$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cbe2013-e94f-3c30-a8d7-528468e4abc7.roa File: 4cbe2013-e94f-3c30-a8d7-528468e4abc7.roa (raw, json) Hash identifier: uEvq5AZL+kIFTmuNFKdujk0ZOOUSS3C8Cef3tRoHOfs= Subject key identifier: DC:81:57:C3:28:F4:B4:D0:27:F5:8F:1F:FD:C9:BC:B4:06:BB:DC:56 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF48F9A208154A5F4DBA000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cbe2013-e94f-3c30-a8d7-528468e4abc7.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.209.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8f:9a:20:81:54:a5:f4:db:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=da3b85f2-7640-4cca-83d2-20508ee55349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b1:1c:b9:66:ec:4e:e7:c7:29:ce:96:49:af: 14:d4:f2:d9:27:cd:eb:95:46:b9:d4:0e:f1:44:71: 7e:3a:24:50:74:97:b5:5a:c4:34:6c:eb:09:63:04: 5d:ea:27:6b:28:7d:65:1e:f8:41:6a:9e:bf:f5:12: 1f:63:d3:76:c3:8e:2e:2e:f9:e7:d9:cd:af:14:d5: 97:9d:cb:39:fd:41:ea:ea:4b:1d:3a:c2:58:b7:5b: 2d:a4:ff:42:1e:ec:63:55:20:48:ef:27:22:61:34: 02:50:77:fb:0c:ff:61:cd:cb:8d:5b:06:32:67:ca: 6d:b9:5c:75:49:03:3e:e0:18:b7:eb:03:2d:68:c8: 69:3b:10:26:39:fc:3f:1b:37:30:80:73:f1:86:51: fa:96:da:ea:e1:8d:7d:9a:6b:90:cd:d3:03:7d:68: 8e:9a:f0:43:1c:23:4a:95:52:d1:e8:c2:60:75:98: e9:ba:82:b2:5a:e4:61:fb:c9:33:63:bb:b4:d4:d8: 34:20:7b:bb:5d:2b:ed:da:6e:f2:c7:eb:3d:01:d4: 64:8e:a3:48:e9:43:1c:ce:03:51:ed:8c:dd:21:40: fe:8d:43:06:e8:ca:07:62:11:5b:bd:9f:20:25:7d: d7:84:e8:c7:ca:1d:c5:41:26:8a:1f:57:b9:87:0d: f5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:81:57:C3:28:F4:B4:D0:27:F5:8F:1F:FD:C9:BC:B4:06:BB:DC:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cbe2013-e94f-3c30-a8d7-528468e4abc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:65:48:4f:a7:21:50:26:8f:aa:0a:56:59:87:9d:06:8f:ae: fd:3d:59:9b:72:56:99:1d:17:c1:68:24:4f:be:2f:27:cc:79: 30:82:f8:0a:6e:04:17:9c:ae:b3:cb:79:0b:a1:82:c2:8f:38: c4:47:0c:94:2b:a1:54:0a:0e:a5:65:e8:75:c2:03:0b:31:a4: 6c:58:dc:ce:99:a0:9d:2f:92:b4:92:9f:bb:1c:a8:40:3e:77: 9e:5e:d5:d4:89:3f:84:15:d2:11:9a:f7:0d:aa:a8:ef:83:75: 32:21:6b:d7:5b:a1:bb:f1:95:72:3e:c9:d6:5a:bd:53:1b:a0: 38:7b:34:e2:b3:be:47:07:cd:f3:e0:20:37:47:00:66:95:de: 5d:57:55:1a:46:ed:07:f9:89:bf:82:7f:58:c6:70:b1:b2:bf: be:b7:8a:9d:35:dd:6d:91:30:41:04:05:39:e8:d7:8e:5e:25: 6d:9d:dc:eb:84:16:98:4c:ca:4c:79:c3:2d:7c:fb:b4:8c:6a: a6:83:dc:7b:06:b7:ad:f1:ed:57:66:e7:84:ed:70:d9:e3:1d: 4f:99:66:ac:a2:59:35:22:8e:bf:43:b1:c5:b0:6d:6e:d0:11: c4:03:da:a1:9e:ba:98:49:1a:17:0e:a1:ea:89:17:9b:70:5e: 51:b6:98:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9I+aIIFUpfTboAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZGEzYjg1ZjItNzY0MC00Y2NhLTgzZDItMjA1MDhlZTU1MzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7EcuWbsTufHKc6WSa8U1PLZJ83rlUa51A7x RHF+OiRQdJe1WsQ0bOsJYwRd6idrKH1lHvhBap6/9RIfY9N2w44uLvnn2c2vFNWX ncs5/UHq6ksdOsJYt1stpP9CHuxjVSBI7yciYTQCUHf7DP9hzcuNWwYyZ8ptuVx1 SQM+4Bi36wMtaMhpOxAmOfw/GzcwgHPxhlH6ltrq4Y19mmuQzdMDfWiOmvBDHCNK lVLR6MJgdZjpuoKyWuRh+8kzY7u01Ng0IHu7XSvt2m7yx+s9AdRkjqNI6UMczgNR 7YzdIUD+jUMG6MoHYhFbvZ8gJX3XhOjHyh3FQSaKH1e5hw31gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyBV8Mo9LTQJ/WPH/3JvLQGu9xWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGNiZTIwMTMtZTk0Zi0z YzMwLWE4ZDctNTI4NDY4ZTRhYmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9FAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRlSE+nIVAmj6oKVlmHnQaPrv09WZtyVpkdF8FoJE++LyfMeTCC+Apu BBecrrPLeQuhgsKPOMRHDJQroVQKDqVl6HXCAwsxpGxY3M6ZoJ0vkrSSn7scqEA+ d55e1dSJP4QV0hGa9w2qqO+DdTIha9dbobvxlXI+ydZavVMboDh7NOKzvkcHzfPg IDdHAGaV3l1XVRpG7Qf5ib+Cf1jGcLGyv763ip013W2RMEEEBTno145eJW2d3OuE FphMykx5wy18+7SMaqaD3HsGt63x7Vdm54TtcNnjHU+ZZqyiWTUijr9DscWwbW7Q EcQD2qGeuphJGhcOoeqJF5twXlG2mGo= -----END CERTIFICATE-----Generated at Sun Apr 27 22:34:29 2025 by rpki-client