$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2198942b-5253-34da-9195-9f8d4adcb672.roa File: 2198942b-5253-34da-9195-9f8d4adcb672.roa (raw, json) Hash identifier: ALVoXfcflT4QWSWBFGZXmUhZteXtoLOhJjM6xalzxl0= Subject key identifier: 57:E2:4F:43:79:46:DF:F9:67:7B:45:05:7A:6C:00:CE:03:0D:7D:D6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF42C69DB78FE1C4CCC4C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2198942b-5253-34da-9195-9f8d4adcb672.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.217.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:42:c6:9d:b7:8f:e1:c4:cc:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=82804667-f08d-43a0-8591-29431e62b8bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e8:3d:2b:ad:55:7b:c0:77:24:68:ce:45:92: 30:2a:84:fc:58:ed:98:27:ba:62:ce:b0:b7:5c:c4: 3f:bc:3b:a3:8a:1d:0a:58:a8:84:48:59:29:4e:8f: 82:9a:cb:8a:57:f3:f5:2d:b7:e6:95:89:ac:50:c2: a0:7c:a2:d7:a0:5a:70:c2:f8:a0:c7:4c:f7:42:60: a1:8d:74:5d:1f:c0:5c:be:3b:2d:f3:d5:75:ba:e5: 28:37:2f:7e:61:88:05:eb:c4:1d:d7:25:71:37:8a: 00:b6:28:fe:6e:ec:86:18:fb:1b:d9:18:dd:ad:63: 52:ee:bc:df:6a:c7:ef:3c:9e:36:bd:49:2b:7f:13: 0b:2d:e9:2e:85:ba:ba:42:57:f3:d1:a7:fa:dc:c2: 33:f8:c8:74:78:d0:13:03:cc:e4:26:5a:fd:9c:8b: 1b:cd:d5:91:d3:d6:f3:ea:79:6a:f5:d1:1e:2f:a7: 89:7c:e4:8f:9b:8c:37:cc:e3:6b:01:37:6b:5a:ff: 95:e7:37:52:2f:a5:61:47:62:9b:b9:32:28:d1:86: 87:d0:67:a5:b4:07:cc:b0:99:a0:da:25:57:4c:8a: fd:48:fd:48:13:9d:7b:11:be:b3:be:42:97:a0:bf: c1:2b:67:92:ae:f8:73:2f:f9:d1:0b:07:40:05:f5: ad:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E2:4F:43:79:46:DF:F9:67:7B:45:05:7A:6C:00:CE:03:0D:7D:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2198942b-5253-34da-9195-9f8d4adcb672.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:2b:87:26:0b:bd:30:91:c9:d6:ff:9c:fc:a7:19:5f:9b:f4: 99:69:33:fb:6f:10:2e:4c:70:0d:81:33:08:7e:64:76:dd:5b: be:19:3c:e8:5a:35:ce:d3:86:54:9c:69:6e:87:2c:d6:79:be: ad:4f:10:18:29:8e:6e:a1:f9:4a:91:3c:a8:6f:ee:17:24:e4: 10:2f:87:a8:39:88:92:62:ac:58:67:0b:e5:f9:53:86:2b:8b: c6:f1:5d:04:99:f2:e0:76:e2:b0:c4:cb:ec:e3:57:76:d5:42: 1b:a0:3b:60:91:f3:a1:4d:3f:0c:69:58:41:6e:ac:5a:55:e3: 86:84:e2:fe:16:8f:0a:2b:36:0a:de:95:be:db:a1:c6:8d:de: de:73:b4:2d:52:c7:3e:2e:5d:3d:bb:17:b8:b1:9f:2b:c3:8c: 7e:a9:ae:2b:76:bf:c5:84:4f:38:d3:db:7b:29:e8:c4:d5:0e: 46:ba:8f:03:86:0f:0f:36:ae:a6:5e:b4:f6:02:c4:90:e6:c5: 3c:c7:12:d2:54:3b:2c:dc:de:71:b6:d0:18:3b:8a:ec:74:fa: a0:12:5d:e4:16:cb:a2:fb:c4:f4:57:8f:c1:bd:f1:2b:19:92: 42:a7:eb:d5:54:80:52:05:88:9a:af:d3:7e:27:cf:fc:fc:f7: 4a:f0:16:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0LGnbeP4cTMxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk ODI4MDQ2NjctZjA4ZC00M2EwLTg1OTEtMjk0MzFlNjJiOGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleg9K61Ve8B3JGjORZIwKoT8WO2YJ7pizrC3 XMQ/vDujih0KWKiESFkpTo+CmsuKV/P1LbfmlYmsUMKgfKLXoFpwwvigx0z3QmCh jXRdH8Bcvjst89V1uuUoNy9+YYgF68Qd1yVxN4oAtij+buyGGPsb2RjdrWNS7rzf asfvPJ42vUkrfxMLLekuhbq6Qlfz0af63MIz+Mh0eNATA8zkJlr9nIsbzdWR09bz 6nlq9dEeL6eJfOSPm4w3zONrATdrWv+V5zdSL6VhR2KbuTIo0YaH0GeltAfMsJmg 2iVXTIr9SP1IE517Eb6zvkKXoL/BK2eSrvhzL/nRCwdABfWthQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfiT0N5Rt/5Z3tFBXpsAM4DDX3WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjE5ODk0MmItNTI1My0z NGRhLTkxOTUtOWY4ZDRhZGNiNjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9lsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8rhyYLvTCRydb/nPynGV+b9JlpM/tvEC5McA2BMwh+ZHbdW74ZPOha Nc7ThlScaW6HLNZ5vq1PEBgpjm6h+UqRPKhv7hck5BAvh6g5iJJirFhnC+X5U4Yr i8bxXQSZ8uB24rDEy+zjV3bVQhugO2CR86FNPwxpWEFurFpV44aE4v4WjworNgre lb7bocaN3t5ztC1Sxz4uXT27F7ixnyvDjH6prit2v8WETzjT23sp6MTVDka6jwOG Dw82rqZetPYCxJDmxTzHEtJUOyzc3nG20Bg7iux0+qASXeQWy6L7xPRXj8G98SsZ kkKn69VUgFIFiJqv034nz/z890rwFhE= -----END CERTIFICATE-----Generated at Sat Apr 26 16:13:44 2025 by rpki-client