$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7685e228-4ab0-3a72-993b-aac31fa429c7.roa File: 7685e228-4ab0-3a72-993b-aac31fa429c7.roa (raw, json) Hash identifier: fLtFE7CQaxSW8cv63oVnQCYXmHXgUepRaS6abA1TVwE= Subject key identifier: E5:1A:70:93:4A:B8:EC:94:B4:8D:B9:44:F9:2F:EC:0E:87:75:15:99 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF495CAA829587D5DBE5060 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7685e228-4ab0-3a72-993b-aac31fa429c7.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.212.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:95:ca:a8:29:58:7d:5d:be:50:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=6a91709d-091f-433e-b67f-8d0fd1e25c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:de:2a:65:94:16:a6:d3:48:71:8b:e9:30:07: 38:ec:ef:34:cb:b4:93:66:b3:33:ed:b4:1e:77:d2: c3:10:75:36:f7:9a:2d:f4:63:3d:de:a5:50:3c:b0: ea:50:d8:93:dc:13:39:03:4f:77:10:20:c5:14:df: ba:26:60:f1:b7:df:25:47:10:2c:0a:88:5b:73:7d: 1f:46:c0:a4:62:14:d9:b4:8a:09:4e:d9:bf:9a:76: 4b:38:fa:0c:ce:9d:c0:38:4a:ce:40:55:35:85:7e: bb:9c:e3:2e:e7:ca:51:c1:cb:a2:08:d6:56:2c:14: 75:8a:d4:95:a5:96:7a:69:1a:09:89:f0:4d:b6:3c: c6:ed:6e:cb:d3:62:f4:8a:63:30:3e:c1:17:d1:79: eb:51:4e:ef:f0:1c:f2:e5:0d:64:af:aa:62:0f:5f: ab:ca:2c:06:f5:49:09:1b:91:57:72:58:c8:71:34: 02:d2:27:02:36:bb:00:46:a3:f3:7d:b1:9f:95:dc: 6f:9d:66:54:f9:db:b1:59:a2:eb:b2:8f:23:aa:5b: ef:e9:6b:91:c3:ae:24:a6:ee:12:ac:68:5d:07:20: 40:78:cf:82:c3:d3:66:ec:26:c0:03:ec:d7:bf:2b: e5:bd:d6:a6:e6:d7:eb:93:dc:df:20:a3:87:e2:33: a1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1A:70:93:4A:B8:EC:94:B4:8D:B9:44:F9:2F:EC:0E:87:75:15:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7685e228-4ab0-3a72-993b-aac31fa429c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:5d:b9:9d:6a:b7:b9:44:05:c8:97:db:5d:b9:62:a6:94:a1: f5:da:08:19:fc:b5:f3:06:26:47:b9:74:c0:29:a5:10:71:14: cd:84:de:ef:e7:51:4a:80:a0:d1:38:61:c6:24:1b:b5:13:4e: 19:05:ba:58:ad:88:01:d3:ec:e2:68:cb:75:5d:85:77:bf:bd: 1f:1c:3c:f8:e4:d1:49:ab:00:29:1c:ed:72:a0:dc:dd:44:b1: 52:13:a9:e4:97:90:7b:64:1d:fa:03:78:c3:d9:33:11:1a:af: 8e:8f:a0:a6:ab:bf:be:7f:8f:d7:3d:7d:27:6f:b0:97:59:31: 38:70:ad:ba:d5:1d:65:e6:83:b5:a2:07:34:2f:26:99:99:e6: 5a:65:5b:f1:49:4c:e6:23:96:89:ef:ba:cd:8f:9a:8e:66:b0: 8b:bc:5a:57:db:d3:42:a6:40:fd:37:89:6d:bc:17:ca:9d:ef: e5:fc:95:28:60:fd:f7:0c:ba:d1:be:69:d4:8a:09:f8:51:a2: e3:e4:02:a7:b5:ca:b1:42:fc:b6:ce:60:b8:3b:c3:0e:ce:29: 78:bc:1d:4d:0d:e7:24:fa:ab:41:d9:1a:68:44:7c:4a:51:83: fd:07:64:ad:f5:86:64:94:66:1a:c4:bf:6c:b9:be:c7:3e:4a: 3c:b0:f0:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JXKqClYfV2+UGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NmE5MTcwOWQtMDkxZi00MzNlLWI2N2YtOGQwZmQxZTI1YzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo94qZZQWptNIcYvpMAc47O80y7STZrMz7bQe d9LDEHU295ot9GM93qVQPLDqUNiT3BM5A093ECDFFN+6JmDxt98lRxAsCohbc30f RsCkYhTZtIoJTtm/mnZLOPoMzp3AOErOQFU1hX67nOMu58pRwcuiCNZWLBR1itSV pZZ6aRoJifBNtjzG7W7L02L0imMwPsEX0XnrUU7v8Bzy5Q1kr6piD1+ryiwG9UkJ G5FXcljIcTQC0icCNrsARqPzfbGfldxvnWZU+duxWaLrso8jqlvv6WuRw64kpu4S rGhdByBAeM+Cw9Nm7CbAA+zXvyvlvdam5tfrk9zfIKOH4jOhbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUacJNKuOyUtI25RPkv7A6HdRWZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzY4NWUyMjgtNGFiMC0z YTcyLTk5M2ItYWFjMzFmYTQyOWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9S+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVduZ1qt7lEBciX2125YqaUofXaCBn8tfMGJke5dMAppRBxFM2E3u/n UUqAoNE4YcYkG7UTThkFulitiAHT7OJoy3VdhXe/vR8cPPjk0UmrACkc7XKg3N1E sVITqeSXkHtkHfoDeMPZMxEar46PoKarv75/j9c9fSdvsJdZMThwrbrVHWXmg7Wi BzQvJpmZ5lplW/FJTOYjlonvus2Pmo5msIu8Wlfb00KmQP03iW28F8qd7+X8lShg /fcMutG+adSKCfhRouPkAqe1yrFC/LbOYLg7ww7OKXi8HU0N5yT6q0HZGmhEfEpR g/0HZK31hmSUZhrEv2y5vsc+Sjyw8M0= -----END CERTIFICATE-----Generated at Sat Apr 26 17:47:22 2025 by rpki-client