$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a880be6-e645-31c7-8f83-82e6e241d53b.roa File: 3a880be6-e645-31c7-8f83-82e6e241d53b.roa (raw, json) Hash identifier: abhBEf/AX5IeT/maZOcNELXPpPWTyKVg6GUk6Frontw= Subject key identifier: 04:A5:9E:D6:F9:96:6E:45:89:06:32:D7:78:6B:F3:50:1F:CA:AE:31 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF428DB974533747956580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a880be6-e645-31c7-8f83-82e6e241d53b.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.217.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:42:8d:b9:74:53:37:47:95:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=a6866359-2f57-4e29-94e3-6da82d999e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:de:01:32:dc:15:99:4f:62:97:3b:8a:88:1a: 1a:4a:4c:a3:2d:d3:35:cb:c9:a5:5f:1b:34:92:1a: 4c:75:05:c7:a5:7b:ba:ab:55:8e:46:39:47:ba:17: 19:a9:bb:78:6d:99:c3:f0:81:82:fa:f0:eb:0b:86: 87:9f:d5:2c:6e:94:ca:fa:d1:f1:3c:76:09:85:98: 61:73:a9:85:38:32:14:ce:e9:28:d8:be:c5:86:e0: 29:a6:4e:38:27:6d:b1:bb:25:ed:ab:4e:d0:48:b4: 35:4c:fe:20:6b:58:0f:60:93:b7:d7:72:da:48:04: db:63:49:f5:8c:5d:be:67:d4:8c:29:42:fd:4a:23: ff:1a:e0:fe:05:d5:f7:21:58:5c:53:49:ec:bc:17: 10:be:d1:5f:e4:b1:f7:b8:69:78:c8:f2:5a:32:e7: 7e:0e:81:f6:2a:1d:3a:4c:6d:38:b0:82:71:71:a8: a4:2c:a0:69:ba:b4:51:05:5e:93:00:49:ee:c7:ce: 32:a2:bc:8d:57:4f:9b:3a:f1:9e:2b:61:12:e1:b8: 9f:d1:87:e6:35:1d:87:2b:0c:de:a7:4a:26:e4:6d: a2:12:33:05:74:72:9f:c9:41:52:91:78:cc:68:fb: 95:9a:af:cd:b9:a6:14:13:93:58:de:bd:93:3a:fc: 68:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A5:9E:D6:F9:96:6E:45:89:06:32:D7:78:6B:F3:50:1F:CA:AE:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a880be6-e645-31c7-8f83-82e6e241d53b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:06:09:d9:0c:95:56:98:92:03:8f:c0:48:46:4e:ec:c8:d3: 19:61:99:f9:d2:79:a0:c4:de:d1:19:07:88:a9:74:5d:07:61: bc:8a:dc:d5:0a:84:98:92:21:1d:80:d6:bb:54:33:40:5d:bf: 9e:72:51:62:c4:71:e5:15:5d:6b:5b:38:53:f2:f5:48:9d:82: 4e:c6:5e:d7:6a:7c:49:1b:13:2b:78:54:ed:34:dc:0a:3b:c7: 53:b2:e4:64:94:5d:fd:af:20:ad:44:58:a7:a1:a8:e3:e6:50: 43:fc:5e:55:df:1f:1d:cf:a2:0d:aa:df:ee:32:e4:62:bc:49: a8:c1:3e:68:6f:30:78:59:86:7e:6f:7a:a2:ae:d4:5c:1d:7c: 02:80:6f:f7:e7:6b:66:89:03:8d:ab:6d:bf:5b:2b:44:6c:7b: 49:97:32:e4:bf:95:ad:bf:36:dd:a4:02:af:13:0d:fc:5c:97: 42:7f:59:d6:d2:52:1d:2b:6a:86:7b:1b:46:2d:21:96:26:88: e9:1b:7a:1d:70:80:7a:d3:2b:c0:ba:a8:c1:30:56:25:1a:3e: 2b:82:1d:32:2c:38:e3:24:ad:80:53:29:65:84:bd:52:45:00: 53:53:27:41:00:bb:b1:d2:d3:d4:6f:35:20:09:da:73:e5:2a: d5:75:77:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0KNuXRTN0eVZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk YTY4NjYzNTktMmY1Ny00ZTI5LTk0ZTMtNmRhODJkOTk5ZTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu94BMtwVmU9ilzuKiBoaSkyjLdM1y8mlXxs0 khpMdQXHpXu6q1WORjlHuhcZqbt4bZnD8IGC+vDrC4aHn9UsbpTK+tHxPHYJhZhh c6mFODIUzuko2L7FhuAppk44J22xuyXtq07QSLQ1TP4ga1gPYJO313LaSATbY0n1 jF2+Z9SMKUL9SiP/GuD+BdX3IVhcU0nsvBcQvtFf5LH3uGl4yPJaMud+DoH2Kh06 TG04sIJxcaikLKBpurRRBV6TAEnux84yoryNV0+bOvGeK2ES4bif0YfmNR2HKwze p0om5G2iEjMFdHKfyUFSkXjMaPuVmq/NuaYUE5NY3r2TOvxoAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASlntb5lm5FiQYy13hr81Afyq4xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2E4ODBiZTYtZTY0NS0z MWM3LThmODMtODJlNmUyNDFkNTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9lgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIGCdkMlVaYkgOPwEhGTuzI0xlhmfnSeaDE3tEZB4ipdF0HYbyK3NUK hJiSIR2A1rtUM0Bdv55yUWLEceUVXWtbOFPy9Uidgk7GXtdqfEkbEyt4VO003Ao7 x1Oy5GSUXf2vIK1EWKehqOPmUEP8XlXfHx3Pog2q3+4y5GK8SajBPmhvMHhZhn5v eqKu1FwdfAKAb/fna2aJA42rbb9bK0Rse0mXMuS/la2/Nt2kAq8TDfxcl0J/WdbS Uh0raoZ7G0YtIZYmiOkbeh1wgHrTK8C6qMEwViUaPiuCHTIsOOMkrYBTKWWEvVJF AFNTJ0EAu7HS09RvNSAJ2nPlKtV1d5k= -----END CERTIFICATE-----Generated at Sat Apr 26 19:12:04 2025 by rpki-client