$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63f4c37b-9755-346e-8d25-b512e05cafa4.roa File: 63f4c37b-9755-346e-8d25-b512e05cafa4.roa (raw, json) Hash identifier: wTwTWK23uK80e6k7IDbFpHHfZMqFNANS/aPcot2BYZ8= Subject key identifier: DE:99:91:67:24:8F:97:89:E9:5C:84:C1:1F:0B:82:04:FD:99:69:6E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF705F4D58201CDEC16EA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63f4c37b-9755-346e-8d25-b512e05cafa4.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 16625 IP address blocks: 23.203.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:70:5f:4d:58:20:1c:de:c1:6e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=874279d7-95a5-4ccd-882b-7b62c27f14da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9d:3f:b8:1d:54:0a:8d:a0:df:2d:62:15:ff: cb:f8:8f:85:d6:5d:67:30:14:13:27:f0:c7:08:99: 4a:92:e5:91:04:40:a6:56:e5:da:cc:2d:e4:a8:0c: 47:af:64:90:78:a7:36:1f:b4:f8:8a:d8:eb:6b:75: 18:f0:8f:d3:8f:73:14:c5:4e:9c:be:03:6f:54:6c: 06:51:62:36:22:1d:90:48:6c:5e:3a:ec:97:6e:ba: 8b:9b:fd:ec:f9:fd:d5:12:bf:d5:85:91:37:18:96: d4:96:89:72:02:b0:65:10:09:db:ef:19:48:da:2b: 2b:51:a0:e2:8c:b2:94:f1:fd:b0:7e:24:cc:3d:a9: 86:7f:4f:75:41:a7:8c:0c:7a:9a:8a:b1:bf:d3:4e: 9b:7e:d4:92:e0:38:ea:e7:be:5a:f7:45:ae:de:1d: 5f:c2:5a:20:44:a6:1d:63:b1:13:0c:87:ff:b5:d3: e0:70:3e:9c:d4:77:7a:b5:6f:27:04:f1:7a:f4:ea: b5:fe:4e:af:6f:c5:1c:c0:b0:a6:5a:df:5b:41:3b: 6e:b3:66:5f:08:a5:9b:04:45:0b:45:83:3c:9f:a7: e6:93:99:41:9c:93:18:c3:ca:c4:f0:7b:c8:85:db: b0:ec:a9:ff:e7:ca:04:bb:3b:ca:f7:28:73:15:2a: cf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:99:91:67:24:8F:97:89:E9:5C:84:C1:1F:0B:82:04:FD:99:69:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63f4c37b-9755-346e-8d25-b512e05cafa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:00:3a:01:38:07:79:50:25:24:84:48:aa:ba:e0:37:3d:90: 4c:b4:0e:ed:13:6d:77:ec:73:ec:1d:6d:80:aa:5b:61:b8:a8: c1:e6:10:92:d1:f7:00:c9:c6:04:00:56:3d:48:ed:c6:e5:71: c2:1f:61:6a:ea:f2:1d:c6:8e:67:a8:13:43:cf:72:06:55:dd: 10:1b:5f:7f:f3:08:97:0e:11:ce:c7:05:44:59:f5:e5:d0:01: b6:cb:dc:5a:c9:fc:de:5b:10:0e:2d:aa:4d:29:ec:25:8d:3e: 10:f9:6b:bb:89:1c:15:48:d5:f3:f8:11:46:cf:67:c1:4a:6c: b7:f0:55:d2:6f:cf:bd:a0:b0:d7:a5:9f:ae:26:66:dc:a0:86: 52:e9:c0:70:8d:bf:12:d1:d7:a4:ab:5a:8d:48:aa:b3:38:de: b6:3d:ec:ad:77:cf:e0:49:48:a8:c1:cd:78:64:c5:86:12:7a: 02:97:18:36:20:09:01:cd:8a:c8:28:d1:7f:6c:33:f0:cd:80: 6b:2f:90:2a:9b:38:a4:8a:b4:c2:7f:d6:2c:70:db:fc:d9:c7: ce:ca:7c:da:b1:27:f3:87:07:25:dd:10:70:a6:41:d9:f3:80: ba:13:38:54:0b:2b:9e:67:cd:c8:3b:ef:9d:53:70:b8:c4:7f: 03:3f:75:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz3BfTVggHN7BbqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk ODc0Mjc5ZDctOTVhNS00Y2NkLTg4MmItN2I2MmMyN2YxNGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ0/uB1UCo2g3y1iFf/L+I+F1l1nMBQTJ/DH CJlKkuWRBECmVuXazC3kqAxHr2SQeKc2H7T4itjra3UY8I/Tj3MUxU6cvgNvVGwG UWI2Ih2QSGxeOuyXbrqLm/3s+f3VEr/VhZE3GJbUlolyArBlEAnb7xlI2isrUaDi jLKU8f2wfiTMPamGf091QaeMDHqairG/006bftSS4Djq575a90Wu3h1fwlogRKYd Y7ETDIf/tdPgcD6c1Hd6tW8nBPF69Oq1/k6vb8UcwLCmWt9bQTtus2ZfCKWbBEUL RYM8n6fmk5lBnJMYw8rE8HvIhduw7Kn/58oEuzvK9yhzFSrPXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6ZkWckj5eJ6VyEwR8LggT9mWluMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjNmNGMzN2ItOTc1NS0z NDZlLThkMjUtYjUxMmUwNWNhZmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF8tIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYAOgE4B3lQJSSESKq64Dc9kEy0Du0TbXfsc+wdbYCqW2G4qMHmEJLR 9wDJxgQAVj1I7cblccIfYWrq8h3GjmeoE0PPcgZV3RAbX3/zCJcOEc7HBURZ9eXQ AbbL3FrJ/N5bEA4tqk0p7CWNPhD5a7uJHBVI1fP4EUbPZ8FKbLfwVdJvz72gsNel n64mZtyghlLpwHCNvxLR16SrWo1IqrM43rY97K13z+BJSKjBzXhkxYYSegKXGDYg CQHNisgo0X9sM/DNgGsvkCqbOKSKtMJ/1ixw2/zZx87KfNqxJ/OHByXdEHCmQdnz gLoTOFQLK55nzcg7751TcLjEfwM/dSE= -----END CERTIFICATE-----Generated at Mon Apr 28 17:06:56 2025 by rpki-client