$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/243c2121-9527-32f8-8657-ae22867f3928.roa File: 243c2121-9527-32f8-8657-ae22867f3928.roa (raw, json) Hash identifier: sonkqkyJKgNE1n9GoPGI0aVtBc0RrO53GlRZFmsIzlA= Subject key identifier: 3C:9E:5F:8A:5A:29:12:7E:1B:99:BB:AB:FA:FB:A9:8C:54:DD:6A:51 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF48E29499FBF7DAE7E1A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/243c2121-9527-32f8-8657-ae22867f3928.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 16625 IP address blocks: 23.217.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:48:e2:94:99:fb:f7:da:e7:e1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=bb9aa9ec-3c36-40e5-9a72-f1d72a7cbfe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2c:b4:eb:5c:fe:5e:64:23:85:ab:d0:5d:f6: 42:0a:13:63:19:5f:10:8a:80:47:eb:77:a3:5c:f6: 33:07:2d:3b:c8:0e:01:32:83:d3:bb:a6:93:9a:c7: ee:ed:92:8a:85:f5:23:d2:4b:40:f6:65:64:27:05: b5:c8:6f:55:38:86:67:f1:0b:79:e8:7a:e7:87:19: c3:ee:82:e3:e0:b1:40:3f:5b:03:78:7b:ca:b4:f2: 28:0f:fb:56:71:5e:d7:48:98:c2:d6:20:a8:03:52: 71:2f:0c:aa:f9:f1:89:4a:f5:44:d8:70:29:99:cc: a5:a8:c8:0c:b3:10:38:e5:54:10:5e:b5:08:0f:12: be:43:a5:a5:27:f3:a6:71:33:ea:c4:ac:cd:4e:ed: 61:bf:f8:ae:57:2e:a7:05:6d:5f:02:94:f6:47:a0: 84:70:0b:68:b1:68:37:c9:d9:51:0a:b9:61:fe:89: 6b:ff:74:ec:2f:5c:a7:58:d1:2c:4b:31:c7:af:97: 0d:a4:00:de:aa:25:66:52:bd:23:2e:4d:41:3a:20: 88:92:02:70:39:16:35:54:da:d0:65:4e:73:68:5b: 6e:ee:4f:b2:69:bc:8b:73:4b:8f:f6:6c:27:13:ef: 47:b2:9e:b3:51:43:bc:d1:f0:f8:72:7c:56:6a:7e: 3e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9E:5F:8A:5A:29:12:7E:1B:99:BB:AB:FA:FB:A9:8C:54:DD:6A:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/243c2121-9527-32f8-8657-ae22867f3928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:2e:59:07:fc:7c:31:06:a6:3f:99:2f:91:42:c8:4c:26:f1: 4e:6e:45:9c:17:e0:7d:6a:88:42:d9:5f:d4:e3:b6:65:54:1a: e5:4a:e2:3c:7c:e8:76:cc:7e:a6:fa:c9:9c:6d:d7:0a:5c:37: f3:dd:29:a2:a4:f7:59:54:6b:c5:2e:72:5b:69:46:bd:04:ec: 0e:94:fe:cd:dc:eb:eb:97:97:56:05:05:e8:61:13:94:4a:9f: 03:b2:2b:8f:5b:e5:88:14:80:fd:e0:99:3c:d8:6b:e8:95:cd: a5:c9:43:18:6e:5d:23:29:86:5e:07:61:f5:7d:49:eb:12:fd: 50:6c:45:d4:41:68:c2:e3:0e:36:4a:9d:1c:2f:e3:93:d3:f2: 74:d3:37:b3:89:c7:e4:3c:0a:94:98:ad:70:62:60:03:27:e5: 36:87:9d:4e:b2:f4:73:3c:a0:71:d4:3a:ab:fc:2f:a1:a6:09: 37:07:d0:41:d6:be:54:2a:7b:f6:e0:39:7f:45:d3:c2:1f:2d: 36:53:ec:f7:e0:e5:98:91:f8:70:79:bb:8c:0a:e3:57:d2:50: dd:d5:7f:66:bf:f9:f4:88:4a:e6:cf:a6:c8:4c:d0:2f:84:c1: ba:63:9d:c0:7b:d5:6c:d0:aa:fa:5a:4f:82:12:f0:9f:99:95: 18:73:80:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0jilJn799rn4aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk YmI5YWE5ZWMtM2MzNi00MGU1LTlhNzItZjFkNzJhN2NiZmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiy061z+XmQjhavQXfZCChNjGV8QioBH63ej XPYzBy07yA4BMoPTu6aTmsfu7ZKKhfUj0ktA9mVkJwW1yG9VOIZn8Qt56HrnhxnD 7oLj4LFAP1sDeHvKtPIoD/tWcV7XSJjC1iCoA1JxLwyq+fGJSvVE2HApmcylqMgM sxA45VQQXrUIDxK+Q6WlJ/OmcTPqxKzNTu1hv/iuVy6nBW1fApT2R6CEcAtosWg3 ydlRCrlh/olr/3TsL1ynWNEsSzHHr5cNpADeqiVmUr0jLk1BOiCIkgJwORY1VNrQ ZU5zaFtu7k+yabyLc0uP9mwnE+9Hsp6zUUO80fD4cnxWan4+jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyeX4paKRJ+G5m7q/r7qYxU3WpRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjQzYzIxMjEtOTUyNy0z MmY4LTg2NTctYWUyMjg2N2YzOTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9lwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8uWQf8fDEGpj+ZL5FCyEwm8U5uRZwX4H1qiELZX9TjtmVUGuVK4jx8 6HbMfqb6yZxt1wpcN/PdKaKk91lUa8UucltpRr0E7A6U/s3c6+uXl1YFBehhE5RK nwOyK49b5YgUgP3gmTzYa+iVzaXJQxhuXSMphl4HYfV9SesS/VBsRdRBaMLjDjZK nRwv45PT8nTTN7OJx+Q8CpSYrXBiYAMn5TaHnU6y9HM8oHHUOqv8L6GmCTcH0EHW vlQqe/bgOX9F08IfLTZT7Pfg5ZiR+HB5u4wK41fSUN3Vf2a/+fSISubPpshM0C+E wbpjncB71WzQqvpaT4IS8J+ZlRhzgP0= -----END CERTIFICATE-----Generated at Mon Apr 28 03:31:00 2025 by rpki-client