$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ca722c5-aff2-3ecd-b6d4-20b288d8cb67.roa File: 5ca722c5-aff2-3ecd-b6d4-20b288d8cb67.roa (raw, json) Hash identifier: 5fTYBXF9I4NodcmrB/l4F96w5NYLm2GAqad3GvJB16Y= Subject key identifier: D9:39:A8:0E:A0:B8:15:EE:74:67:D4:EC:05:02:0D:F5:CF:B0:DD:E0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858497279C16C9B79D30DC2F51100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ca722c5-aff2-3ecd-b6d4-20b288d8cb67.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.207.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:c1:6c:9b:79:d3:0d:c2:f5:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=59de0ad6-76de-483c-84fb-108db7744dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5e:2c:96:ec:96:ff:92:cd:e3:16:a2:12:b3: 1f:fe:af:7c:26:6f:75:0a:26:56:19:1e:53:89:e0: 32:ac:16:1d:7e:44:b3:6a:ab:dd:08:f9:30:78:e3: 4d:42:d7:a9:71:6b:a6:db:52:e7:cb:e7:18:a5:7e: 1b:43:2f:8a:84:0c:4c:af:a0:fb:20:0c:7e:d0:2b: 61:03:f6:80:f6:91:eb:1e:4e:80:75:18:71:55:40: 79:f9:73:6b:78:95:30:38:bc:63:73:2e:ee:27:3f: f0:ee:39:a1:ed:12:f6:1a:79:cd:e3:10:04:65:b7: 78:a6:f4:a5:5a:89:2b:c8:da:42:08:31:87:7c:11: ca:34:43:46:61:8f:e8:ea:87:59:65:11:3c:90:bc: 97:4d:58:ed:43:82:00:9f:f7:8f:2c:82:51:20:26: 5c:b1:85:4d:2e:a3:db:b3:2d:57:b1:1f:f5:68:70: c5:08:07:ef:db:e9:24:b9:4b:21:d9:e4:95:e9:3f: 34:e7:b8:f0:04:ed:30:51:e9:ba:fa:19:28:89:5a: 63:5d:d9:41:fd:b6:3f:ca:91:7e:47:ff:d8:a2:7d: 56:f8:f1:ee:bf:fc:09:c4:c4:52:b3:9b:07:89:b2: 10:f9:96:3f:65:4e:5f:08:c2:f9:48:7d:66:32:39: 8c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:39:A8:0E:A0:B8:15:EE:74:67:D4:EC:05:02:0D:F5:CF:B0:DD:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ca722c5-aff2-3ecd-b6d4-20b288d8cb67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:81:92:fa:3f:82:d6:5c:2c:55:5b:92:19:3f:58:ff:2a:a7: c9:97:16:85:b6:5f:1b:de:50:d9:40:5a:83:36:73:2d:33:50: 67:77:85:d1:ee:2c:7b:b9:1a:b8:2c:75:13:c7:de:9f:7d:18: c4:dd:b8:34:7b:24:47:3a:f1:00:e1:19:93:eb:77:c6:5d:a7: 74:9f:71:f3:10:3f:77:e6:46:2a:f5:8a:2b:84:51:86:86:53: f8:12:b9:10:f2:ef:bc:43:1a:78:f0:f8:fe:c1:ea:17:23:02: 02:65:87:7d:c7:6b:76:c7:8b:38:23:6e:8a:23:6e:df:58:7f: 26:43:eb:5b:08:0e:62:20:b4:36:1a:cc:6e:9b:49:23:f9:8d: 48:e7:c5:d1:77:18:64:72:58:4c:62:f7:e1:90:10:07:6d:c2: b7:76:2d:16:05:53:a4:11:be:4b:03:56:59:47:21:de:7d:97: 9e:9c:13:ac:bb:22:1d:9c:a4:bf:b4:f2:94:a5:2b:06:09:6f: c7:fb:17:e0:10:81:41:70:0f:f0:01:0b:25:f3:9a:f5:16:3c: fb:b4:42:0a:58:ce:5d:bb:d6:2c:d2:94:ee:04:d0:3c:81:5b: 48:72:bd:03:18:ee:ab:7a:cd:58:f9:02:d1:ab:0e:e9:39:4f: e3:80:f3:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyecFsm3nTDcL1EQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk NTlkZTBhZDYtNzZkZS00ODNjLTg0ZmItMTA4ZGI3NzQ0ZGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV4sluyW/5LN4xaiErMf/q98Jm91CiZWGR5T ieAyrBYdfkSzaqvdCPkweONNQtepcWum21Lny+cYpX4bQy+KhAxMr6D7IAx+0Cth A/aA9pHrHk6AdRhxVUB5+XNreJUwOLxjcy7uJz/w7jmh7RL2GnnN4xAEZbd4pvSl WokryNpCCDGHfBHKNENGYY/o6odZZRE8kLyXTVjtQ4IAn/ePLIJRICZcsYVNLqPb sy1XsR/1aHDFCAfv2+kkuUsh2eSV6T8057jwBO0wUem6+hkoiVpjXdlB/bY/ypF+ R//Yon1W+PHuv/wJxMRSs5sHibIQ+ZY/ZU5fCML5SH1mMjmMEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNk5qA6guBXudGfU7AUCDfXPsN3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWNhNzIyYzUtYWZmMi0z ZWNkLWI2ZDQtMjBiMjg4ZDhjYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqBkvo/gtZcLFVbkhk/WP8qp8mXFoW2XxveUNlAWoM2cy0zUGd3hdHu LHu5GrgsdRPH3p99GMTduDR7JEc68QDhGZPrd8Zdp3SfcfMQP3fmRir1iiuEUYaG U/gSuRDy77xDGnjw+P7B6hcjAgJlh33Ha3bHizgjboojbt9YfyZD61sIDmIgtDYa zG6bSSP5jUjnxdF3GGRyWExi9+GQEAdtwrd2LRYFU6QRvksDVllHId59l56cE6y7 Ih2cpL+08pSlKwYJb8f7F+AQgUFwD/ABCyXzmvUWPPu0QgpYzl271izSlO4E0DyB W0hyvQMY7qt6zVj5AtGrDuk5T+OA8wU= -----END CERTIFICATE-----Generated at Sat Apr 26 16:06:27 2025 by rpki-client