$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20074cc1-0147-3ae4-99ab-511d33ec8edb.roa File: 20074cc1-0147-3ae4-99ab-511d33ec8edb.roa (raw, json) Hash identifier: 4DxS6TK7Qlk9iWzJXbXfN1gd58ZVnO33Hq65PeoWaNA= Subject key identifier: ED:68:FE:E5:54:3C:23:1F:07:AC:C7:AF:6E:3F:0F:44:7F:D4:A9:05 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF4921749FF84D4CAD8360 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20074cc1-0147-3ae4-99ab-511d33ec8edb.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.217.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:49:21:74:9f:f8:4d:4c:ad:83:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=0cd072d6-6ed3-48db-8624-6c496663a07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:44:9f:9c:dd:80:cd:98:f8:96:61:be:53:ce: 44:46:5b:ad:30:1b:d1:82:5a:b5:22:dd:67:08:dd: 53:56:19:d3:32:3a:26:bc:89:55:47:2b:7e:03:17: 95:40:f6:01:29:24:de:c3:0f:62:b0:81:5a:20:8f: a7:3f:9e:c6:7e:be:22:57:63:69:f3:60:b8:0e:c0: 4b:37:b4:13:70:a0:a8:d8:38:c8:c9:f5:e1:a2:5d: a4:5c:a5:2e:98:b4:12:0b:8a:40:f0:b6:75:e8:67: d7:28:c5:11:64:a7:9f:43:f1:d6:11:83:d4:a4:00: bb:31:76:af:98:70:a9:26:5d:b6:92:82:95:95:7b: 1f:08:42:e1:79:45:2f:95:0b:42:c3:69:11:8a:50: ef:11:a8:00:5c:b4:2a:e6:ae:b9:74:ac:62:98:69: 4b:09:52:c9:05:76:6b:03:bd:5e:a3:ec:5f:5c:50: 0d:05:ef:55:8a:52:d1:43:f4:5a:07:64:fc:d4:c9: 75:af:20:ad:c7:6a:df:76:62:53:d3:9b:0b:83:a4: a9:da:36:28:f5:45:ef:0a:3d:ee:f0:db:ec:4a:c7: 77:9e:c7:10:80:68:f5:08:80:58:3c:80:e3:a2:b4: 9c:b1:73:6d:10:7a:15:a9:6b:2c:e1:a6:90:4a:7d: 10:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:68:FE:E5:54:3C:23:1F:07:AC:C7:AF:6E:3F:0F:44:7F:D4:A9:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20074cc1-0147-3ae4-99ab-511d33ec8edb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:0e:0a:28:d2:d3:c8:56:3a:01:a2:ea:2c:8f:61:52:0c:56: 55:63:b2:49:d0:59:98:a0:15:38:43:1f:4a:6b:d9:63:3f:0f: 13:66:ba:5d:de:7c:c6:23:87:3e:13:5e:e7:2c:1c:34:d7:f7: d0:a8:f5:19:b0:3e:7b:9a:98:85:03:fb:c0:b7:6d:42:1c:1a: 45:82:4a:83:82:f1:c9:85:54:1e:dc:0f:20:3a:e4:81:f7:23: 54:ef:24:0a:36:36:0c:49:27:57:6c:28:2a:32:8c:b2:e3:cc: 1e:21:01:8e:14:b8:17:a5:dd:1b:70:3c:b0:2b:e7:f8:52:2b: 0b:70:9f:15:0b:85:d3:bf:fa:92:c2:2c:7a:84:0a:55:50:94: b7:48:8f:83:8f:e1:9e:2d:69:e8:1b:b4:e5:ca:bc:ba:a8:47: 38:d4:a4:50:dc:eb:65:de:0b:27:84:38:6e:65:5a:cf:e1:c9: 20:71:16:01:04:31:1a:cb:4b:32:58:e3:b2:2c:26:40:39:9e: 5e:eb:82:52:86:17:8d:14:f1:e8:8f:19:f9:76:5d:09:25:76: f4:0a:bc:12:b5:eb:b0:b9:28:f8:94:53:b5:e5:21:c5:90:ac: c3:b9:6c:9d:93:59:c5:d5:0c:4e:84:47:98:3e:25:66:d4:1f: f8:a1:27:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0khdJ/4TUytg2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MGNkMDcyZDYtNmVkMy00OGRiLTg2MjQtNmM0OTY2NjNhMDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0SfnN2AzZj4lmG+U85ERlutMBvRglq1It1n CN1TVhnTMjomvIlVRyt+AxeVQPYBKSTeww9isIFaII+nP57Gfr4iV2Np82C4DsBL N7QTcKCo2DjIyfXhol2kXKUumLQSC4pA8LZ16GfXKMURZKefQ/HWEYPUpAC7MXav mHCpJl22koKVlXsfCELheUUvlQtCw2kRilDvEagAXLQq5q65dKximGlLCVLJBXZr A71eo+xfXFANBe9VilLRQ/RaB2T81Ml1ryCtx2rfdmJT05sLg6Sp2jYo9UXvCj3u 8NvsSsd3nscQgGj1CIBYPIDjorScsXNtEHoVqWss4aaQSn0QCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1o/uVUPCMfB6zHr24/D0R/1KkFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjAwNzRjYzEtMDE0Ny0z YWU0LTk5YWItNTExZDMzZWM4ZWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9mMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4OCijS08hWOgGi6iyPYVIMVlVjsknQWZigFThDH0pr2WM/DxNmul3e fMYjhz4TXucsHDTX99Co9RmwPnuamIUD+8C3bUIcGkWCSoOC8cmFVB7cDyA65IH3 I1TvJAo2NgxJJ1dsKCoyjLLjzB4hAY4UuBel3RtwPLAr5/hSKwtwnxULhdO/+pLC LHqEClVQlLdIj4OP4Z4taegbtOXKvLqoRzjUpFDc62XeCyeEOG5lWs/hySBxFgEE MRrLSzJY47IsJkA5nl7rglKGF40U8eiPGfl2XQkldvQKvBK167C5KPiUU7XlIcWQ rMO5bJ2TWcXVDE6ER5g+JWbUH/ihJ0U= -----END CERTIFICATE-----Generated at Sat Apr 26 18:29:49 2025 by rpki-client