$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5504b207-7660-355d-b4d1-b8608879b4e0.roa File: 5504b207-7660-355d-b4d1-b8608879b4e0.roa (raw, json) Hash identifier: 1wwHMXR+WDE+6gUSF3F2GgGCGJ1I6nWvSLxnz3fPeMI= Subject key identifier: D1:4B:47:AB:F4:CB:E0:14:85:B7:04:5E:D6:FA:B3:3D:39:CD:99:0C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF48D7C3E63FDFDF8DF900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5504b207-7660-355d-b4d1-b8608879b4e0.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.217.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:48:d7:c3:e6:3f:df:df:8d:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=ad3f52dd-8e0e-4d7a-91f3-e120b9b3c2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5e:91:24:f5:b7:75:b9:70:90:74:69:19:bc: 67:1a:67:8b:9e:c0:7c:e6:e4:30:51:90:2e:59:bf: 54:f2:ea:af:d5:61:45:88:cb:8d:de:08:e8:b6:31: 0a:22:14:9c:ac:eb:46:8b:f6:44:74:13:ef:39:8b: f9:d9:57:cb:7e:87:69:a1:7a:66:be:f9:ed:53:d1: 8f:70:93:81:74:50:d2:5d:4d:f2:f4:b5:9f:e0:92: 9f:f2:5a:e8:ac:49:9e:49:99:28:86:ee:c9:b2:7d: 4b:9d:e4:c3:a9:b3:9a:1f:5c:b1:50:05:38:08:12: 09:6e:52:52:5a:a6:2c:a7:b5:1a:68:49:8a:ac:ae: 5b:d6:36:a4:78:76:8f:d0:90:35:f4:15:6b:8c:f6: 93:48:15:c9:8d:0a:c8:80:83:fe:6d:13:e7:c2:1f: 18:44:90:1b:f0:53:4e:a5:e4:73:c7:b9:b7:10:3f: 9d:17:10:5f:68:48:e2:9d:df:c4:b2:c5:a4:a4:ca: 69:5f:2a:71:7a:ea:9f:eb:ca:17:e8:1f:4d:cc:51: e1:db:f5:92:85:45:e1:61:15:81:36:21:52:a0:3a: 7b:4b:a8:cb:73:02:63:23:98:3c:f0:f9:c2:f5:cc: e1:a9:90:b6:74:56:2b:2c:72:5c:60:57:22:5b:00: a4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4B:47:AB:F4:CB:E0:14:85:B7:04:5E:D6:FA:B3:3D:39:CD:99:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5504b207-7660-355d-b4d1-b8608879b4e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:70:b0:95:3c:3c:bd:74:ce:f5:a0:8b:75:01:b9:63:70:a7: e6:a8:a9:48:fd:33:11:71:c3:bb:c9:95:a2:ed:67:39:5c:6b: 06:9f:fc:97:e1:2b:07:f7:80:58:05:56:e5:65:1a:d7:66:51: fc:84:ff:e3:3b:39:c3:46:4d:27:45:cb:b9:d7:0c:96:6b:81: b4:52:ad:af:e6:de:79:c1:7c:08:8c:ff:a7:f5:f3:a3:7c:a8: f5:ce:36:ae:70:3b:93:e3:f4:c2:f9:84:be:ad:25:85:93:35: 31:9c:d7:70:70:4e:d0:50:6a:e9:29:d3:a1:ba:a0:17:e0:47: 2e:28:1c:6b:62:f3:1e:8b:8b:e8:97:fb:42:bd:d4:f5:11:4f: 87:97:32:af:5b:be:d3:cf:67:85:10:64:b9:9c:f0:15:c8:e5: a0:1e:2e:b9:89:4c:fb:93:7a:d8:b6:e6:b9:00:88:27:e9:cd: c1:33:a1:05:ff:96:27:64:11:d2:a6:3d:e9:e4:f4:dc:81:63: 56:0a:66:be:5b:8c:d0:5c:ce:ed:36:3e:43:a2:a0:36:75:74: 11:34:98:05:c6:5f:30:6c:c1:71:c1:f4:de:4a:b6:11:18:dd: af:95:10:68:2c:34:a5:d7:ac:ef:73:4d:71:61:fa:9a:0d:f6: 48:52:31:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0jXw+Y/39+N+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk YWQzZjUyZGQtOGUwZS00ZDdhLTkxZjMtZTEyMGI5YjNjMmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo16RJPW3dblwkHRpGbxnGmeLnsB85uQwUZAu Wb9U8uqv1WFFiMuN3gjotjEKIhScrOtGi/ZEdBPvOYv52VfLfodpoXpmvvntU9GP cJOBdFDSXU3y9LWf4JKf8lrorEmeSZkohu7Jsn1LneTDqbOaH1yxUAU4CBIJblJS WqYsp7UaaEmKrK5b1jakeHaP0JA19BVrjPaTSBXJjQrIgIP+bRPnwh8YRJAb8FNO peRzx7m3ED+dFxBfaEjind/EssWkpMppXypxeuqf68oX6B9NzFHh2/WShUXhYRWB NiFSoDp7S6jLcwJjI5g88PnC9czhqZC2dFYrLHJcYFciWwCkeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFLR6v0y+AUhbcEXtb6sz05zZkMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTUwNGIyMDctNzY2MC0z NTVkLWI0ZDEtYjg2MDg4NzliNGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9luMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRwsJU8PL10zvWgi3UBuWNwp+aoqUj9MxFxw7vJlaLtZzlcawaf/Jfh Kwf3gFgFVuVlGtdmUfyE/+M7OcNGTSdFy7nXDJZrgbRSra/m3nnBfAiM/6f186N8 qPXONq5wO5Pj9ML5hL6tJYWTNTGc13BwTtBQaukp06G6oBfgRy4oHGti8x6Li+iX +0K91PURT4eXMq9bvtPPZ4UQZLmc8BXI5aAeLrmJTPuTeti25rkAiCfpzcEzoQX/ lidkEdKmPenk9NyBY1YKZr5bjNBczu02PkOioDZ1dBE0mAXGXzBswXHB9N5KthEY 3a+VEGgsNKXXrO9zTXFh+poN9khSMZs= -----END CERTIFICATE-----Generated at Sat Apr 26 19:22:59 2025 by rpki-client