$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e65faea-ad43-3ddd-946b-1d154ea01029.roa File: 4e65faea-ad43-3ddd-946b-1d154ea01029.roa (raw, json) Hash identifier: SjnWlRH1a+VTCyoqPkqwEuHzegiIek5aB8tUuXKDLXw= Subject key identifier: C5:72:12:49:F1:5D:C6:B2:CD:BD:2E:74:12:AA:33:46:5F:2E:EB:A1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E73D8BE77D795C1467B0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e65faea-ad43-3ddd-946b-1d154ea01029.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.207.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e7:3d:8b:e7:7d:79:5c:14:67:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=96618693-469d-46ce-a2f8-8474b6fead76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ba:4d:54:92:e3:e7:c7:ff:0f:65:4b:5e:14: 41:4c:97:a8:49:ec:5f:a6:ba:ec:b9:1a:46:f7:6e: 82:47:30:ae:f5:44:75:59:56:ea:df:55:7c:68:f2: 72:9b:5b:2b:39:7e:1a:03:7e:4c:88:f3:34:7c:6b: d2:86:03:d7:f2:8b:31:b5:4c:b6:0b:12:64:ce:02: 48:2b:b0:87:6f:12:22:99:47:29:91:22:65:e2:84: d8:06:19:d2:f7:5a:c9:17:8a:87:32:bf:a9:86:d9: 2c:f7:29:a0:3b:2b:78:15:40:12:d3:7e:6a:27:88: 31:e7:9b:3e:d9:c7:08:11:59:40:2b:96:ca:76:e9: 84:03:da:2d:a2:25:bb:a8:be:2a:01:91:3e:d3:c7: 86:04:c1:2b:75:31:1a:9a:a3:17:e9:ac:9b:d7:0d: 7d:c5:b2:00:b7:29:ca:21:0b:f3:41:81:f1:4e:20: f8:9b:ed:6a:0c:03:aa:db:fa:6e:50:d3:7b:03:24: 47:bf:1a:e9:6d:48:93:b5:a5:6b:f5:c6:5d:a0:0b: 15:8f:6d:d2:1f:8e:05:8a:38:fc:ad:2a:e1:15:7a: 4c:c3:f7:20:64:a4:39:70:a9:a1:7d:7e:d1:06:5c: 71:43:15:61:88:ae:85:15:42:e0:93:8f:0e:98:c7: 17:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:72:12:49:F1:5D:C6:B2:CD:BD:2E:74:12:AA:33:46:5F:2E:EB:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e65faea-ad43-3ddd-946b-1d154ea01029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:1f:76:e6:18:ec:d5:52:4d:32:84:36:81:aa:60:e8:c5:18: cb:a0:35:40:5e:83:5f:de:ba:6c:59:64:f2:c5:4a:c9:05:c4: f2:a7:89:72:6c:02:e0:42:56:83:86:56:4f:cb:a1:50:5e:09: 42:50:ce:03:41:cb:07:f0:19:e5:08:8d:a3:e2:f0:8f:d0:2c: d0:01:cf:54:aa:fa:a3:59:f5:e8:bc:e5:83:be:1f:19:54:54: 31:6a:c0:78:10:2c:30:a2:47:3a:6d:41:ec:b1:ac:1a:3e:95: a3:4e:ce:7d:2c:24:d0:1c:cb:48:22:25:d9:98:98:fe:e5:6b: 30:64:d7:b7:f6:7a:34:39:1f:9d:87:01:c7:01:9b:bc:82:47: b0:5d:30:6f:6b:33:39:32:65:4f:1c:91:ec:05:81:ff:ec:35: 59:6c:74:1c:d3:92:6e:fb:50:7a:da:c1:48:b2:b0:2c:92:6f: df:7a:99:72:13:be:22:27:d6:fe:d4:8d:ea:fe:f2:4e:fd:24: 25:bc:20:40:dc:da:6a:23:8e:60:4a:80:d5:a5:53:8b:a4:93: dd:45:d2:b7:b2:18:53:6e:c7:74:4a:61:44:0a:e3:db:2f:92: 2c:f2:48:a0:8d:b1:b6:9a:28:31:e1:e9:55:b8:54:86:35:64: c4:1a:cf:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKec9i+d9eVwUZ7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk OTY2MTg2OTMtNDY5ZC00NmNlLWEyZjgtODQ3NGI2ZmVhZDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbpNVJLj58f/D2VLXhRBTJeoSexfprrsuRpG 926CRzCu9UR1WVbq31V8aPJym1srOX4aA35MiPM0fGvShgPX8osxtUy2CxJkzgJI K7CHbxIimUcpkSJl4oTYBhnS91rJF4qHMr+phtks9ymgOyt4FUAS035qJ4gx55s+ 2ccIEVlAK5bKdumEA9otoiW7qL4qAZE+08eGBMErdTEamqMX6ayb1w19xbIAtynK IQvzQYHxTiD4m+1qDAOq2/puUNN7AyRHvxrpbUiTtaVr9cZdoAsVj23SH44Fijj8 rSrhFXpMw/cgZKQ5cKmhfX7RBlxxQxVhiK6FFULgk48OmMcXkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVyEknxXcayzb0udBKqM0ZfLuuhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGU2NWZhZWEtYWQ0My0z ZGRkLTk0NmItMWQxNTRlYTAxMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsfduYY7NVSTTKENoGqYOjFGMugNUBeg1/eumxZZPLFSskFxPKniXJs AuBCVoOGVk/LoVBeCUJQzgNBywfwGeUIjaPi8I/QLNABz1Sq+qNZ9ei85YO+HxlU VDFqwHgQLDCiRzptQeyxrBo+laNOzn0sJNAcy0giJdmYmP7lazBk17f2ejQ5H52H AccBm7yCR7BdMG9rMzkyZU8ckewFgf/sNVlsdBzTkm77UHrawUiysCySb996mXIT viIn1v7Ujer+8k79JCW8IEDc2mojjmBKgNWlU4ukk91F0reyGFNux3RKYUQK49sv kizySKCNsbaaKDHh6VW4VIY1ZMQaz7Y= -----END CERTIFICATE-----Generated at Sat Apr 26 17:43:35 2025 by rpki-client