$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e3a3273-5100-3cca-aa8e-cbfb0a174d6a.roa File: 2e3a3273-5100-3cca-aa8e-cbfb0a174d6a.roa (raw, json) Hash identifier: rsy7lWViBjVg/EFyr88qUa0YquMibeGKXBOwFBFhJas= Subject key identifier: 19:65:3D:23:7F:C4:F3:DA:10:B5:D9:66:7E:81:14:41:D4:D2:6B:1F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E708732AF9B18513D300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e3a3273-5100-3cca-aa8e-cbfb0a174d6a.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.207.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e7:08:73:2a:f9:b1:85:13:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=c3844bad-8779-4bfb-8480-51e0213a1e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:01:f0:cf:d4:ec:38:fc:3b:77:4f:23:eb:d4: 4c:62:49:b5:6d:80:28:ab:34:ec:35:d0:98:77:9a: c5:93:9e:02:f1:c2:7c:3c:72:d0:47:fd:f9:35:ef: 6f:3e:81:19:a7:88:61:20:a5:84:c5:ec:a8:cf:38: a0:9e:f9:8c:32:a3:5f:0f:a6:df:cc:fb:9a:02:dd: 9c:61:16:dc:dc:21:55:ab:0b:5a:71:1d:e6:08:2a: 2f:c6:c5:cc:8d:92:0a:5f:d6:fb:ee:12:ab:cd:ea: a9:62:12:5e:57:d1:6a:c8:55:1f:42:34:70:e3:8a: f3:bf:bd:d7:86:1b:9d:e6:f9:fd:2b:61:af:24:7d: a9:d5:4e:c4:de:68:c1:e1:f3:09:0d:3e:9e:f1:58: 39:6f:83:72:97:c0:5d:2c:66:86:47:1f:55:4e:ab: 63:f4:31:ce:da:e8:b6:93:3d:eb:e7:2c:da:6e:50: 4d:2a:eb:d9:e8:45:76:be:28:99:da:8f:21:41:28: 17:a4:b3:41:81:49:93:bc:9c:eb:9b:ae:e2:4a:3a: 80:c6:f3:7a:8b:a8:32:65:7d:30:4e:f0:ff:e1:e3: ac:3a:aa:aa:de:4c:7f:24:ae:bd:d8:93:7b:88:19: 92:35:ff:ab:19:77:a3:79:a6:88:13:c9:03:2a:ff: 4f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:65:3D:23:7F:C4:F3:DA:10:B5:D9:66:7E:81:14:41:D4:D2:6B:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e3a3273-5100-3cca-aa8e-cbfb0a174d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:e3:6a:db:ce:10:42:f0:14:e7:63:c8:e0:e2:de:95:e2:a6: 88:c7:25:10:2c:a1:10:c5:03:69:36:21:d6:93:18:7d:ae:c7: 05:45:a6:9d:6a:33:bf:8b:52:23:0d:32:ff:af:c9:fc:dd:07: 26:cf:70:25:3c:e7:cf:d3:78:bc:77:f2:e6:4b:dc:34:86:7e: 81:06:9d:07:cb:48:f4:79:60:8a:ec:ea:0b:85:a6:2a:33:70: 2f:31:6e:7b:bf:ff:b5:58:8c:ba:06:a0:76:05:41:83:3f:1a: e6:51:8c:74:7c:06:a5:7a:6c:99:72:2f:b6:59:3e:05:a1:ac: c6:4b:bf:c5:24:d3:cd:08:d5:20:2e:df:d7:59:07:98:e9:d2: 0b:0c:10:a8:52:c5:17:18:74:48:5a:e7:33:d5:d4:46:db:84: 49:d7:49:c4:09:9c:66:d5:5b:43:da:7b:d5:aa:9f:a2:49:b0: 20:f2:69:aa:99:bb:5d:e1:cf:c0:a1:3e:cd:c2:03:9a:80:14: ef:b2:f0:fb:fc:c9:9e:cf:e7:33:72:d5:cf:13:da:b6:5b:7e: 2f:ae:4f:34:37:74:a0:2e:26:41:6f:74:7e:3c:ff:97:96:e0: 71:33:d6:27:dd:c8:b1:10:a4:ed:6a:2c:dc:ac:4c:21:06:13: ff:3c:8f:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKecIcyr5sYUT0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YzM4NDRiYWQtODc3OS00YmZiLTg0ODAtNTFlMDIxM2ExZTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQHwz9TsOPw7d08j69RMYkm1bYAoqzTsNdCY d5rFk54C8cJ8PHLQR/35Ne9vPoEZp4hhIKWExeyozzignvmMMqNfD6bfzPuaAt2c YRbc3CFVqwtacR3mCCovxsXMjZIKX9b77hKrzeqpYhJeV9FqyFUfQjRw44rzv73X hhud5vn9K2GvJH2p1U7E3mjB4fMJDT6e8Vg5b4Nyl8BdLGaGRx9VTqtj9DHO2ui2 kz3r5yzablBNKuvZ6EV2viiZ2o8hQSgXpLNBgUmTvJzrm67iSjqAxvN6i6gyZX0w TvD/4eOsOqqq3kx/JK692JN7iBmSNf+rGXejeaaIE8kDKv9PswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBllPSN/xPPaELXZZn6BFEHU0msfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmUzYTMyNzMtNTEwMC0z Y2NhLWFhOGUtY2JmYjBhMTc0ZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLjatvOEELwFOdjyODi3pXipojHJRAsoRDFA2k2IdaTGH2uxwVFpp1q M7+LUiMNMv+vyfzdBybPcCU858/TeLx38uZL3DSGfoEGnQfLSPR5YIrs6guFpioz cC8xbnu//7VYjLoGoHYFQYM/GuZRjHR8BqV6bJlyL7ZZPgWhrMZLv8Uk080I1SAu 39dZB5jp0gsMEKhSxRcYdEha5zPV1EbbhEnXScQJnGbVW0Pae9Wqn6JJsCDyaaqZ u13hz8ChPs3CA5qAFO+y8Pv8yZ7P5zNy1c8T2rZbfi+uTzQ3dKAuJkFvdH48/5eW 4HEz1ifdyLEQpO1qLNysTCEGE/88jy4= -----END CERTIFICATE-----Generated at Sun Apr 27 15:20:42 2025 by rpki-client