$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cffc1fe-2b48-3a24-8257-8c1335167c03.roa File: 4cffc1fe-2b48-3a24-8257-8c1335167c03.roa (raw, json) Hash identifier: fmNtCAiUNENwoyynlckaLaTh1LCOLrrO3DqCRuMfXxE= Subject key identifier: 6B:7C:EB:98:C3:95:50:7A:D0:04:B1:5B:38:97:30:3A:6C:53:B7:A8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF461A46BDBD4CB32C75C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cffc1fe-2b48-3a24-8257-8c1335167c03.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.215.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:46:1a:46:bd:bd:4c:b3:2c:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=6f37d18b-9a40-441a-849d-356172657d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f4:39:a0:63:c9:7a:5e:4d:1d:72:e2:24:99: 94:60:9b:35:c9:46:6d:88:9c:6e:6f:0e:f0:ed:7b: 5a:a4:67:77:9b:a8:c3:4d:eb:52:ed:dd:be:7e:b2: 3c:86:ee:86:84:3b:de:39:8e:38:e1:b5:75:e7:28: 6c:84:66:fd:cb:d0:32:aa:36:f9:75:9d:f6:99:bf: be:d5:34:f9:69:b4:00:b9:6d:65:f0:fd:ee:e5:92: 1e:1c:00:54:a2:f9:fe:04:28:10:57:8a:a2:e4:03: 38:38:24:61:23:87:5b:33:ec:a8:4e:c4:97:88:50: 5d:33:5f:fe:f8:1a:84:b0:1e:bf:ec:ac:86:e6:2e: 44:b3:77:bc:37:3a:f3:50:65:1b:f6:9d:89:2f:5c: f3:b0:8e:9b:fc:f5:d9:f8:81:96:c6:fc:6a:fc:7d: a8:02:25:90:fd:19:20:fe:8f:11:48:48:2d:f5:13: 8e:ea:0b:93:71:c6:bc:ea:54:87:29:13:04:e8:bc: 71:74:98:02:b8:e0:75:8a:97:b6:7f:f3:85:b0:61: 06:0e:b1:c1:fc:5a:32:4a:69:c0:49:54:bd:df:85: 79:92:ec:72:90:9d:df:30:46:ef:13:dd:5b:94:ea: 5b:39:5b:9c:f8:52:4b:2c:d1:9e:0b:d5:21:b2:59: ad:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7C:EB:98:C3:95:50:7A:D0:04:B1:5B:38:97:30:3A:6C:53:B7:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cffc1fe-2b48-3a24-8257-8c1335167c03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:36:93:4f:18:ac:58:63:4b:28:59:8b:12:43:c1:a3:13:1d: 07:8d:20:39:29:e3:ab:96:04:6b:99:6c:7d:bc:cc:64:b6:3f: 69:05:e7:13:76:42:7e:d5:90:86:4a:0a:bd:13:99:28:42:19: fa:58:c4:a3:b2:54:1e:bb:1d:56:68:8a:ab:b8:8e:38:4c:f3: 0f:42:ac:02:dd:f3:a9:77:b0:04:a4:6c:83:c4:da:db:86:83: 01:03:27:96:e0:05:49:5f:58:0e:9e:40:b0:d2:b0:cb:f2:02: 52:b8:82:39:98:e5:4f:eb:3b:e0:22:77:f1:2f:f1:2e:a4:c7: 88:63:24:e5:0b:99:4f:f0:71:95:01:58:db:ce:25:43:1f:06: 47:d9:44:91:78:81:26:29:5e:f6:54:85:72:46:ca:38:82:f1: e4:f3:20:6e:2c:00:f1:6f:d7:d5:2e:dd:16:b5:41:5f:03:db: bb:4f:71:00:e3:27:5a:8b:8e:13:52:0e:d9:83:e7:13:e2:7a: 05:d0:90:09:a0:1c:f5:b8:0f:93:ff:2d:4e:59:d5:e5:4e:cf: 96:b4:7c:a7:de:b8:f1:09:a5:42:cb:3c:71:cb:13:c3:23:3f: c2:ff:d9:1f:b1:af:c8:2f:f4:0e:60:5b:fb:58:f8:6c:da:ba: a5:d8:98:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0YaRr29TLMsdcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NmYzN2QxOGItOWE0MC00NDFhLTg0OWQtMzU2MTcyNjU3ZDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/Q5oGPJel5NHXLiJJmUYJs1yUZtiJxubw7w 7XtapGd3m6jDTetS7d2+frI8hu6GhDveOY444bV15yhshGb9y9Ayqjb5dZ32mb++ 1TT5abQAuW1l8P3u5ZIeHABUovn+BCgQV4qi5AM4OCRhI4dbM+yoTsSXiFBdM1/+ +BqEsB6/7KyG5i5Es3e8NzrzUGUb9p2JL1zzsI6b/PXZ+IGWxvxq/H2oAiWQ/Rkg /o8RSEgt9ROO6guTcca86lSHKRME6LxxdJgCuOB1ipe2f/OFsGEGDrHB/FoySmnA SVS934V5kuxykJ3fMEbvE91blOpbOVuc+FJLLNGeC9UhslmtXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGt865jDlVB60ASxWziXMDpsU7eoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGNmZmMxZmUtMmI0OC0z YTI0LTgyNTctOGMxMzM1MTY3YzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9d2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFU2k08YrFhjSyhZixJDwaMTHQeNIDkp46uWBGuZbH28zGS2P2kF5xN2 Qn7VkIZKCr0TmShCGfpYxKOyVB67HVZoiqu4jjhM8w9CrALd86l3sASkbIPE2tuG gwEDJ5bgBUlfWA6eQLDSsMvyAlK4gjmY5U/rO+Aid/Ev8S6kx4hjJOULmU/wcZUB WNvOJUMfBkfZRJF4gSYpXvZUhXJGyjiC8eTzIG4sAPFv19Uu3Ra1QV8D27tPcQDj J1qLjhNSDtmD5xPiegXQkAmgHPW4D5P/LU5Z1eVOz5a0fKfeuPEJpULLPHHLE8Mj P8L/2R+xr8gv9A5gW/tY+GzauqXYmAs= -----END CERTIFICATE-----Generated at Sat Apr 26 19:07:56 2025 by rpki-client