$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21809af4-fa91-333f-9b5e-dd6512a58959.roa File: 21809af4-fa91-333f-9b5e-dd6512a58959.roa (raw, json) Hash identifier: mDaxh3w8FCsKlmpgp+Cp3eWHEz4W2ujpvpiTkpjuCSI= Subject key identifier: B6:A0:39:90:77:60:9C:95:4C:B3:5B:A7:A6:76:8B:8F:F2:96:58:19 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849088168EA1531438F8E2364C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21809af4-fa91-333f-9b5e-dd6512a58959.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 35994 IP address blocks: 23.73.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:68:ea:15:31:43:8f:8e:23:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=e97699c2-2392-4118-b237-eff909a45c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ab:6c:e1:da:78:b4:c5:95:af:54:09:28:78: 8a:2e:0c:c7:2c:77:f8:4e:ff:a2:15:93:5d:26:e7: 66:77:75:85:6b:43:58:26:8c:60:2c:07:f5:7f:25: 53:c1:e3:f7:db:ad:73:e9:b8:63:62:0b:00:4e:83: 42:f7:00:60:d0:39:7c:54:da:e8:55:70:71:ec:0c: 7b:4a:53:b8:38:78:eb:50:9d:2e:8e:90:bb:41:5e: 53:7c:a9:0a:74:ef:c1:1c:4a:ae:c3:d6:2d:27:ca: 23:42:7e:3c:4e:51:bd:10:9b:4e:ce:4d:9a:48:f4: 53:1c:40:f9:d6:c4:7e:a5:78:c3:b9:93:0d:46:04: 5a:5c:84:b8:86:93:3f:a4:4f:9a:c4:87:b5:fb:58: 09:37:28:1b:5f:c6:d0:70:f6:07:56:bb:19:f2:47: c7:e4:48:05:e5:6f:9f:50:f1:78:36:0a:01:b5:6f: f3:de:f0:89:66:0d:3e:64:2a:22:a3:20:1c:7a:b8: 95:e5:86:a4:75:57:be:8e:bd:38:be:d0:36:8d:51: f7:eb:64:2d:ce:23:95:79:d6:5f:c7:b0:c4:4b:26: 39:9e:56:14:00:02:8c:c4:67:7c:e1:27:b7:c9:df: ba:53:4a:37:29:9f:3c:ce:9b:c6:19:9a:70:86:97: 47:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A0:39:90:77:60:9C:95:4C:B3:5B:A7:A6:76:8B:8F:F2:96:58:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21809af4-fa91-333f-9b5e-dd6512a58959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.73.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:4a:92:e4:53:9d:08:6b:08:09:c4:66:11:46:8a:4d:d0:cc: 27:47:d4:56:ca:8a:24:85:62:6e:df:16:6d:6d:a1:04:ea:1c: c0:0c:94:0d:29:b5:59:23:5b:f7:6c:7a:00:f4:95:54:e8:53: 28:0c:90:ec:58:ab:33:d5:3e:8d:63:49:71:23:04:ce:53:fc: f4:99:69:ff:1a:52:ea:22:21:17:48:86:83:f1:de:77:07:25: b5:16:08:b0:a0:ed:9b:09:c7:a4:e6:f3:72:b2:c8:b7:4a:07: f9:94:94:69:56:d1:8a:1f:1a:d7:6a:41:c7:d0:8d:31:20:ec: 36:97:47:33:6f:ad:2f:69:8d:07:60:d5:15:bd:dc:d8:38:71: 88:17:33:01:9a:69:17:4a:08:8b:2a:7b:59:f2:5d:1b:c6:d1: ee:a8:e9:08:40:1a:55:e9:c5:5f:86:93:a5:5f:26:19:55:67: ba:db:9f:fb:ec:61:3d:15:15:1a:58:cb:00:82:9f:79:0a:ba: 54:68:d5:f9:48:25:58:05:15:f1:78:86:39:24:b0:ff:b3:0d: 9c:28:1a:69:66:6d:ea:82:2d:83:de:78:e7:ae:66:30:11:23: b4:b0:09:28:2d:97:53:67:de:17:7d:66:55:f2:79:cb:53:db: 60:ab:f3:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgWjqFTFDj44jZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk ZTk3Njk5YzItMjM5Mi00MTE4LWIyMzctZWZmOTA5YTQ1YzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKts4dp4tMWVr1QJKHiKLgzHLHf4Tv+iFZNd Judmd3WFa0NYJoxgLAf1fyVTweP3261z6bhjYgsAToNC9wBg0Dl8VNroVXBx7Ax7 SlO4OHjrUJ0ujpC7QV5TfKkKdO/BHEquw9YtJ8ojQn48TlG9EJtOzk2aSPRTHED5 1sR+pXjDuZMNRgRaXIS4hpM/pE+axIe1+1gJNygbX8bQcPYHVrsZ8kfH5EgF5W+f UPF4NgoBtW/z3vCJZg0+ZCoioyAceriV5YakdVe+jr04vtA2jVH362QtziOVedZf x7DESyY5nlYUAAKMxGd84Se3yd+6U0o3KZ88zpvGGZpwhpdHewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLagOZB3YJyVTLNbp6Z2i4/yllgZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjE4MDlhZjQtZmE5MS0z MzNmLTliNWUtZGQ2NTEyYTU4OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0nUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5KkuRTnQhrCAnEZhFGik3QzCdH1FbKiiSFYm7fFm1toQTqHMAMlA0p tVkjW/dsegD0lVToUygMkOxYqzPVPo1jSXEjBM5T/PSZaf8aUuoiIRdIhoPx3ncH JbUWCLCg7ZsJx6Tm83KyyLdKB/mUlGlW0YofGtdqQcfQjTEg7DaXRzNvrS9pjQdg 1RW93Ng4cYgXMwGaaRdKCIsqe1nyXRvG0e6o6QhAGlXpxV+Gk6VfJhlVZ7rbn/vs YT0VFRpYywCCn3kKulRo1flIJVgFFfF4hjkksP+zDZwoGmlmbeqCLYPeeOeuZjAR I7SwCSgtl1Nn3hd9ZlXyectT22Cr8w0= -----END CERTIFICATE-----Generated at Sat Apr 26 22:16:22 2025 by rpki-client