1d2864ea-cc11-3cb8-8758-9df3964b9244.roa (raw, json) Hash identifier: e8eY6YD3pTIjBgAi/sxD8hSkYWYlHl6i5VbDx2Mycp8= Subject key identifier: 78:6E:2B:EB:B2:83:3C:67:13:2D:A8:F9:81:A6:4E:A5:44:A8:D3:7C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF4A0B9858EBB11C20FC3D0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d2864ea-cc11-3cb8-8758-9df3964b9244.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.213.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:a0:b9:85:8e:bb:11:c2:0f:c3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=dd604282-d969-4d1a-a888-ff2441e5c3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:71:8a:6c:99:40:c0:89:84:3b:d6:38:e5:4e: 2b:54:eb:5a:e2:e1:1a:90:91:49:f6:2c:42:43:31: 1b:f0:e2:0e:12:69:67:6b:2d:e5:04:60:d4:a3:08: 04:dd:02:d1:68:6d:5a:10:ea:6b:d5:10:1f:b7:fe: 14:db:9e:da:93:ad:2e:ff:78:24:2e:51:eb:0b:3e: c1:5a:88:54:7d:7b:06:de:ac:52:ff:21:73:62:df: 93:9b:ce:a9:06:27:2c:95:bc:05:79:3e:24:e7:3e: 66:28:86:10:27:8a:54:26:f1:8a:f3:29:6c:6d:7f: 69:5a:02:57:d0:01:45:e0:3a:ed:b3:7b:4e:71:5b: cf:77:c2:4b:04:e2:1a:6e:df:87:e1:ef:26:a5:6e: 4a:7c:82:ed:70:4c:4a:8b:84:e1:8d:76:71:f1:93: e9:59:01:3f:5e:fb:29:6c:02:4a:c1:2b:20:d6:77: ef:f8:8e:dc:c7:84:ab:fc:5c:4f:2e:42:aa:e7:ea: 10:65:df:a0:b4:ea:78:42:b2:a9:d6:67:dd:b7:7c: 95:cb:19:f5:5f:3c:0f:2d:b4:7f:96:01:a6:d1:d4: c3:61:bc:b8:80:9a:9e:33:7a:0f:85:45:e2:09:2b: b3:aa:ff:62:0b:bd:a1:fa:10:19:f9:87:a7:02:5d: 88:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6E:2B:EB:B2:83:3C:67:13:2D:A8:F9:81:A6:4E:A5:44:A8:D3:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d2864ea-cc11-3cb8-8758-9df3964b9244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:1b:f4:a0:35:74:f8:3b:56:3f:fc:81:c5:75:47:9f:e5:23: 88:a4:a6:12:83:10:ff:9f:3e:64:08:92:6c:9b:8a:9e:eb:a0: a3:8d:cc:a6:63:8c:2f:97:c4:f8:c0:88:ff:d7:05:42:56:dd: a1:0a:b4:8b:54:f6:ef:5f:4b:10:1c:b0:a0:13:b1:8c:d2:9b: 9d:38:9f:23:72:1a:ee:9f:de:58:5b:81:66:97:4e:69:f0:1e: 07:1a:26:c0:71:37:cb:6c:1c:1f:91:4b:98:24:04:75:46:bd: 89:25:6a:68:20:8b:f1:24:7e:8d:27:77:bb:d5:cb:da:fe:be: 96:d9:f2:71:df:69:f7:e1:a2:47:c1:99:8d:50:b7:51:fd:d9: 93:c5:03:b0:f3:ff:0e:d5:e1:5b:2b:35:df:38:f5:26:cf:4f: eb:55:49:91:7c:67:03:0e:b7:72:f3:05:b3:a8:e2:d0:95:12: 58:7e:c6:47:a4:9b:8b:df:d2:18:78:2e:b5:22:5c:be:78:5b: 2a:76:4d:51:89:0c:6a:53:66:75:6a:52:e3:d7:80:1c:42:8c: 32:ab:64:1c:54:bb:61:37:0f:87:3b:cf:e0:c6:17:85:5c:f1: 05:d5:fc:1d:ba:7d:a0:33:5c:58:16:8d:5d:b0:bb:7a:d4:c5: 4d:71:a0:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9KC5hY67EcIPw9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZGQ2MDQyODItZDk2OS00ZDFhLWE4ODgtZmYyNDQxZTVjM2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHGKbJlAwImEO9Y45U4rVOta4uEakJFJ9ixC QzEb8OIOEmlnay3lBGDUowgE3QLRaG1aEOpr1RAft/4U257ak60u/3gkLlHrCz7B WohUfXsG3qxS/yFzYt+Tm86pBicslbwFeT4k5z5mKIYQJ4pUJvGK8ylsbX9pWgJX 0AFF4Drts3tOcVvPd8JLBOIabt+H4e8mpW5KfILtcExKi4ThjXZx8ZPpWQE/Xvsp bAJKwSsg1nfv+I7cx4Sr/FxPLkKq5+oQZd+gtOp4QrKp1mfdt3yVyxn1XzwPLbR/ lgGm0dTDYby4gJqeM3oPhUXiCSuzqv9iC72h+hAZ+YenAl2ILQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhuK+uygzxnEy2o+YGmTqVEqNN8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWQyODY0ZWEtY2MxMS0z Y2I4LTg3NTgtOWRmMzk2NGI5MjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9WHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkb9KA1dPg7Vj/8gcV1R5/lI4ikphKDEP+fPmQIkmybip7roKONzKZj jC+XxPjAiP/XBUJW3aEKtItU9u9fSxAcsKATsYzSm504nyNyGu6f3lhbgWaXTmnw HgcaJsBxN8tsHB+RS5gkBHVGvYklamggi/Ekfo0nd7vVy9r+vpbZ8nHfaffhokfB mY1Qt1H92ZPFA7Dz/w7V4VsrNd849SbPT+tVSZF8ZwMOt3LzBbOo4tCVElh+xkek m4vf0hh4LrUiXL54Wyp2TVGJDGpTZnVqUuPXgBxCjDKrZBxUu2E3D4c7z+DGF4Vc 8QXV/B26faAzXFgWjV2wu3rUxU1xoLw= -----END CERTIFICATE-----Generated at Sat Apr 26 19:16:15 2025 by rpki-client