$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/561ec934-7ae3-325f-a4ef-17b705ae6a1c.roa File: 561ec934-7ae3-325f-a4ef-17b705ae6a1c.roa (raw, json) Hash identifier: LGkVswxnOW/VGZZnzDvwNQX/GyVI0J5Cio7773O+TD8= Subject key identifier: A7:C1:A8:6C:91:4B:2F:64:6F:F1:5D:F5:92:63:B5:F9:28:59:05:D7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF4A1537C3BAF2B1722D6E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/561ec934-7ae3-325f-a4ef-17b705ae6a1c.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.213.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:a1:53:7c:3b:af:2b:17:22:d6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=21ce87d4-1ed8-42c7-a529-3b5316a0c7d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:87:16:6c:6c:cb:b3:b8:63:f6:2b:17:fe:bd: 2c:6b:1f:a3:95:ab:98:58:53:55:a1:a2:b5:d4:8b: c9:9d:ba:c0:dc:56:ba:ef:c0:4c:41:a7:7a:2d:91: a0:ea:0b:30:0e:93:42:33:c5:19:01:db:66:02:07: 9a:fb:23:b8:a5:03:7e:aa:c1:7c:6a:1d:5e:17:a7: 88:bd:96:ae:e5:9e:98:5a:67:27:9e:18:57:66:6e: da:f0:b1:bb:6e:52:d3:86:65:b8:09:56:72:6f:be: 07:63:b4:84:17:6d:25:38:6d:83:08:5a:76:f3:5f: 0b:32:c4:e6:f7:11:4c:8f:37:29:6f:21:64:83:50: b6:b0:fa:24:de:ee:3c:eb:60:7e:95:3d:ec:0c:2e: e0:76:5e:ae:19:7f:66:c2:c6:ac:ef:43:a0:b5:20: a3:32:eb:20:37:d3:e3:80:57:8d:7e:79:3b:95:9f: 16:38:a2:0c:7f:5a:d4:b4:a2:bb:76:5e:72:9b:52: 5c:43:ce:02:15:48:55:2f:6b:f5:ad:3f:70:6f:08: 71:a3:1a:2e:6e:9e:7e:c4:eb:49:d1:9f:00:04:3d: 8f:dd:92:bf:55:38:f3:8d:07:61:08:a9:fd:92:bc: 0a:aa:5b:f1:07:b5:53:2a:06:84:66:8c:03:d8:ea: ec:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C1:A8:6C:91:4B:2F:64:6F:F1:5D:F5:92:63:B5:F9:28:59:05:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/561ec934-7ae3-325f-a4ef-17b705ae6a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:21:61:09:f5:0e:30:f8:c9:d9:bf:ef:7e:3b:da:37:b9:dd: a9:0c:78:ac:24:8f:cd:24:e6:83:02:93:c9:81:a6:ff:37:54: 0b:44:6c:1f:b4:c2:96:3e:0f:d0:b6:c7:8f:87:c9:40:61:fd: 6e:45:11:db:4f:b3:18:fc:a9:e1:57:45:0c:97:5c:8e:99:b8: 1e:61:76:4d:b9:69:96:9d:b2:c9:6d:35:7d:38:ec:22:2d:38: 73:aa:94:b6:77:ea:9e:27:a9:74:4e:62:50:98:fa:b9:8c:98: aa:b4:15:b9:ac:33:80:9f:36:6c:c8:8d:bd:3c:c3:d9:0f:17: 09:cf:b8:42:ad:d8:0e:b9:db:d2:81:30:5b:1c:1e:75:e9:9f: 8e:68:ec:6a:11:eb:d0:f7:0f:85:ac:1d:8d:24:bc:49:b8:18: d2:9b:23:73:d9:6f:11:e0:1c:2f:b9:ab:8f:ee:53:93:a5:f9: 8c:e3:28:44:0f:a7:d3:e7:ff:f2:f7:3b:e3:02:13:e2:2b:1d: b7:d9:bd:0e:33:92:c4:22:19:e8:a1:bb:4d:37:77:92:12:8f: 80:37:61:a1:fd:a1:08:34:62:38:25:da:2e:9e:cd:1f:e0:17: df:23:31:0c:69:25:48:0c:f7:c8:56:f7:20:9b:f2:d6:60:ba: 16:3c:21:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9KFTfDuvKxci1uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MjFjZTg3ZDQtMWVkOC00MmM3LWE1MjktM2I1MzE2YTBjN2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YcWbGzLs7hj9isX/r0sax+jlauYWFNVoaK1 1IvJnbrA3Fa678BMQad6LZGg6gswDpNCM8UZAdtmAgea+yO4pQN+qsF8ah1eF6eI vZau5Z6YWmcnnhhXZm7a8LG7blLThmW4CVZyb74HY7SEF20lOG2DCFp2818LMsTm 9xFMjzcpbyFkg1C2sPok3u4862B+lT3sDC7gdl6uGX9mwsas70OgtSCjMusgN9Pj gFeNfnk7lZ8WOKIMf1rUtKK7dl5ym1JcQ84CFUhVL2v1rT9wbwhxoxoubp5+xOtJ 0Z8ABD2P3ZK/VTjzjQdhCKn9krwKqlvxB7VTKgaEZowD2OrsfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfBqGyRSy9kb/Fd9ZJjtfkoWQXXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTYxZWM5MzQtN2FlMy0z MjVmLWE0ZWYtMTdiNzA1YWU2YTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9XEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABchYQn1DjD4ydm/73472je53akMeKwkj80k5oMCk8mBpv83VAtEbB+0 wpY+D9C2x4+HyUBh/W5FEdtPsxj8qeFXRQyXXI6ZuB5hdk25aZadssltNX047CIt OHOqlLZ36p4nqXROYlCY+rmMmKq0FbmsM4CfNmzIjb08w9kPFwnPuEKt2A6529KB MFscHnXpn45o7GoR69D3D4WsHY0kvEm4GNKbI3PZbxHgHC+5q4/uU5Ol+YzjKEQP p9Pn//L3O+MCE+IrHbfZvQ4zksQiGeihu003d5ISj4A3YaH9oQg0Yjgl2i6ezR/g F98jMQxpJUgM98hW9yCb8tZguhY8IdA= -----END CERTIFICATE-----Generated at Sat Apr 26 16:04:23 2025 by rpki-client