$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/722a02a7-9e6d-3b4f-8898-3f2cbdce22a5.roa File: 722a02a7-9e6d-3b4f-8898-3f2cbdce22a5.roa (raw, json) Hash identifier: E3nRGUdgE9Ixk4bP3o1WolG5HZ34xJP5bFOADEFocsQ= Subject key identifier: 88:16:FD:BF:FA:B9:76:C0:8C:7D:A9:8E:21:E5:B7:74:1C:89:9F:93 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849998F419106AE3BE823AE6980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/722a02a7-9e6d-3b4f-8898-3f2cbdce22a5.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.208.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:41:91:06:ae:3b:e8:23:ae:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=268af134-00b9-45ad-a05b-22505d53e6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0c:69:32:e6:27:22:14:f9:1d:9d:a4:0f:54: de:4d:88:92:a3:58:91:f4:31:8c:d5:51:1b:87:00: df:10:83:92:83:3f:ef:9f:06:42:5d:b4:9c:cb:06: 97:3a:28:b9:55:3c:26:fa:f9:54:cd:45:5d:ac:e9: 07:7d:82:01:3f:51:b6:d7:1e:2b:ba:bf:4b:ab:cb: 20:e4:ac:2d:87:35:1f:46:0e:e5:21:d3:9d:64:9c: 37:f3:7c:b9:a0:77:97:64:96:a6:63:6d:de:9f:45: 21:88:2f:ba:33:e7:02:48:50:5d:9c:94:93:32:ee: 79:fc:4b:84:a2:71:d8:ec:53:6c:6c:58:61:16:aa: 64:60:1b:93:97:cc:3f:4d:39:a8:12:b4:91:16:32: cd:df:57:7e:06:db:7c:5e:39:89:8b:68:39:ae:62: 20:cc:a4:c7:3a:36:73:a6:b6:07:61:32:0a:7f:8e: ea:49:a8:86:92:ef:cb:97:45:59:fc:95:ae:34:f8: 37:7a:18:ec:27:4a:a1:7b:6d:59:29:52:cf:aa:a9: f8:ea:03:55:d4:17:e8:a2:c2:e3:52:1c:91:ff:d0: 70:10:a7:e4:ef:25:05:a0:b8:4b:bf:50:c1:3c:c3: 05:4a:3f:82:5d:32:c9:70:55:22:83:7e:59:14:ec: 59:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:16:FD:BF:FA:B9:76:C0:8C:7D:A9:8E:21:E5:B7:74:1C:89:9F:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/722a02a7-9e6d-3b4f-8898-3f2cbdce22a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b9:48:83:eb:77:f7:b6:16:36:24:b6:ba:00:b0:48:fc:eb: 50:ef:99:0c:1c:ef:87:83:75:52:8d:5a:1b:43:15:77:ff:b9: 7e:9f:15:91:8d:df:17:5a:ca:25:9a:90:a2:42:b8:91:9c:2d: ce:0d:e5:96:10:97:30:d4:65:2c:6e:b4:8b:77:5b:73:d8:29: 11:3b:44:22:c9:1a:1e:3d:68:49:e7:30:1d:ab:e2:73:8b:45: 94:11:83:08:4c:98:ee:37:dd:f0:d8:41:8e:e6:cd:c6:f5:96: 11:49:19:07:78:e7:4d:10:54:26:28:d8:4c:f5:e3:8e:01:82: 6f:62:7a:98:66:71:2f:4e:63:3f:fd:66:df:53:70:f9:80:70: a6:d8:6d:39:dc:ea:de:50:88:dc:c6:6e:1d:4b:5c:bf:77:4d: 6e:46:3b:a9:4f:62:d9:8a:7f:20:09:2c:5a:66:33:ad:ca:48: ef:1e:39:31:41:12:eb:a3:85:de:bc:9f:a9:16:aa:76:b8:27: cf:2c:d0:a5:0e:bc:16:b5:b3:1e:23:80:25:ee:71:a0:e7:7b: cb:e9:5c:15:04:a4:b3:7c:ae:17:33:8e:18:fc:c8:64:49:fa: e8:42:e0:5b:99:ab:4a:57:8a:59:3a:90:65:e0:17:af:ed:b5: f1:bb:0c:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZj0GRBq476COuaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk MjY4YWYxMzQtMDBiOS00NWFkLWEwNWItMjI1MDVkNTNlNmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywxpMuYnIhT5HZ2kD1TeTYiSo1iR9DGM1VEb hwDfEIOSgz/vnwZCXbScywaXOii5VTwm+vlUzUVdrOkHfYIBP1G21x4rur9Lq8sg 5KwthzUfRg7lIdOdZJw383y5oHeXZJamY23en0UhiC+6M+cCSFBdnJSTMu55/EuE onHY7FNsbFhhFqpkYBuTl8w/TTmoErSRFjLN31d+Btt8XjmJi2g5rmIgzKTHOjZz prYHYTIKf47qSaiGku/Ll0VZ/JWuNPg3ehjsJ0qhe21ZKVLPqqn46gNV1BfoosLj UhyR/9BwEKfk7yUFoLhLv1DBPMMFSj+CXTLJcFUig35ZFOxZhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgW/b/6uXbAjH2pjiHlt3QciZ+TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzIyYTAyYTctOWU2ZC0z YjRmLTg4OTgtM2YyY2JkY2UyMmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9AdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGC5SIPrd/e2FjYktroAsEj861DvmQwc74eDdVKNWhtDFXf/uX6fFZGN 3xdayiWakKJCuJGcLc4N5ZYQlzDUZSxutIt3W3PYKRE7RCLJGh49aEnnMB2r4nOL RZQRgwhMmO433fDYQY7mzcb1lhFJGQd4500QVCYo2Ez1444Bgm9iephmcS9OYz/9 Zt9TcPmAcKbYbTnc6t5QiNzGbh1LXL93TW5GO6lPYtmKfyAJLFpmM63KSO8eOTFB Euujhd68n6kWqna4J88s0KUOvBa1sx4jgCXucaDne8vpXBUEpLN8rhczjhj8yGRJ +uhC4FuZq0pXilk6kGXgF6/ttfG7DGU= -----END CERTIFICATE-----Generated at Sat Apr 26 21:50:43 2025 by rpki-client