$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/351db464-d0f0-3a25-8dae-2d02db583de7.roa File: 351db464-d0f0-3a25-8dae-2d02db583de7.roa (raw, json) Hash identifier: bmRIoBXP7NHnvBonfgwfPoBMZ3TUkOGk3MEZ4AETkQY= Subject key identifier: 75:1F:74:DB:7D:59:D5:BA:CC:EA:33:E3:38:66:72:95:35:AA:AB:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF4433FF42E3EFE53A3E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/351db464-d0f0-3a25-8dae-2d02db583de7.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 16625 IP address blocks: 23.214.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:44:33:ff:42:e3:ef:e5:3a:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=36d6e3ac-0c57-4d0c-91a1-70be66ffbd8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:90:49:c2:59:a0:f6:f6:5a:3f:fc:13:e7:10: ca:c5:99:02:51:41:92:8e:85:9e:9d:f1:81:ca:4e: 90:6b:9a:5c:a4:59:6a:13:30:0c:fd:8e:39:c7:2b: f7:34:ab:5e:c4:27:d6:ae:87:3d:33:cb:8a:cb:a1: 88:4f:ac:15:ef:1a:bc:43:64:2e:a8:db:f4:95:91: 30:46:6f:41:03:a5:b5:41:ce:88:ed:4e:83:7a:62: 15:2e:9e:d7:44:b9:54:d6:0e:82:bb:1c:64:cc:c0: 57:06:c7:f9:1b:53:51:6d:c7:ba:cb:df:0e:bc:98: b2:c2:04:a4:29:b3:15:ec:4e:d1:7e:bc:15:48:d7: fa:82:13:5f:53:b7:63:c4:d8:75:33:cc:d3:69:00: ba:3e:fd:90:b6:d5:b2:b8:3e:49:05:56:81:a6:79: 34:a4:19:0e:c0:55:0e:cc:1c:ad:98:53:52:03:2a: c7:bb:9f:ac:c2:66:23:fb:46:02:b7:6e:06:dd:ef: f6:86:94:10:20:30:23:0d:a6:d1:81:88:51:0e:62: 8d:36:4b:cc:3b:00:f4:3d:dc:99:78:1b:b5:5b:6e: 8a:55:c8:1a:d6:8e:11:f7:e8:29:3b:b1:9b:00:6f: a6:17:70:39:6e:ba:f4:92:41:99:30:6a:6b:75:50: 41:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1F:74:DB:7D:59:D5:BA:CC:EA:33:E3:38:66:72:95:35:AA:AB:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/351db464-d0f0-3a25-8dae-2d02db583de7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ed:b8:3f:22:38:43:31:7b:0c:95:81:f9:0d:4c:6c:55:c0: ec:70:c8:de:c1:8a:dd:43:a3:2f:9f:be:a1:52:f5:ca:c6:b7: 4f:fe:83:2b:eb:6b:d5:9d:fa:56:0b:6b:c8:a5:18:29:f4:33: 7b:ca:4e:5b:20:d0:17:4e:3d:6c:6b:4a:b7:93:ce:17:07:37: d2:b0:f3:5c:71:90:ea:cb:fe:b5:9a:a3:2d:41:f7:4b:8c:17: f9:51:62:40:97:f5:7d:e8:2d:97:cf:5e:09:e3:a9:f5:aa:93: 0c:d4:e0:14:dc:b9:74:47:af:d0:88:83:00:08:16:29:dc:b1: fc:61:40:cb:1d:95:c7:36:51:e8:6c:c5:43:a3:43:b2:ef:41: 5e:8a:be:22:26:55:35:70:0e:8b:73:f5:53:4a:53:15:23:ac: d0:fe:a8:20:f9:f7:ec:7a:40:87:7a:7e:51:95:f4:ac:a4:86: ff:db:77:63:ae:5c:7d:ba:43:e4:4a:45:ea:02:f2:69:09:9c: d6:ab:32:91:92:3b:39:0b:0e:a1:f8:36:fb:0f:fb:0b:91:54: cf:52:d1:3f:75:b2:69:04:ef:7f:e4:c7:09:38:2b:9f:3f:ac: 1b:5e:f5:a6:08:d8:3b:13:e3:91:b9:44:2d:7e:65:6b:e7:c3: 43:5f:81:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0Qz/0Lj7+U6PgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MzZkNmUzYWMtMGM1Ny00ZDBjLTkxYTEtNzBiZTY2ZmZiZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pBJwlmg9vZaP/wT5xDKxZkCUUGSjoWenfGB yk6Qa5pcpFlqEzAM/Y45xyv3NKtexCfWroc9M8uKy6GIT6wV7xq8Q2QuqNv0lZEw Rm9BA6W1Qc6I7U6DemIVLp7XRLlU1g6CuxxkzMBXBsf5G1NRbce6y98OvJiywgSk KbMV7E7RfrwVSNf6ghNfU7djxNh1M8zTaQC6Pv2QttWyuD5JBVaBpnk0pBkOwFUO zBytmFNSAyrHu5+swmYj+0YCt24G3e/2hpQQIDAjDabRgYhRDmKNNkvMOwD0PdyZ eBu1W26KVcga1o4R9+gpO7GbAG+mF3A5brr0kkGZMGprdVBB5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUfdNt9WdW6zOoz4zhmcpU1qqv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzUxZGI0NjQtZDBmMC0z YTI1LThkYWUtMmQwMmRiNTgzZGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9ZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHtuD8iOEMxewyVgfkNTGxVwOxwyN7Bit1Doy+fvqFS9crGt0/+gyvr a9Wd+lYLa8ilGCn0M3vKTlsg0BdOPWxrSreTzhcHN9Kw81xxkOrL/rWaoy1B90uM F/lRYkCX9X3oLZfPXgnjqfWqkwzU4BTcuXRHr9CIgwAIFincsfxhQMsdlcc2Uehs xUOjQ7LvQV6KviImVTVwDotz9VNKUxUjrND+qCD59+x6QId6flGV9Kykhv/bd2Ou XH26Q+RKReoC8mkJnNarMpGSOzkLDqH4NvsP+wuRVM9S0T91smkE73/kxwk4K58/ rBte9aYI2DsT45G5RC1+ZWvnw0NfgR8= -----END CERTIFICATE-----Generated at Sun Apr 27 15:21:11 2025 by rpki-client