$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e64f9b7-5763-3134-87bb-32b8c772c4f4.roa File: 5e64f9b7-5763-3134-87bb-32b8c772c4f4.roa (raw, json) Hash identifier: /1jEm95SStrlxAyIVkcSgZDGYu7G1AsA8t8FxLPmpcQ= Subject key identifier: 6F:73:46:09:55:15:E9:E6:A7:5C:E0:D4:25:99:EA:66:EF:FB:1A:FF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF4A1270D05FF899BA7A640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e64f9b7-5763-3134-87bb-32b8c772c4f4.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 35994 IP address blocks: 23.213.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:a1:27:0d:05:ff:89:9b:a7:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=2d90cc5f-e568-419d-9c9c-e37f5aceacba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:04:26:4a:fc:b1:a0:a2:93:96:f4:4c:68:bb: fa:e5:7d:c0:9d:8c:00:b9:47:54:33:c0:5b:23:92: 14:c2:d5:e2:15:56:cd:be:09:9c:5f:86:4a:f8:6a: 4c:47:92:d8:c6:04:e2:d1:78:20:5b:8d:d6:b5:b0: 2b:6e:eb:90:0f:1d:f2:1e:36:c4:af:d1:ab:af:e2: 74:0b:c3:0d:c9:19:a8:57:87:a1:79:4e:ec:99:30: 4f:59:64:13:53:2b:0a:80:6f:7a:18:96:bb:73:9f: c7:06:9e:6b:31:5c:ef:0b:fb:84:24:aa:3d:0f:1a: ed:88:b3:cf:89:b0:24:87:b2:af:13:b9:8e:57:dd: 74:63:c6:33:42:63:f8:4d:48:e3:0a:bc:25:08:75: d3:ba:cd:e9:d0:ed:70:de:3d:90:a4:88:84:6c:4c: 08:1b:bc:df:f4:c3:41:b6:f6:1f:62:0b:32:6c:2d: b1:e7:e7:46:56:f2:82:5b:65:66:01:f3:66:e6:35: 7d:a7:e2:23:ef:6a:f3:c7:2e:7d:d4:f9:46:a0:dd: 22:50:42:ec:80:40:36:45:7f:dc:57:15:ee:ef:f1: 97:1b:8a:27:9e:01:d8:2b:15:0c:95:9e:4a:2b:a7: b3:43:5e:a7:18:25:7d:6e:97:21:4b:49:1c:44:c0: 9c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:73:46:09:55:15:E9:E6:A7:5C:E0:D4:25:99:EA:66:EF:FB:1A:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e64f9b7-5763-3134-87bb-32b8c772c4f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c7:d1:5c:37:41:c4:84:0d:01:2e:dd:7f:35:be:53:5d:fb: a2:73:5c:ba:42:45:d9:12:bc:b4:f0:e1:f7:bb:75:27:f4:e4: 8e:8f:98:08:46:e2:d1:08:1f:50:1a:a3:44:03:fb:1d:7d:b8: 35:d4:f7:21:78:c4:f2:8f:6c:9d:37:b5:22:53:93:da:84:23: ea:fc:fa:8d:32:eb:29:16:4f:3e:b4:22:e3:2d:94:ee:4d:e2: cd:10:32:3e:ca:11:e6:3a:df:8b:d0:44:d4:b3:f8:a1:03:aa: ca:7f:6d:b4:c3:c8:a4:ee:47:b0:ca:fe:06:93:9d:9c:8f:0e: 87:b9:46:87:ad:04:ef:a0:30:0e:4e:12:82:1e:32:41:b1:be: 7d:83:42:24:73:7e:ff:89:8e:4f:db:be:6b:57:77:b5:72:bb: f9:e8:24:bd:7e:00:0b:6b:b7:89:71:a1:3b:47:b6:9c:47:5d: ae:5e:20:3c:00:08:48:ca:d4:86:5c:83:b5:e1:3e:39:ed:20: 54:b4:01:06:03:6e:8e:2d:a7:23:af:70:15:8c:88:e3:2c:25: fd:c9:ff:67:b2:99:6d:4a:14:5e:fd:a0:60:9d:bf:16:73:8f: 4c:4e:c3:45:59:54:1d:15:5e:ca:4f:00:dc:2a:ca:db:9b:b2: 00:55:d7:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9KEnDQX/iZunpkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MmQ5MGNjNWYtZTU2OC00MTlkLTljOWMtZTM3ZjVhY2VhY2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwQmSvyxoKKTlvRMaLv65X3AnYwAuUdUM8Bb I5IUwtXiFVbNvgmcX4ZK+GpMR5LYxgTi0XggW43WtbArbuuQDx3yHjbEr9Grr+J0 C8MNyRmoV4eheU7smTBPWWQTUysKgG96GJa7c5/HBp5rMVzvC/uEJKo9DxrtiLPP ibAkh7KvE7mOV910Y8YzQmP4TUjjCrwlCHXTus3p0O1w3j2QpIiEbEwIG7zf9MNB tvYfYgsybC2x5+dGVvKCW2VmAfNm5jV9p+Ij72rzxy591PlGoN0iUELsgEA2RX/c VxXu7/GXG4onngHYKxUMlZ5KK6ezQ16nGCV9bpchS0kcRMCcmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9zRglVFenmp1zg1CWZ6mbv+xr/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWU2NGY5YjctNTc2My0z MTM0LTg3YmItMzJiOGM3NzJjNGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9WsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzH0Vw3QcSEDQEu3X81vlNd+6JzXLpCRdkSvLTw4fe7dSf05I6PmAhG 4tEIH1Aao0QD+x19uDXU9yF4xPKPbJ03tSJTk9qEI+r8+o0y6ykWTz60IuMtlO5N 4s0QMj7KEeY634vQRNSz+KEDqsp/bbTDyKTuR7DK/gaTnZyPDoe5RoetBO+gMA5O EoIeMkGxvn2DQiRzfv+Jjk/bvmtXd7Vyu/noJL1+AAtrt4lxoTtHtpxHXa5eIDwA CEjK1IZcg7XhPjntIFS0AQYDbo4tpyOvcBWMiOMsJf3J/2eymW1KFF79oGCdvxZz j0xOw0VZVB0VXspPANwqytubsgBV19A= -----END CERTIFICATE-----Generated at Sun Apr 27 12:58:51 2025 by rpki-client