$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/708736cc-6bb7-351c-8bbd-c46d652acb06.roa File: 708736cc-6bb7-351c-8bbd-c46d652acb06.roa (raw, json) Hash identifier: wJcd8NhkPkG2XkhgOuwDCJiF/TP+z0VfV4Tn34i1moo= Subject key identifier: A9:0D:84:08:B9:A0:F5:10:88:F5:6A:8E:CA:4A:69:FA:6A:4D:90:48 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF49FC13D8BB53F56E61DD0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/708736cc-6bb7-351c-8bbd-c46d652acb06.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.212.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:9f:c1:3d:8b:b5:3f:56:e6:1d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=54cdf252-bfc2-4d56-be24-c506e1436eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b7:ee:11:b6:1f:7d:79:e9:f6:ef:44:89:97: fb:4d:d3:fd:22:5c:7c:34:28:f3:a7:0d:a7:f8:e7: 1c:d4:79:d9:16:d7:c3:5f:b0:7a:a6:fc:36:ad:bb: e0:bd:ea:4f:1c:2f:a4:01:d1:88:c1:f9:42:b4:7f: e4:1a:bb:fa:73:35:cd:5c:9e:8b:5a:b2:de:b3:74: a2:1a:4e:56:4c:fa:df:f8:9b:de:99:e7:20:89:08: e4:5f:1a:3f:e7:16:5f:9d:de:fe:f6:de:74:2e:b3: 62:0f:cc:7f:61:1e:66:40:c9:f1:0d:98:53:1d:b5: ab:c2:b4:60:c7:4c:9a:11:a2:10:3d:58:f8:dc:a4: 7d:2b:64:a4:de:81:d1:ca:83:0e:1b:50:02:7c:66: 30:d0:bc:f3:2a:78:8a:d2:1e:7a:37:4b:61:31:da: 1b:42:d7:1d:8b:1f:cc:47:99:58:8c:2c:b2:7f:2d: 74:50:20:90:ae:e2:55:36:84:a1:37:fc:a3:23:e1: ae:bd:97:03:98:da:0e:c0:82:c0:4a:a5:a2:c9:60: 1c:1c:7e:ac:8f:98:53:cc:16:09:23:a7:11:ae:f9: fc:68:fd:0f:fc:24:48:ab:67:bc:64:df:2b:48:c8: 96:92:4a:24:fe:dc:00:43:1a:f5:b2:ab:59:36:26: 69:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0D:84:08:B9:A0:F5:10:88:F5:6A:8E:CA:4A:69:FA:6A:4D:90:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/708736cc-6bb7-351c-8bbd-c46d652acb06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:46:47:2d:d4:c8:11:7a:4b:3b:c2:6b:fc:6b:f1:34:81:b0: 82:3d:15:9a:a1:ff:47:e0:9c:b6:09:46:e4:15:6c:ff:93:11: bc:4f:36:56:8a:99:c3:86:bd:a2:20:29:27:2c:58:02:aa:53: d3:a5:ce:1b:c2:fb:c9:7b:8a:e6:ac:73:bd:df:49:3e:c6:e4: 67:09:99:b0:13:f7:73:1c:24:ab:e6:48:c9:0f:d3:f8:0e:33: ca:4f:f5:ec:7b:af:28:3d:46:08:99:d2:ff:fd:40:a9:69:7c: f5:38:5b:de:6d:20:27:b1:cd:4b:21:b2:9e:e5:0d:18:8e:d2: 76:8d:04:3a:02:81:6a:ae:3a:9b:14:65:f2:e3:67:23:59:d5: 52:6d:09:ee:96:a3:ba:9a:8a:cf:7c:3c:3a:1e:00:63:9c:e4: 71:bc:37:40:29:2b:7a:73:47:de:42:c4:73:f2:ae:7f:e5:3a: fe:50:04:45:12:db:ed:df:4b:36:69:dc:6d:04:d6:bb:76:ae: 66:81:63:a5:c5:f7:67:02:8a:1a:9d:42:b1:ae:33:49:18:ad: 4f:f6:7e:93:03:89:39:2a:11:27:17:49:82:e8:f1:86:8c:26: 2b:5d:41:9f:f1:aa:05:51:00:ae:26:ad:65:8f:df:e6:4e:d0: 95:e4:50:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9J/BPYu1P1bmHdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NTRjZGYyNTItYmZjMi00ZDU2LWJlMjQtYzUwNmUxNDM2ZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7fuEbYffXnp9u9EiZf7TdP9Ilx8NCjzpw2n +Occ1HnZFtfDX7B6pvw2rbvgvepPHC+kAdGIwflCtH/kGrv6czXNXJ6LWrLes3Si Gk5WTPrf+JvemecgiQjkXxo/5xZfnd7+9t50LrNiD8x/YR5mQMnxDZhTHbWrwrRg x0yaEaIQPVj43KR9K2Sk3oHRyoMOG1ACfGYw0LzzKniK0h56N0thMdobQtcdix/M R5lYjCyyfy10UCCQruJVNoShN/yjI+GuvZcDmNoOwILASqWiyWAcHH6sj5hTzBYJ I6cRrvn8aP0P/CRIq2e8ZN8rSMiWkkok/twAQxr1sqtZNiZp2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkNhAi5oPUQiPVqjspKafpqTZBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzA4NzM2Y2MtNmJiNy0z NTFjLThiYmQtYzQ2ZDY1MmFjYjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9T8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNGRy3UyBF6SzvCa/xr8TSBsII9FZqh/0fgnLYJRuQVbP+TEbxPNlaK mcOGvaIgKScsWAKqU9OlzhvC+8l7iuasc73fST7G5GcJmbAT93McJKvmSMkP0/gO M8pP9ex7ryg9RgiZ0v/9QKlpfPU4W95tICexzUshsp7lDRiO0naNBDoCgWquOpsU ZfLjZyNZ1VJtCe6Wo7qais98PDoeAGOc5HG8N0ApK3pzR95CxHPyrn/lOv5QBEUS 2+3fSzZp3G0E1rt2rmaBY6XF92cCihqdQrGuM0kYrU/2fpMDiTkqEScXSYLo8YaM JitdQZ/xqgVRAK4mrWWP3+ZO0JXkUMc= -----END CERTIFICATE-----Generated at Sat Apr 26 18:35:39 2025 by rpki-client