$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e597107-7086-37ab-a01f-1f696f13b837.roa File: 7e597107-7086-37ab-a01f-1f696f13b837.roa (raw, json) Hash identifier: S2sjAPOXoMrgNSnJOLo0bbDBbnFF48IvYTocpelIAdI= Subject key identifier: B6:92:B4:C5:6B:73:AC:B8:BC:78:35:61:DE:19:77:62:06:7F:0B:F0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF49654632A843877919900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e597107-7086-37ab-a01f-1f696f13b837.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.213.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:96:54:63:2a:84:38:77:91:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=b0616e0b-1277-4b67-a1d9-d6b3fc5c189b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:73:49:37:b2:75:fc:ea:ef:98:99:4b:29:90: 63:6a:cf:55:30:ba:b7:45:d0:e8:8d:5b:bb:87:43: fa:ed:96:84:78:97:b1:4f:8a:cc:14:cf:57:b3:51: 3b:52:92:0a:00:e7:62:48:5b:31:ea:b3:2a:d5:40: 78:c2:bd:a7:94:10:4f:85:8e:c6:c4:52:f7:3c:c1: fb:c6:6e:c3:74:5e:52:f7:74:8f:b7:f7:0a:f6:0a: cb:62:2c:a3:e9:3a:47:1a:50:7e:f7:2b:57:46:86: 31:22:91:37:e6:5d:fe:42:c0:83:16:2c:6f:76:55: 0e:6b:34:01:8b:63:1d:06:84:ce:51:60:20:48:66: e5:94:7e:bd:f7:d5:c9:47:7e:cb:6d:0e:0d:be:79: 23:21:b5:89:06:03:e0:5b:a4:15:fa:91:15:7b:20: 2b:ce:b9:94:92:f3:48:68:09:ae:54:75:42:87:2d: e0:03:4b:e5:41:5c:4a:63:2a:54:ce:eb:aa:9e:17: e4:57:68:36:af:fc:c6:7c:c2:b2:df:0a:b4:71:25: 08:97:11:68:cb:70:2c:7b:ee:3f:be:de:8a:d1:90: 39:20:af:df:a5:58:ad:7a:f6:53:9c:2b:87:e2:f4: 68:0f:0f:df:5c:74:25:15:df:f1:6f:7c:97:33:84: ee:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:92:B4:C5:6B:73:AC:B8:BC:78:35:61:DE:19:77:62:06:7F:0B:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e597107-7086-37ab-a01f-1f696f13b837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:db:3a:f5:12:77:11:4c:b0:a8:69:9b:1a:8f:54:dc:e9:7c: be:77:7a:df:f9:37:00:06:e3:af:08:cd:95:64:fb:70:f1:e2: 9f:05:3b:cb:1a:f5:f0:57:c6:e7:28:83:eb:0b:5f:be:b8:ef: ff:46:6a:8f:b8:3b:21:4c:70:57:73:fc:15:d3:c3:ea:6f:4e: a7:19:10:da:f3:91:7c:5f:9e:c6:c3:4d:ce:8f:da:de:39:27: f8:97:1f:90:3d:58:4c:06:b7:f8:09:07:dd:3b:91:64:c2:2a: 98:2e:e9:b1:a7:22:fc:bc:52:f1:45:ad:9f:af:80:42:9e:54: 03:95:34:09:6a:5f:25:54:50:78:01:09:3e:2c:3c:db:3a:fc: dc:cc:bf:a9:96:0d:58:9c:9c:70:91:44:76:7c:0c:11:99:2f: 9c:10:b6:0c:81:a5:2d:43:6c:93:4f:b7:f2:0f:df:4d:89:2e: 40:f9:70:fa:c8:ce:73:53:2e:c9:f7:73:35:13:4e:61:2a:1a: 95:dc:b5:cd:47:48:24:d2:e0:5e:52:d6:d3:29:f2:3b:fb:dc: 97:d6:91:ff:99:66:ba:95:ea:0d:ba:ed:95:a1:01:2e:e8:5c: 50:2f:05:2a:2e:f3:7a:92:5b:56:1a:ff:85:93:27:23:92:c1: 2c:14:b0:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JZUYyqEOHeRmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk YjA2MTZlMGItMTI3Ny00YjY3LWExZDktZDZiM2ZjNWMxODliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnNJN7J1/OrvmJlLKZBjas9VMLq3RdDojVu7 h0P67ZaEeJexT4rMFM9Xs1E7UpIKAOdiSFsx6rMq1UB4wr2nlBBPhY7GxFL3PMH7 xm7DdF5S93SPt/cK9grLYiyj6TpHGlB+9ytXRoYxIpE35l3+QsCDFixvdlUOazQB i2MdBoTOUWAgSGbllH6999XJR37LbQ4NvnkjIbWJBgPgW6QV+pEVeyArzrmUkvNI aAmuVHVChy3gA0vlQVxKYypUzuuqnhfkV2g2r/zGfMKy3wq0cSUIlxFoy3Ase+4/ vt6K0ZA5IK/fpVitevZTnCuH4vRoDw/fXHQlFd/xb3yXM4TuzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaStMVrc6y4vHg1Yd4Zd2IGfwvwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2U1OTcxMDctNzA4Ni0z N2FiLWEwMWYtMWY2OTZmMTNiODM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9UIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHbOvUSdxFMsKhpmxqPVNzpfL53et/5NwAG468IzZVk+3Dx4p8FO8sa 9fBXxucog+sLX7647/9Gao+4OyFMcFdz/BXTw+pvTqcZENrzkXxfnsbDTc6P2t45 J/iXH5A9WEwGt/gJB907kWTCKpgu6bGnIvy8UvFFrZ+vgEKeVAOVNAlqXyVUUHgB CT4sPNs6/NzMv6mWDVicnHCRRHZ8DBGZL5wQtgyBpS1DbJNPt/IP302JLkD5cPrI znNTLsn3czUTTmEqGpXctc1HSCTS4F5S1tMp8jv73JfWkf+ZZrqV6g267ZWhAS7o XFAvBSou83qSW1Ya/4WTJyOSwSwUsBw= -----END CERTIFICATE-----Generated at Wed Apr 30 02:55:08 2025 by rpki-client