$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/861d75ce-eba3-3dc2-8484-7777e491cd44.roa File: 861d75ce-eba3-3dc2-8484-7777e491cd44.roa (raw, json) Hash identifier: Qf39I/4J8/kEL6IZymS7RtDdQ7R9BjX0nfEh3WWq+HQ= Subject key identifier: D5:D9:26:39:4B:C7:DC:8C:B9:79:D6:70:4A:D9:43:70:D2:5F:1B:3F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF497DBC8404DD208F37280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/861d75ce-eba3-3dc2-8484-7777e491cd44.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.213.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:97:db:c8:40:4d:d2:08:f3:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=39f469a7-299c-4193-a21c-1053904b8b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4d:f2:40:a5:c2:41:85:e8:24:57:76:d2:53: 6b:00:38:54:0e:fa:51:c7:03:38:70:c3:7d:03:2f: 92:92:01:53:dc:1a:0d:3d:37:25:a7:3b:f3:ed:83: 50:9d:f1:18:ae:4f:e3:38:42:9f:c7:8b:e0:b5:76: f5:0c:1f:2a:ce:41:f9:41:85:b8:91:ec:1c:66:47: 5a:11:ea:5c:c5:90:59:45:93:1f:78:9f:55:eb:21: 23:35:4e:eb:b3:75:2c:a6:b5:c2:24:08:9f:a1:af: b5:91:51:c0:3f:b2:32:ae:62:b8:53:a9:d3:04:0d: 34:af:38:6e:64:59:c9:0b:2e:4d:d7:e8:7a:7c:28: a8:fb:9e:37:b3:d5:10:72:e7:45:f9:52:aa:a9:1e: 45:7d:62:a9:56:e9:16:6f:a9:d4:27:ee:4d:50:ee: 1a:aa:7d:d5:b6:a8:31:d3:55:91:98:40:cb:91:74: 8d:bd:27:8f:3c:3d:92:72:0a:5a:c6:3e:35:9d:84: ef:92:95:bf:09:25:31:5b:91:51:31:5a:db:08:16: 61:ce:17:0e:ef:d6:d2:7f:04:3e:e2:79:24:b6:80: 37:d7:f9:46:cb:47:62:a4:38:a4:6a:c8:38:0c:51: 22:e3:11:34:da:35:d0:79:e9:d6:46:2f:0d:c0:5b: c9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D9:26:39:4B:C7:DC:8C:B9:79:D6:70:4A:D9:43:70:D2:5F:1B:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/861d75ce-eba3-3dc2-8484-7777e491cd44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:c4:51:f5:d2:a8:fd:32:0c:2f:5c:42:a4:c5:a4:36:75:76: ce:97:81:b6:42:08:44:51:5d:cf:db:4a:7e:10:dd:2a:83:d8: 3c:0b:2a:6c:f5:c3:f1:95:d1:d1:8d:a3:d1:0c:6c:5b:9a:14: 35:c2:98:2b:4a:54:37:8c:80:42:74:67:bf:b1:cd:bc:5b:cd: b6:6e:2a:65:f7:74:6c:3b:9b:a0:7f:b4:a2:c3:6a:0c:ea:4e: a8:54:99:b3:dc:76:ec:fc:e9:68:54:ef:2d:b8:f3:0b:5c:5d: 7b:2c:6e:01:5f:07:e3:bd:3e:13:a9:2b:b9:99:a7:66:f9:20: 21:23:ff:5a:80:8d:00:1c:dc:56:c4:b7:1c:b3:8c:42:7b:ec: 4e:97:d1:5a:ab:be:51:3a:93:81:dc:05:86:df:43:28:8f:5e: bd:ed:35:70:84:6e:66:f7:e8:b5:1d:c7:79:eb:b0:28:05:6e: a4:93:ec:be:5a:55:91:a7:dc:ab:15:e5:1d:d0:af:e7:86:9a: e9:9e:8a:e9:a5:8d:03:63:26:04:04:e3:21:6e:52:fa:15:86: 74:66:0a:9f:f3:13:41:14:e9:e7:cb:52:59:ef:38:b2:38:2b: 8e:b0:53:82:70:f5:68:46:51:b5:c8:4a:40:07:53:4a:1d:25: 4a:c6:84:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JfbyEBN0gjzcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MzlmNDY5YTctMjk5Yy00MTkzLWEyMWMtMTA1MzkwNGI4YjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE3yQKXCQYXoJFd20lNrADhUDvpRxwM4cMN9 Ay+SkgFT3BoNPTclpzvz7YNQnfEYrk/jOEKfx4vgtXb1DB8qzkH5QYW4kewcZkda EepcxZBZRZMfeJ9V6yEjNU7rs3UsprXCJAifoa+1kVHAP7IyrmK4U6nTBA00rzhu ZFnJCy5N1+h6fCio+543s9UQcudF+VKqqR5FfWKpVukWb6nUJ+5NUO4aqn3Vtqgx 01WRmEDLkXSNvSePPD2Scgpaxj41nYTvkpW/CSUxW5FRMVrbCBZhzhcO79bSfwQ+ 4nkktoA31/lGy0dipDikasg4DFEi4xE02jXQeenWRi8NwFvJvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXZJjlLx9yMuXnWcErZQ3DSXxs/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODYxZDc1Y2UtZWJhMy0z ZGMyLTg0ODQtNzc3N2U0OTFjZDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9WUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzEUfXSqP0yDC9cQqTFpDZ1ds6XgbZCCERRXc/bSn4Q3SqD2DwLKmz1 w/GV0dGNo9EMbFuaFDXCmCtKVDeMgEJ0Z7+xzbxbzbZuKmX3dGw7m6B/tKLDagzq TqhUmbPcduz86WhU7y248wtcXXssbgFfB+O9PhOpK7mZp2b5ICEj/1qAjQAc3FbE txyzjEJ77E6X0VqrvlE6k4HcBYbfQyiPXr3tNXCEbmb36LUdx3nrsCgFbqST7L5a VZGn3KsV5R3Qr+eGmumeiumljQNjJgQE4yFuUvoVhnRmCp/zE0EU6efLUlnvOLI4 K46wU4Jw9WhGUbXISkAHU0odJUrGhAQ= -----END CERTIFICATE-----Generated at Sun Apr 27 01:07:55 2025 by rpki-client