$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53462e61-1d9d-34f0-9b90-6ad1b2e9d7d0.roa File: 53462e61-1d9d-34f0-9b90-6ad1b2e9d7d0.roa (raw, json) Hash identifier: JqEiX6ENs5wAclEPG8qLrURUtX9NHM8cyG+ebphhv4w= Subject key identifier: 5B:86:51:4F:A4:8A:1F:AD:55:06:5C:5A:D7:B1:23:D3:DF:20:AA:F7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829DE5C0027B3202AEBC700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53462e61-1d9d-34f0-9b90-6ad1b2e9d7d0.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.207.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:de:5c:00:27:b3:20:2a:eb:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=a8dbec7e-18f6-427b-bf06-c8c01daf124c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6e:d2:39:4a:65:67:60:cd:8d:61:46:c4:14: 5f:90:4d:c9:d9:97:24:07:2f:89:21:99:4b:61:11: 55:ea:02:36:25:a4:59:7a:e9:0b:63:39:2d:e3:f6: d8:9f:d1:6c:4e:d8:3d:21:86:d7:5f:8e:85:43:9c: 6d:e3:f6:63:e4:0b:b7:eb:ab:09:81:b0:44:2d:3f: 41:1a:33:26:9c:05:fc:71:dc:ac:ab:dc:65:93:c9: 54:5c:b6:46:42:5c:1a:e8:bb:89:3c:fc:40:51:07: 73:99:59:51:81:b1:03:54:5f:79:18:11:c7:2d:32: 96:f1:d1:3b:4a:27:3b:92:a4:4d:05:ff:69:8c:b2: 07:dd:cd:1b:9b:4e:fa:85:fe:87:04:aa:bb:b3:df: 45:e4:03:4c:77:21:da:ad:91:a0:e0:07:ee:15:56: ac:12:a0:30:5f:e5:4f:18:89:70:17:55:e6:f7:c3: 0b:bb:e5:17:99:ad:21:36:e2:0c:ae:95:a6:40:c3: ef:37:fe:13:2e:a2:0a:57:94:88:90:e8:57:bf:89: 81:35:46:2a:4c:28:19:e6:0d:3b:d7:77:f0:4f:7d: df:b8:7f:e8:f6:09:43:81:fa:91:88:52:54:f0:ee: 38:80:94:8e:e9:2b:54:d5:69:b9:6d:70:3a:d4:d0: cc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:86:51:4F:A4:8A:1F:AD:55:06:5C:5A:D7:B1:23:D3:DF:20:AA:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53462e61-1d9d-34f0-9b90-6ad1b2e9d7d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:b5:99:cb:a7:c0:ca:69:a3:40:94:31:6f:f8:0e:46:9f:da: 49:26:ca:2e:96:30:d0:5c:e4:f7:a4:a1:7d:c9:21:6d:f8:89: 39:53:e9:ab:95:eb:3e:43:79:0f:a0:78:b0:b9:bf:62:48:8c: 0b:ca:0e:0d:5e:3f:a9:54:cb:d8:c0:b5:77:fd:8c:08:52:15: 19:94:0b:cc:b3:5c:c9:bf:a9:b0:42:7f:30:67:05:83:50:bb: 85:ee:00:22:d1:8a:a2:b4:b6:d2:a7:88:b1:bf:fa:26:27:ab: ec:6e:83:d9:57:a0:b2:26:3e:0c:eb:8e:29:0a:7c:2b:4f:e9: a6:02:2d:6a:0b:d9:ab:1a:5d:e8:cc:f6:6e:d2:7a:80:53:36: c4:d7:1f:3a:ee:1b:e0:17:92:9c:22:ea:79:e3:27:45:f3:05: 86:b9:9c:0d:39:f5:e5:00:8f:3c:c6:59:49:db:bb:c6:71:a9: b3:a0:62:2c:a0:a1:f1:49:64:0e:d0:19:c1:46:f3:5d:aa:57: 7f:50:55:e3:9e:5c:46:09:62:ad:82:22:7b:64:64:09:35:9c: d9:ee:ba:55:d2:fa:b4:a1:74:27:e3:ce:68:2a:5b:76:ba:f5: ce:af:83:a3:08:97:a1:1f:49:e9:53:f0:12:af:29:62:70:a6: fb:d5:88:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKd5cACezICrrxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YThkYmVjN2UtMThmNi00MjdiLWJmMDYtYzhjMDFkYWYxMjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG7SOUplZ2DNjWFGxBRfkE3J2ZckBy+JIZlL YRFV6gI2JaRZeukLYzkt4/bYn9FsTtg9IYbXX46FQ5xt4/Zj5Au366sJgbBELT9B GjMmnAX8cdysq9xlk8lUXLZGQlwa6LuJPPxAUQdzmVlRgbEDVF95GBHHLTKW8dE7 Sic7kqRNBf9pjLIH3c0bm076hf6HBKq7s99F5ANMdyHarZGg4AfuFVasEqAwX+VP GIlwF1Xm98MLu+UXma0hNuIMrpWmQMPvN/4TLqIKV5SIkOhXv4mBNUYqTCgZ5g07 13fwT33fuH/o9glDgfqRiFJU8O44gJSO6StU1Wm5bXA61NDMuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuGUU+kih+tVQZcWtexI9PfIKr3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTM0NjJlNjEtMWQ5ZC0z NGYwLTliOTAtNmFkMWIyZTlkN2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFW1mcunwMppo0CUMW/4Dkaf2kkmyi6WMNBc5PekoX3JIW34iTlT6auV 6z5DeQ+geLC5v2JIjAvKDg1eP6lUy9jAtXf9jAhSFRmUC8yzXMm/qbBCfzBnBYNQ u4XuACLRiqK0ttKniLG/+iYnq+xug9lXoLImPgzrjikKfCtP6aYCLWoL2asaXejM 9m7SeoBTNsTXHzruG+AXkpwi6nnjJ0XzBYa5nA059eUAjzzGWUnbu8ZxqbOgYiyg ofFJZA7QGcFG812qV39QVeOeXEYJYq2CIntkZAk1nNnuulXS+rShdCfjzmgqW3a6 9c6vg6MIl6EfSelT8BKvKWJwpvvViG4= -----END CERTIFICATE-----Generated at Sat Apr 26 17:45:56 2025 by rpki-client