$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8407dad9-44ac-32d5-8941-11814f4815f1.roa File: 8407dad9-44ac-32d5-8941-11814f4815f1.roa (raw, json) Hash identifier: 0ZtoK+1gFiGL7/I7fOl2hNAwwEc6KEbwD+4FaDm8T08= Subject key identifier: BC:FF:7B:88:61:D9:D3:71:B3:59:EB:05:04:24:0E:AA:8F:93:93:69 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF437640A444B4B26F8C70 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8407dad9-44ac-32d5-8941-11814f4815f1.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.217.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:43:76:40:a4:44:b4:b2:6f:8c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=1496bf9b-8587-40de-9b00-85072dbd3057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:15:4d:14:70:cd:43:04:88:60:05:cc:b0:79: ac:c0:96:d7:ef:31:d1:ee:94:d6:e3:51:db:18:eb: 9e:35:c9:f3:45:c5:5f:f0:27:1e:e0:f2:3d:5d:02: 46:45:6b:5b:4c:3c:d7:b6:37:cc:d3:d7:9e:ac:f0: d2:e8:20:27:3d:6d:74:a9:44:5c:44:ba:ca:62:28: 00:a1:f1:59:9f:39:21:55:33:80:c6:e1:3c:73:93: 5a:7d:b5:d9:37:e1:32:2a:da:94:e6:dc:57:3a:16: 58:6e:82:c0:ce:f5:9a:70:f9:2c:eb:dd:ec:6c:bf: 33:d8:75:e6:57:7e:f1:dd:33:9c:3a:87:64:4d:b8: 51:e2:e2:9d:e8:f0:16:6d:48:77:25:f3:72:f0:f2: 48:d1:e7:ce:69:fb:8c:0d:34:d3:81:2a:0a:ba:77: 86:f8:e8:0b:cd:29:b3:dc:01:90:20:16:f3:0e:7c: 6b:06:c9:a9:fb:ac:e4:1c:4b:ff:3d:77:18:3c:dd: e4:f2:63:54:3b:fc:5f:6f:01:9e:b2:8d:c4:f5:ff: 21:fc:22:e6:e5:92:9b:98:d9:4f:e0:bb:00:1d:f2: d0:df:f2:f8:16:20:0d:08:3b:b3:c6:f5:e9:75:42: fc:9a:3e:f9:10:22:20:1f:10:74:de:94:d4:bd:24: 40:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FF:7B:88:61:D9:D3:71:B3:59:EB:05:04:24:0E:AA:8F:93:93:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8407dad9-44ac-32d5-8941-11814f4815f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:ca:8b:b1:d1:78:37:65:bf:d6:f0:2e:0c:6f:23:86:ae:23: da:26:4e:51:09:dc:64:dc:e6:e4:23:28:1c:7d:78:42:5f:19: 64:61:fe:2f:59:5b:d7:96:cc:4d:c1:9c:2c:04:60:4a:1c:1c: a7:07:a8:53:1c:d5:92:df:20:47:c6:4f:24:4b:17:d2:63:5e: b7:2b:3f:e1:53:be:31:e5:c9:b4:18:70:4f:18:5c:4c:ea:81: 7a:78:0a:d9:10:57:0e:38:52:2c:79:0b:9c:00:de:cb:e6:6c: c8:6e:c1:2e:34:81:0e:67:68:00:e6:0b:f1:76:e5:83:c5:18: b7:15:3a:b1:cc:88:a7:da:08:42:19:c2:a7:a3:27:48:a2:ec: 0c:00:38:59:9f:5e:6a:7d:b3:57:a2:93:fc:4d:67:01:1e:39: cc:2b:e3:05:dc:95:e3:2a:a7:ac:b4:11:fe:0c:08:67:6f:70: 82:6b:dd:6d:f2:12:ed:f5:30:14:6a:78:d7:ee:a9:6e:69:74: 19:e8:22:88:e7:67:ae:99:46:22:e0:7a:e6:1d:8e:3b:e7:98: e4:22:ba:ac:10:92:d0:4f:8d:85:9f:5e:7a:10:ea:47:95:44: ea:56:91:16:c5:14:ae:38:a5:a8:d9:85:94:e0:0b:98:17:ab: f3:d1:4a:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0N2QKREtLJvjHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MTQ5NmJmOWItODU4Ny00MGRlLTliMDAtODUwNzJkYmQzMDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihVNFHDNQwSIYAXMsHmswJbX7zHR7pTW41Hb GOueNcnzRcVf8Cce4PI9XQJGRWtbTDzXtjfM09eerPDS6CAnPW10qURcRLrKYigA ofFZnzkhVTOAxuE8c5NafbXZN+EyKtqU5txXOhZYboLAzvWacPks693sbL8z2HXm V37x3TOcOodkTbhR4uKd6PAWbUh3JfNy8PJI0efOafuMDTTTgSoKuneG+OgLzSmz 3AGQIBbzDnxrBsmp+6zkHEv/PXcYPN3k8mNUO/xfbwGeso3E9f8h/CLm5ZKbmNlP 4LsAHfLQ3/L4FiANCDuzxvXpdUL8mj75ECIgHxB03pTUvSRARwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLz/e4hh2dNxs1nrBQQkDqqPk5NpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODQwN2RhZDktNDRhYy0z MmQ1LTg5NDEtMTE4MTRmNDgxNWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9nUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXKi7HReDdlv9bwLgxvI4auI9omTlEJ3GTc5uQjKBx9eEJfGWRh/i9Z W9eWzE3BnCwEYEocHKcHqFMc1ZLfIEfGTyRLF9JjXrcrP+FTvjHlybQYcE8YXEzq gXp4CtkQVw44Uix5C5wA3svmbMhuwS40gQ5naADmC/F25YPFGLcVOrHMiKfaCEIZ wqejJ0ii7AwAOFmfXmp9s1eik/xNZwEeOcwr4wXcleMqp6y0Ef4MCGdvcIJr3W3y Eu31MBRqeNfuqW5pdBnoIojnZ66ZRiLgeuYdjjvnmOQiuqwQktBPjYWfXnoQ6keV ROpWkRbFFK44pajZhZTgC5gXq/PRSv4= -----END CERTIFICATE-----Generated at Sat Apr 26 16:18:27 2025 by rpki-client