$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c34e6e1-e474-3b8c-b7b9-cf047e6d8dc8.roa File: 7c34e6e1-e474-3b8c-b7b9-cf047e6d8dc8.roa (raw, json) Hash identifier: 3gcx7hRZ7cEryFPku/mamtelP6+EdjsqBDKZNaY4Dxc= Subject key identifier: 0E:75:54:14:0B:40:3E:EE:6E:D7:52:78:F1:13:33:69:A0:0F:7C:D8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829DD902C55CF8BE213C780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c34e6e1-e474-3b8c-b7b9-cf047e6d8dc8.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.207.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:dd:90:2c:55:cf:8b:e2:13:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=9efa7693-61fd-44d9-b7ff-9cd6a895081f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e8:fd:65:1b:ce:b0:69:5e:ad:2d:96:94:ef: bc:92:48:80:a1:8c:7b:94:91:b0:0d:dd:aa:7c:4a: bb:e0:5d:fe:df:bb:14:83:78:3a:43:04:d9:37:74: 8e:5e:5f:be:95:97:18:cc:59:e4:3c:ee:54:e2:8c: c0:b9:1e:21:dd:1b:ac:30:42:4f:30:3a:3f:d2:58: b5:98:2b:f3:c4:3c:92:4b:cc:71:e0:4e:29:70:02: e2:e6:63:6e:49:d6:fd:29:65:de:57:a9:b5:77:69: 0d:cc:6d:ca:0d:59:9b:12:de:de:67:38:33:e7:cf: 67:2b:d6:0d:c9:72:96:50:57:a8:c4:58:48:2e:46: c9:12:78:cd:c2:d7:3b:70:de:2d:4d:22:c3:b1:8f: ee:e4:67:92:b4:16:64:4a:6d:a1:55:bf:30:6a:f1: 2b:73:8a:a9:aa:75:0e:13:9c:e8:d5:c6:1a:a9:3d: 71:e8:f8:f0:55:0c:95:b1:65:cf:33:20:ca:a9:7b: dd:20:e5:d4:f8:00:7d:25:14:99:96:63:97:bf:19: 9b:52:0e:64:9d:90:86:b5:16:3c:19:74:f7:98:f5: 8d:58:c5:ce:f4:6e:dc:30:fa:59:97:cc:d2:d5:91: 85:d4:fe:d3:6f:3d:ea:1a:65:d8:e1:7b:c2:0f:4a: 06:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:75:54:14:0B:40:3E:EE:6E:D7:52:78:F1:13:33:69:A0:0F:7C:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c34e6e1-e474-3b8c-b7b9-cf047e6d8dc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:a1:10:4b:79:51:18:f6:ca:f1:0f:4b:8e:b6:0b:a8:6e:7c: 6e:f7:11:af:91:af:68:d4:6b:1d:e7:9a:e8:fd:57:de:f0:e7: 3c:5c:f4:70:35:b1:57:64:23:25:b6:0e:af:d6:94:a9:a2:38: 77:97:3e:ab:ea:44:82:f5:ec:f4:ee:49:e6:24:d5:04:92:c1: 62:b0:07:7a:54:db:fc:04:9c:84:2c:aa:04:fe:7b:33:d2:35: 10:67:4e:0d:fe:97:1c:93:db:4b:d7:1f:65:4c:70:78:aa:06: bf:de:cc:f1:db:9d:7f:4a:c9:6a:b8:30:fd:62:15:d5:2e:62: 3a:bd:10:85:af:26:c5:72:c3:c0:be:b6:7f:eb:d5:6d:10:1b: 07:1e:39:da:c2:2f:72:e3:1a:1c:ba:24:e3:05:75:e0:41:00: f8:42:03:da:4b:44:88:ee:50:42:c7:e7:47:a2:6a:89:0a:84: e0:9a:81:16:53:0b:ff:d5:f9:48:57:70:e5:cb:5a:14:db:bd: 11:37:53:d5:d9:15:e9:c8:9f:45:db:02:5e:6c:80:1c:46:55: c0:44:4d:66:a1:d7:40:89:cf:7d:53:24:3f:e9:7a:32:55:3a: 23:fb:52:0d:04:4a:c0:1c:31:5e:b4:39:6d:71:12:46:66:bf: a6:09:a8:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKd2QLFXPi+ITx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk OWVmYTc2OTMtNjFmZC00NGQ5LWI3ZmYtOWNkNmE4OTUwODFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+j9ZRvOsGlerS2WlO+8kkiAoYx7lJGwDd2q fEq74F3+37sUg3g6QwTZN3SOXl++lZcYzFnkPO5U4ozAuR4h3RusMEJPMDo/0li1 mCvzxDySS8xx4E4pcALi5mNuSdb9KWXeV6m1d2kNzG3KDVmbEt7eZzgz589nK9YN yXKWUFeoxFhILkbJEnjNwtc7cN4tTSLDsY/u5GeStBZkSm2hVb8wavErc4qpqnUO E5zo1cYaqT1x6PjwVQyVsWXPMyDKqXvdIOXU+AB9JRSZlmOXvxmbUg5knZCGtRY8 GXT3mPWNWMXO9G7cMPpZl8zS1ZGF1P7Tbz3qGmXY4XvCD0oGkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA51VBQLQD7ubtdSePETM2mgD3zYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2MzNGU2ZTEtZTQ3NC0z YjhjLWI3YjktY2YwNDdlNmQ4ZGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF880MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGhEEt5URj2yvEPS462C6hufG73Ea+Rr2jUax3nmuj9V97w5zxc9HA1 sVdkIyW2Dq/WlKmiOHeXPqvqRIL17PTuSeYk1QSSwWKwB3pU2/wEnIQsqgT+ezPS NRBnTg3+lxyT20vXH2VMcHiqBr/ezPHbnX9KyWq4MP1iFdUuYjq9EIWvJsVyw8C+ tn/r1W0QGwceOdrCL3LjGhy6JOMFdeBBAPhCA9pLRIjuUELH50eiaokKhOCagRZT C//V+UhXcOXLWhTbvRE3U9XZFenIn0XbAl5sgBxGVcBETWah10CJz31TJD/pejJV OiP7Ug0ESsAcMV60OW1xEkZmv6YJqAA= -----END CERTIFICATE-----Generated at Sun Apr 27 12:13:24 2025 by rpki-client