$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54993026-2414-3974-a921-0ee2a6a9a213.roa File: 54993026-2414-3974-a921-0ee2a6a9a213.roa (raw, json) Hash identifier: ejVStQCUSml+AOqT2HIBElUDvGN1G8yy0iAgpgfmbKE= Subject key identifier: 39:CD:24:72:15:DE:36:2D:15:06:9A:45:61:F7:80:4D:BC:6E:1B:35 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF492FFA83998E0B5407080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54993026-2414-3974-a921-0ee2a6a9a213.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.211.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:92:ff:a8:39:98:e0:b5:40:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=fccdf447-127a-4915-9ea6-b9ea38aff82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e1:32:72:2f:e0:e9:fb:8c:db:72:65:a4:12: bb:73:53:30:c2:9d:57:d7:5f:5f:b2:94:a3:52:24: cc:d3:ac:10:3f:eb:14:06:24:79:10:31:24:16:3e: 60:2f:66:80:d5:9c:af:2a:13:78:9c:76:85:4c:54: e2:6a:1c:72:e2:ca:cb:07:ca:3b:c2:ed:32:8d:cf: 4d:b0:7c:6c:91:74:d3:c7:37:3c:bc:66:9c:56:b9: 19:ec:0f:6f:d0:af:16:d5:02:24:e4:9d:b0:63:a1: 37:47:1f:01:d8:99:7c:9b:fb:e1:df:a0:d1:1a:97: dc:e2:3f:92:31:59:6a:90:51:e6:d0:e8:de:db:d5: ce:62:9f:04:0b:05:b4:7b:b8:1a:42:5e:04:7d:3d: fc:e4:24:bb:c5:11:6f:5c:f3:76:ab:2f:db:3d:39: 95:81:71:af:ec:eb:7f:b2:d1:aa:3e:d8:d3:fe:8a: eb:f5:d2:6d:ef:d3:7c:9c:d6:94:5b:61:a0:d2:76: 06:e9:35:02:92:0d:e9:99:e0:a6:68:04:fb:0e:bb: 20:72:6f:97:97:90:8b:0b:67:2d:35:d3:60:d9:28: 94:59:e8:02:38:db:99:21:be:00:4d:94:d7:e8:aa: b0:b5:da:69:63:3a:3f:47:4b:fd:d2:09:50:25:ed: 02:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CD:24:72:15:DE:36:2D:15:06:9A:45:61:F7:80:4D:BC:6E:1B:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54993026-2414-3974-a921-0ee2a6a9a213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:39:eb:01:ba:44:22:85:a3:7e:cd:17:7c:b7:8e:c8:e7:d8: aa:0f:5e:be:66:c3:70:f9:bd:39:45:e8:bb:36:a1:a6:ca:c8: c5:5f:3d:31:31:82:2b:ba:4f:17:27:d4:96:36:99:01:68:bc: c1:69:3b:e5:83:9f:3b:f4:71:5d:ba:81:99:cb:96:ac:17:b4: 6e:72:0b:a5:79:e4:c8:f1:fd:e4:9f:56:4a:83:c7:59:e6:5e: 3c:cd:3d:e0:0b:07:6f:9f:19:a5:ec:5c:02:e9:a3:07:65:39: 3f:be:f2:97:78:0e:fe:58:43:56:86:16:b8:8b:b0:cd:ce:06: f4:03:95:f6:6a:48:97:50:97:b9:ff:c3:9d:b7:8c:c1:09:9f: cd:43:f3:45:ac:cf:04:81:3e:a2:7a:db:a7:62:0b:1f:1d:a7: 4a:b7:03:27:fd:58:d3:4a:00:5c:16:ac:c5:e9:50:0c:8d:54: cf:15:ac:73:91:b8:84:be:fb:5e:8c:51:4b:ec:30:14:b6:2e: f7:a2:00:64:1a:43:91:c4:86:a7:6c:4c:e0:20:fb:80:44:a1: 37:96:f2:29:ad:c7:68:29:1f:7f:12:51:64:3a:90:8d:d3:f7: ab:f7:75:9a:0d:80:5a:cf:25:7c:f6:db:90:b8:10:67:a0:fa: 85:0d:c8:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JL/qDmY4LVAcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZmNjZGY0NDctMTI3YS00OTE1LTllYTYtYjllYTM4YWZmODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuEyci/g6fuM23JlpBK7c1Mwwp1X119fspSj UiTM06wQP+sUBiR5EDEkFj5gL2aA1ZyvKhN4nHaFTFTiahxy4srLB8o7wu0yjc9N sHxskXTTxzc8vGacVrkZ7A9v0K8W1QIk5J2wY6E3Rx8B2Jl8m/vh36DRGpfc4j+S MVlqkFHm0Oje29XOYp8ECwW0e7gaQl4EfT385CS7xRFvXPN2qy/bPTmVgXGv7Ot/ stGqPtjT/orr9dJt79N8nNaUW2Gg0nYG6TUCkg3pmeCmaAT7Drsgcm+Xl5CLC2ct NdNg2SiUWegCONuZIb4ATZTX6KqwtdppYzo/R0v90glQJe0CzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnNJHIV3jYtFQaaRWH3gE28bhs1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTQ5OTMwMjYtMjQxNC0z OTc0LWE5MjEtMGVlMmE2YTlhMjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9MOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACw56wG6RCKFo37NF3y3jsjn2KoPXr5mw3D5vTlF6Ls2oabKyMVfPTEx giu6Txcn1JY2mQFovMFpO+WDnzv0cV26gZnLlqwXtG5yC6V55Mjx/eSfVkqDx1nm XjzNPeALB2+fGaXsXALpowdlOT++8pd4Dv5YQ1aGFriLsM3OBvQDlfZqSJdQl7n/ w523jMEJn81D80WszwSBPqJ626diCx8dp0q3Ayf9WNNKAFwWrMXpUAyNVM8VrHOR uIS++16MUUvsMBS2LveiAGQaQ5HEhqdsTOAg+4BEoTeW8imtx2gpH38SUWQ6kI3T 96v3dZoNgFrPJXz225C4EGeg+oUNyDE= -----END CERTIFICATE-----Generated at Sat Apr 26 18:05:52 2025 by rpki-client