$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70b783c9-a788-3aef-9d16-65dd86ed7db2.roa File: 70b783c9-a788-3aef-9d16-65dd86ed7db2.roa (raw, json) Hash identifier: cDMK21+Ae463cC/x+cLDi8iXvzZfzggljnvuOUa3Bx8= Subject key identifier: AF:41:5D:91:A0:72:B4:07:89:C7:80:E6:29:75:CC:D6:2D:3D:5B:6A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849955F271F299753211B1E2AF0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70b783c9-a788-3aef-9d16-65dd86ed7db2.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.206.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:27:1f:29:97:53:21:1b:1e:2a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=20b88a6b-fe3d-4dea-97ca-67ee5944e9bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4b:a6:6d:56:8b:a5:42:ab:74:d1:08:73:f4: 32:72:82:82:50:eb:72:7f:87:6e:04:39:f0:96:c5: 88:9d:50:07:41:9f:d4:46:63:d3:f2:01:6a:da:98: f0:64:3e:14:fc:9d:24:05:e3:9c:71:e2:41:b8:80: 0b:47:39:b3:4c:ec:69:65:91:30:6f:4c:1c:14:ca: fe:f8:35:e3:33:b3:d4:78:9d:86:28:64:41:fc:9c: 38:c8:16:fc:47:f4:bd:f7:69:3b:c5:d8:1b:f1:0f: 80:7f:c9:88:55:87:1d:e5:75:7f:36:82:8e:b2:5e: c6:ff:0a:f4:31:58:94:87:de:67:13:0c:dc:29:7d: 7c:e8:7c:96:18:d5:c2:5e:77:e7:57:68:06:6e:a3: f6:fe:0c:b5:1c:09:8a:82:51:d4:4c:35:12:a5:71: fa:64:02:4b:60:98:52:1c:f3:12:4b:23:c1:a7:b4: dc:32:42:66:e8:ca:55:45:1c:0e:62:7e:6f:be:32: b6:68:52:c1:eb:7a:54:42:07:69:0d:d0:41:01:e4: 8e:fd:54:2d:f0:11:7d:a9:de:49:54:90:d0:1e:d0: 25:7d:fe:3f:51:79:f4:74:07:72:7b:03:47:d1:39: 87:f7:32:83:82:7e:ae:95:10:e8:76:e7:ad:72:d4: 8c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:41:5D:91:A0:72:B4:07:89:C7:80:E6:29:75:CC:D6:2D:3D:5B:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70b783c9-a788-3aef-9d16-65dd86ed7db2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ec:2f:c4:7d:38:67:d1:f4:a1:0d:b7:b6:ab:1c:ea:68:36: 3a:90:a0:c4:8b:f1:ef:60:a4:67:62:e6:53:cb:fc:88:19:75: 80:43:c4:3d:2e:6c:05:75:54:d5:5e:6e:90:ee:ba:e4:c2:fc: cd:b8:91:51:13:7e:61:78:60:7e:45:ea:85:54:98:1f:0c:8f: 17:a7:c0:3e:12:fb:e8:0b:cf:0e:78:4d:d7:67:67:ea:54:6f: c3:96:18:2b:bf:bb:c2:b3:bd:2f:8c:69:2a:db:82:0c:05:54: 66:46:e8:3f:4a:59:2d:24:3f:d1:cf:b3:9d:af:68:95:31:15: dc:9d:89:1a:c0:6d:e8:b7:ab:07:b8:f7:6c:4b:22:0a:5d:70: a4:34:79:11:34:b4:ed:f7:12:49:0c:eb:42:14:43:d3:a6:36: 21:71:4b:3a:73:c9:a8:60:64:de:3a:99:cb:62:f7:bd:0e:e2: 55:f6:00:72:9a:66:49:4d:c6:75:80:e4:82:3e:c5:eb:f3:60: 3f:eb:01:ac:36:de:e0:fc:b8:da:cc:bb:ad:97:fb:25:20:62: 31:2a:c6:c8:da:c9:f5:d9:d6:51:51:b4:9e:12:b4:e0:30:90: f4:5a:e2:73:65:d6:85:32:59:4c:65:1f:27:a5:c2:31:12:34: 31:4c:95:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXycfKZdTIRseKvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk MjBiODhhNmItZmUzZC00ZGVhLTk3Y2EtNjdlZTU5NDRlOWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUumbVaLpUKrdNEIc/QycoKCUOtyf4duBDnw lsWInVAHQZ/URmPT8gFq2pjwZD4U/J0kBeOcceJBuIALRzmzTOxpZZEwb0wcFMr+ +DXjM7PUeJ2GKGRB/Jw4yBb8R/S992k7xdgb8Q+Af8mIVYcd5XV/NoKOsl7G/wr0 MViUh95nEwzcKX186HyWGNXCXnfnV2gGbqP2/gy1HAmKglHUTDUSpXH6ZAJLYJhS HPMSSyPBp7TcMkJm6MpVRRwOYn5vvjK2aFLB63pUQgdpDdBBAeSO/VQt8BF9qd5J VJDQHtAlff4/UXn0dAdyewNH0TmH9zKDgn6ulRDoduetctSMXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9BXZGgcrQHiceA5il1zNYtPVtqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzBiNzgzYzktYTc4OC0z YWVmLTlkMTYtNjVkZDg2ZWQ3ZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF85gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzsL8R9OGfR9KENt7arHOpoNjqQoMSL8e9gpGdi5lPL/IgZdYBDxD0u bAV1VNVebpDuuuTC/M24kVETfmF4YH5F6oVUmB8MjxenwD4S++gLzw54TddnZ+pU b8OWGCu/u8KzvS+MaSrbggwFVGZG6D9KWS0kP9HPs52vaJUxFdydiRrAbei3qwe4 92xLIgpdcKQ0eRE0tO33EkkM60IUQ9OmNiFxSzpzyahgZN46mcti970O4lX2AHKa ZklNxnWA5II+xevzYD/rAaw23uD8uNrMu62X+yUgYjEqxsjayfXZ1lFRtJ4StOAw kPRa4nNl1oUyWUxlHyelwjESNDFMlZI= -----END CERTIFICATE-----Generated at Sat Apr 26 22:02:10 2025 by rpki-client