$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a66bd78-d1c5-348f-94b2-ea93907f0e2c.roa File: 8a66bd78-d1c5-348f-94b2-ea93907f0e2c.roa (raw, json) Hash identifier: N3o8aHEreMY6f2ph7ALm1njb1IGo71tGNrnyBQpeTpk= Subject key identifier: 6D:74:2E:6B:DA:12:FA:C3:2E:F5:6D:22:B4:94:08:3F:89:34:C6:15 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF49A8E6D1EADE1F907BF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a66bd78-d1c5-348f-94b2-ea93907f0e2c.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 14522 IP address blocks: 23.209.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:9a:8e:6d:1e:ad:e1:f9:07:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=151ba557-0332-48e7-9efd-05e50d377d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:86:d8:e2:bf:29:7e:90:4f:a0:79:75:58:6d: cf:34:6e:86:fb:9e:f5:3f:70:d5:17:15:4e:f7:f6: 28:e1:4c:8c:a5:b7:d4:50:fa:bc:ef:52:4d:8e:00: 46:de:63:1b:42:5b:51:9d:83:1e:75:4e:54:ff:75: f8:3c:0f:12:df:78:a4:e0:c9:e6:45:68:4e:c8:a4: 48:5d:a2:32:ee:01:22:1c:5d:a4:08:9a:8a:d4:8e: 2e:73:9b:47:1b:24:c4:82:8c:a5:68:41:fc:9f:e6: 5d:39:b9:ba:0f:e0:58:b2:06:9e:bd:ef:f1:c4:63: 41:4b:e9:be:44:47:33:88:b7:10:60:aa:c8:d2:c7: fd:91:0d:9d:a8:d1:df:28:60:f9:8e:78:01:3e:a6: 63:7b:c0:d6:9b:89:ee:b1:da:bb:db:66:f1:6d:df: f9:4a:9a:cc:f3:b9:61:50:d9:45:e6:1b:3c:8c:f1: 67:53:11:45:1f:b9:4d:9b:79:09:6e:53:b9:e3:d0: 7d:56:f3:c6:5d:99:5d:6a:b6:8d:26:69:46:23:74: 54:b7:cf:5c:26:f7:ba:ad:6f:8c:f0:e9:3e:91:c8: 5f:fd:4a:65:b7:67:15:c3:91:0e:a6:84:0e:3e:3f: 2a:4b:8e:09:9e:9c:d3:b0:a1:52:71:f3:01:8d:49: 36:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:74:2E:6B:DA:12:FA:C3:2E:F5:6D:22:B4:94:08:3F:89:34:C6:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a66bd78-d1c5-348f-94b2-ea93907f0e2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:b1:58:87:14:82:fe:ad:5d:42:b7:87:59:40:18:f1:5c:d2: 16:e0:94:49:2d:91:c1:e8:66:d2:33:c3:73:40:88:00:ff:ab: fa:a2:bc:f2:90:2e:41:c7:ec:d0:c5:4b:90:fb:93:c1:05:30: 85:ff:59:87:07:00:6b:2c:7d:43:ea:bc:b5:bd:44:3e:d2:7d: ee:56:a6:9e:e8:35:66:b8:8d:87:97:21:8f:95:46:80:24:0f: c9:43:89:65:be:9a:3f:5c:05:83:7a:8a:2e:59:e4:bb:06:ae: b1:4e:65:08:70:ca:bc:68:0c:a5:b8:db:08:ea:c2:82:be:3c: ab:a1:58:d7:15:bb:1f:ac:24:00:09:7c:47:46:50:a7:c1:e8: e1:77:32:e9:b6:d3:f2:81:a9:85:99:e9:c4:54:8e:c1:c1:b1: 61:3f:1a:eb:e9:4b:d4:25:ad:2e:12:e2:de:d6:ee:9e:dc:9a: fa:7f:44:d5:69:cd:0e:57:91:64:6e:7c:32:0c:5c:0b:5b:a8: d8:ce:9e:9d:32:eb:73:43:d4:3d:87:69:16:90:3b:c1:1c:ce: d6:3c:4a:b6:9f:32:c5:0b:e9:a2:ae:e8:47:43:5d:85:1c:d0: c1:7a:07:4d:7f:a4:be:43:a2:ba:a5:2a:67:3b:7d:ff:3d:22: 2e:e3:e7:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JqObR6t4fkHvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MTUxYmE1NTctMDMzMi00OGU3LTllZmQtMDVlNTBkMzc3ZDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYbY4r8pfpBPoHl1WG3PNG6G+571P3DVFxVO 9/Yo4UyMpbfUUPq871JNjgBG3mMbQltRnYMedU5U/3X4PA8S33ik4MnmRWhOyKRI XaIy7gEiHF2kCJqK1I4uc5tHGyTEgoylaEH8n+ZdObm6D+BYsgaeve/xxGNBS+m+ REcziLcQYKrI0sf9kQ2dqNHfKGD5jngBPqZje8DWm4nusdq722bxbd/5SprM87lh UNlF5hs8jPFnUxFFH7lNm3kJblO549B9VvPGXZldaraNJmlGI3RUt89cJve6rW+M 8Ok+kchf/Uplt2cVw5EOpoQOPj8qS44JnpzTsKFScfMBjUk24wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG10LmvaEvrDLvVtIrSUCD+JNMYVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGE2NmJkNzgtZDFjNS0z NDhmLTk0YjItZWE5MzkwN2YwZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9FgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2xWIcUgv6tXUK3h1lAGPFc0hbglEktkcHoZtIzw3NAiAD/q/qivPKQ LkHH7NDFS5D7k8EFMIX/WYcHAGssfUPqvLW9RD7Sfe5Wpp7oNWa4jYeXIY+VRoAk D8lDiWW+mj9cBYN6ii5Z5LsGrrFOZQhwyrxoDKW42wjqwoK+PKuhWNcVux+sJAAJ fEdGUKfB6OF3Mum20/KBqYWZ6cRUjsHBsWE/GuvpS9QlrS4S4t7W7p7cmvp/RNVp zQ5XkWRufDIMXAtbqNjOnp0y63ND1D2HaRaQO8EcztY8SrafMsUL6aKu6EdDXYUc 0MF6B01/pL5DorqlKmc7ff89Ii7j57c= -----END CERTIFICATE-----Generated at Sun Apr 27 03:09:17 2025 by rpki-client