$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d7e029f-2f7c-36fa-bc22-3c41f8a48773.roa File: 5d7e029f-2f7c-36fa-bc22-3c41f8a48773.roa (raw, json) Hash identifier: Supe76g2aysfRIsLVKnqnRZmib3CCWdMx/HTvjl/S6M= Subject key identifier: 39:EF:34:B0:30:11:9F:01:48:2B:F1:58:AE:92:C0:6A:42:24:F4:23 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF438D9045367F75416550 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d7e029f-2f7c-36fa-bc22-3c41f8a48773.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 16625 IP address blocks: 23.217.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:43:8d:90:45:36:7f:75:41:65:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=b01b3bf0-0baf-4bb4-a64a-818e960022c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5f:52:0e:54:67:e4:98:e7:3e:72:53:26:a5: a2:f9:00:e7:80:f8:a0:f2:1a:5c:c5:51:e0:23:4c: b4:ac:72:6d:c5:af:b3:6a:a6:96:17:7e:69:16:d1: 18:05:46:ff:c1:2b:be:7a:03:4e:10:f0:c4:a8:3d: 62:26:18:15:09:75:58:a2:9f:28:5c:c4:7e:11:ef: 2a:87:d7:3d:10:8f:2a:1b:4d:e1:45:a1:29:27:92: 5e:28:60:00:dc:6e:f3:62:45:87:6d:9b:1a:04:9b: 5d:e1:10:0c:2c:b9:a0:24:aa:3e:59:a3:70:a3:b7: 6f:09:51:f9:03:04:40:45:df:51:8c:95:fb:a6:af: 3a:e8:b3:95:01:56:c0:e1:24:37:ae:3b:b3:79:a7: 07:ac:8a:90:49:87:8c:4e:45:47:c4:7f:35:6a:10: 87:33:a8:76:53:9b:35:6b:d1:7b:c1:3b:82:49:08: af:28:e1:cf:0e:fa:df:b8:d2:65:6f:e7:0a:53:2a: e0:75:4e:77:6b:4e:98:b6:52:1e:da:e1:09:58:20: c0:c1:2c:a6:b8:b9:a8:fe:05:a8:99:fc:b2:ac:21: 91:f0:d5:e3:4a:07:ba:4e:f9:c8:c2:4e:6e:5d:e6: b4:29:d5:8c:26:b9:75:03:78:97:02:6f:09:62:51: 09:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EF:34:B0:30:11:9F:01:48:2B:F1:58:AE:92:C0:6A:42:24:F4:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d7e029f-2f7c-36fa-bc22-3c41f8a48773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:e2:a5:af:bd:6c:34:63:e4:37:79:21:08:e9:50:ae:2f:ec: 52:f6:4b:31:a0:17:16:98:c9:96:20:f6:e8:c5:72:2a:9d:f0: b4:9c:bb:0b:cf:bd:03:49:7e:b8:19:fc:14:95:60:c4:2d:c3: 7c:2a:16:11:61:6b:d8:ad:5c:19:52:18:cc:65:3e:02:ec:2c: c5:f1:c3:e9:6f:ee:8d:69:27:7e:80:f1:fe:96:9e:93:a9:4d: 7c:0c:2d:fc:a5:d9:b7:fb:82:8b:92:da:56:f3:f6:2d:bf:f7: c9:bc:9d:44:af:bb:43:79:af:b2:5c:08:c9:c7:0b:5a:39:9b: 1c:8f:36:b7:aa:91:b1:41:8f:90:3f:e0:52:d9:d1:63:80:f3: 60:e5:39:eb:59:cb:60:39:37:30:fd:48:bf:9a:89:c6:17:4f: 32:e7:01:3d:e9:ab:c8:82:20:77:89:a3:73:a7:49:50:87:13: c6:ad:36:7c:b9:25:a0:77:2b:e2:43:92:b3:8a:da:0d:80:cd: fe:be:54:be:4f:9d:38:81:5a:5a:eb:c3:fa:29:5a:6f:75:fd: 3d:b8:97:5b:aa:fc:68:2a:19:77:db:fd:69:4b:13:89:3e:f6: 2c:57:de:ef:3f:46:3f:b3:1b:84:e0:eb:19:86:30:b6:79:3f: 16:3b:8d:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0ONkEU2f3VBZVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk YjAxYjNiZjAtMGJhZi00YmI0LWE2NGEtODE4ZTk2MDAyMmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh19SDlRn5JjnPnJTJqWi+QDngPig8hpcxVHg I0y0rHJtxa+zaqaWF35pFtEYBUb/wSu+egNOEPDEqD1iJhgVCXVYop8oXMR+Ee8q h9c9EI8qG03hRaEpJ5JeKGAA3G7zYkWHbZsaBJtd4RAMLLmgJKo+WaNwo7dvCVH5 AwRARd9RjJX7pq866LOVAVbA4SQ3rjuzeacHrIqQSYeMTkVHxH81ahCHM6h2U5s1 a9F7wTuCSQivKOHPDvrfuNJlb+cKUyrgdU53a06YtlIe2uEJWCDAwSymuLmo/gWo mfyyrCGR8NXjSge6TvnIwk5uXea0KdWMJrl1A3iXAm8JYlEJPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnvNLAwEZ8BSCvxWK6SwGpCJPQjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWQ3ZTAyOWYtMmY3Yy0z NmZhLWJjMjItM2M0MWY4YTQ4NzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF9ngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7ipa+9bDRj5Dd5IQjpUK4v7FL2SzGgFxaYyZYg9ujFciqd8LScuwvP vQNJfrgZ/BSVYMQtw3wqFhFha9itXBlSGMxlPgLsLMXxw+lv7o1pJ36A8f6WnpOp TXwMLfyl2bf7gouS2lbz9i2/98m8nUSvu0N5r7JcCMnHC1o5mxyPNreqkbFBj5A/ 4FLZ0WOA82DlOetZy2A5NzD9SL+aicYXTzLnAT3pq8iCIHeJo3OnSVCHE8atNny5 JaB3K+JDkrOK2g2Azf6+VL5PnTiBWlrrw/opWm91/T24l1uq/GgqGXfb/WlLE4k+ 9ixX3u8/Rj+zG4Tg6xmGMLZ5PxY7jfg= -----END CERTIFICATE-----Generated at Sun Apr 27 09:16:43 2025 by rpki-client