$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/460e3e5b-6cf1-32c7-9486-04b1c4f8a48b.roa File: 460e3e5b-6cf1-32c7-9486-04b1c4f8a48b.roa (raw, json) Hash identifier: 4cfj1VpafMi5GPze5y/ZQ+tZgX/UggkwjBdUkSPpMxk= Subject key identifier: 0E:5F:0F:65:37:AF:80:FC:5C:76:E4:E5:17:27:14:4F:4A:0C:E4:83 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF7106D769911D0628F080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/460e3e5b-6cf1-32c7-9486-04b1c4f8a48b.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.203.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:71:06:d7:69:91:1d:06:28:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=d00c13f1-44d7-4242-9a1a-84caa6bd5d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7c:df:3d:db:74:51:1c:3a:7a:c7:09:a1:66: 98:7f:2c:95:46:b1:78:5c:5f:57:24:0e:01:86:0f: b0:26:f2:b4:4c:e9:e2:3f:66:67:b2:91:25:82:2a: f5:b7:cd:f9:46:10:f6:08:be:71:0a:03:ec:9e:67: 92:1b:8b:25:1a:4f:30:8a:ea:2d:7c:8c:82:c6:7b: 3d:de:b7:17:96:61:2e:9c:6e:26:c0:60:cb:82:5b: 0a:d4:53:aa:aa:b0:e1:f7:28:b2:ca:2e:e9:85:51: 92:31:1e:39:40:db:be:d2:78:51:b1:4b:bb:52:61: b4:93:cc:ad:49:e4:77:a5:9f:f2:f0:14:9b:1f:db: 35:f7:eb:bb:f2:2d:7d:ab:d7:d4:41:ce:3a:58:7a: da:41:da:58:8a:4a:18:73:04:bb:7e:79:59:99:fa: 61:e8:f3:ca:e9:98:89:68:e2:5c:db:ad:c6:78:5a: 48:70:5a:bb:4c:1e:b2:2e:94:dc:54:96:c2:34:c7: 30:c9:4b:70:85:28:16:4e:e9:3e:50:e5:83:6e:b3: d0:44:70:c1:74:bb:c0:28:24:d8:df:7e:8f:80:ca: 6a:f9:46:2d:09:fb:c7:fe:4f:49:cf:bc:ac:eb:cc: 89:8e:67:bc:96:0c:0c:6b:2b:3d:85:44:0e:88:e5: b8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5F:0F:65:37:AF:80:FC:5C:76:E4:E5:17:27:14:4F:4A:0C:E4:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/460e3e5b-6cf1-32c7-9486-04b1c4f8a48b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:1e:7c:fb:b4:e5:c4:64:44:f8:9b:22:ac:44:2e:3f:02:c9: f3:57:34:62:be:f5:a8:77:8e:19:2e:fe:c7:c6:d7:db:35:ee: d3:74:fc:07:9f:27:5b:d4:0f:f3:19:ca:0e:ab:87:77:39:de: 10:fd:5c:99:16:27:3a:9f:7d:56:85:63:05:e2:39:86:49:fc: 08:6f:42:c9:99:0b:0a:8d:79:a0:44:d9:7b:27:c0:e4:64:42: 9b:aa:fc:06:99:66:58:34:21:15:f7:86:17:08:40:4a:25:00: 3c:5b:42:11:08:4d:19:b1:0f:32:69:60:31:d6:74:34:df:3f: 64:94:04:4a:2c:37:71:84:9f:43:69:0d:80:5e:fe:a3:3f:2b: b8:09:fe:94:d2:50:dd:a0:20:dc:93:2c:bb:a1:be:bc:09:0b: 26:fa:39:36:fd:b8:ce:16:db:b8:ae:35:83:1f:95:24:52:48: 7f:29:f6:f7:c5:1a:ac:65:63:a1:76:75:be:8d:7a:2d:3e:09: 8c:1f:25:ca:f6:75:8b:f9:05:e7:ef:db:60:b8:e6:b9:b0:8d: d9:ea:6f:13:ae:15:dc:bf:9f:1c:17:e2:02:74:7b:81:c4:52: da:f0:62:45:30:9c:c9:b7:bb:af:69:79:99:4b:c2:c5:63:2e: 1e:a2:b5:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz3EG12mRHQYo8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZDAwYzEzZjEtNDRkNy00MjQyLTlhMWEtODRjYWE2YmQ1ZDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3zfPdt0URw6escJoWaYfyyVRrF4XF9XJA4B hg+wJvK0TOniP2ZnspElgir1t835RhD2CL5xCgPsnmeSG4slGk8wiuotfIyCxns9 3rcXlmEunG4mwGDLglsK1FOqqrDh9yiyyi7phVGSMR45QNu+0nhRsUu7UmG0k8yt SeR3pZ/y8BSbH9s19+u78i19q9fUQc46WHraQdpYikoYcwS7fnlZmfph6PPK6ZiJ aOJc263GeFpIcFq7TB6yLpTcVJbCNMcwyUtwhSgWTuk+UOWDbrPQRHDBdLvAKCTY 336PgMpq+UYtCfvH/k9Jz7ys68yJjme8lgwMays9hUQOiOW42wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5fD2U3r4D8XHbk5RcnFE9KDOSDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDYwZTNlNWItNmNmMS0z MmM3LTk0ODYtMDRiMWM0ZjhhNDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8umMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcefPu05cRkRPibIqxELj8CyfNXNGK+9ah3jhku/sfG19s17tN0/Aef J1vUD/MZyg6rh3c53hD9XJkWJzqffVaFYwXiOYZJ/AhvQsmZCwqNeaBE2XsnwORk Qpuq/AaZZlg0IRX3hhcIQEolADxbQhEITRmxDzJpYDHWdDTfP2SUBEosN3GEn0Np DYBe/qM/K7gJ/pTSUN2gINyTLLuhvrwJCyb6OTb9uM4W27iuNYMflSRSSH8p9vfF GqxlY6F2db6Nei0+CYwfJcr2dYv5Befv22C45rmwjdnqbxOuFdy/nxwX4gJ0e4HE UtrwYkUwnMm3u69peZlLwsVjLh6itdk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:01:52 2025 by rpki-client