$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88c59366-c1f5-3d4a-8066-48f56bdaa025.roa File: 88c59366-c1f5-3d4a-8066-48f56bdaa025.roa (raw, json) Hash identifier: GzcJZhLn/gvqfaj+tphJOdfdWeR1sNM2/mhR1z51XvU= Subject key identifier: 3D:A2:9F:3A:6C:BC:EE:24:25:A3:A7:F4:6B:C4:89:8E:8D:C9:11:09 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E104E05D290678F00500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88c59366-c1f5-3d4a-8066-48f56bdaa025.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.204.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e1:04:e0:5d:29:06:78:f0:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=165c2e37-cb35-4477-800f-339b589101eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:60:73:84:22:21:55:00:a8:23:ef:06:9b:65: 84:52:77:e5:a3:b8:63:1b:f9:cc:4d:66:79:a0:9b: f3:d0:7a:cf:ba:75:68:71:19:a7:e5:89:02:2c:7f: a0:c8:ed:a9:bf:2b:4b:ce:2d:bd:49:0d:24:9e:8c: 52:a2:a5:12:13:e6:38:14:df:81:7f:6c:16:8d:94: 38:ee:bf:6d:10:b1:1e:65:cb:df:cb:bc:38:24:20: 2e:c2:23:94:55:5f:d9:10:93:97:94:25:c1:92:60: 13:e7:7f:b7:87:e3:f6:37:3d:1a:46:e8:21:f8:1f: c7:2a:6d:77:3f:29:56:3e:eb:ad:a0:b7:4b:e5:3e: bc:40:ce:27:38:75:0d:cf:fb:82:2a:49:04:6d:73: de:90:fc:e2:c1:b9:db:57:2a:b8:b6:d6:23:4c:b5: 17:20:1e:99:a3:80:80:1b:ec:bc:d9:e9:a8:bc:0a: c8:4f:0d:96:f6:b5:a2:a0:1d:2a:1c:2d:c5:cd:25: 98:fd:cc:10:af:87:31:37:d2:0c:53:d5:54:00:42: 76:3e:fc:96:46:ef:a9:de:0c:df:bd:dd:22:45:47: 98:61:62:31:e6:f8:69:8d:a6:8d:b4:3b:7b:34:51: 36:ef:8c:88:63:9d:1d:14:96:10:a4:03:8f:65:0b: 46:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A2:9F:3A:6C:BC:EE:24:25:A3:A7:F4:6B:C4:89:8E:8D:C9:11:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88c59366-c1f5-3d4a-8066-48f56bdaa025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ea:cb:74:7b:b6:f0:1b:57:01:61:c6:5b:24:4c:6a:a7:0d: 8a:bf:d9:2a:91:be:a5:65:18:4d:a4:2d:19:1c:6e:8e:ed:51: 92:b7:91:4b:d5:5d:19:6f:47:7f:ea:df:f8:66:d8:14:11:36: ce:e1:dc:32:bb:02:41:ac:d1:56:52:be:9e:84:7c:a9:74:08: 7a:5d:5f:16:a7:52:7a:15:ec:8f:ed:aa:c9:5a:44:2a:53:a0: 80:15:34:24:36:75:af:45:57:03:8f:5f:bf:e6:02:92:9b:80: 23:dd:71:26:97:9d:9e:ed:c1:bd:d3:a3:00:a9:2a:b6:b8:e5: 89:1c:58:75:d7:ee:02:ef:7e:78:29:d6:e3:b1:0a:53:27:e3: 2e:52:f3:f8:a0:28:aa:e0:8d:65:da:46:7a:13:82:c0:bb:45: 4f:50:7a:4a:e2:1e:a4:22:f9:86:39:b5:66:b2:3d:ab:81:cd: 38:f1:5b:7c:50:d3:5b:1b:30:d6:7f:fb:f1:ae:0b:d7:7b:16: 56:ff:66:62:d4:a1:e9:1c:d3:d6:c6:7b:4a:58:13:b6:d3:e9: 8b:33:51:b2:7e:fc:08:1f:8b:60:7e:50:f8:5e:c9:ae:27:9f: 2a:68:26:17:1c:1f:96:f0:71:a1:1e:de:f2:f8:be:7a:4d:39: fe:08:4f:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKeEE4F0pBnjwBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MTY1YzJlMzctY2IzNS00NDc3LTgwMGYtMzM5YjU4OTEwMWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWBzhCIhVQCoI+8Gm2WEUnflo7hjG/nMTWZ5 oJvz0HrPunVocRmn5YkCLH+gyO2pvytLzi29SQ0knoxSoqUSE+Y4FN+Bf2wWjZQ4 7r9tELEeZcvfy7w4JCAuwiOUVV/ZEJOXlCXBkmAT53+3h+P2Nz0aRugh+B/HKm13 PylWPuutoLdL5T68QM4nOHUNz/uCKkkEbXPekPziwbnbVyq4ttYjTLUXIB6Zo4CA G+y82emovArITw2W9rWioB0qHC3FzSWY/cwQr4cxN9IMU9VUAEJ2PvyWRu+p3gzf vd0iRUeYYWIx5vhpjaaNtDt7NFE274yIY50dFJYQpAOPZQtGDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2inzpsvO4kJaOn9GvEiY6NyREJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODhjNTkzNjYtYzFmNS0z ZDRhLTgwNjYtNDhmNTZiZGFhMDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzqy3R7tvAbVwFhxlskTGqnDYq/2SqRvqVlGE2kLRkcbo7tUZK3kUvV XRlvR3/q3/hm2BQRNs7h3DK7AkGs0VZSvp6EfKl0CHpdXxanUnoV7I/tqslaRCpT oIAVNCQ2da9FVwOPX7/mApKbgCPdcSaXnZ7twb3TowCpKra45YkcWHXX7gLvfngp 1uOxClMn4y5S8/igKKrgjWXaRnoTgsC7RU9QekriHqQi+YY5tWayPauBzTjxW3xQ 01sbMNZ/+/GuC9d7Flb/ZmLUoekc09bGe0pYE7bT6YszUbJ+/Agfi2B+UPheya4n nypoJhccH5bwcaEe3vL4vnpNOf4IT9U= -----END CERTIFICATE-----Generated at Sat Apr 26 21:59:02 2025 by rpki-client