$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e7a536c-b584-35dc-a3b1-e5c6905f0b05.roa File: 8e7a536c-b584-35dc-a3b1-e5c6905f0b05.roa (raw, json) Hash identifier: KGvAE/a6V6MYwgXY9Y6B7D7frVih+Gh3zHiagPh58O8= Subject key identifier: 08:6B:E1:3C:5D:BF:13:E0:FB:1B:0C:6D:C6:7E:14:D7:EC:04:1C:84 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829DCEE977A09EFE7EDF0EC Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e7a536c-b584-35dc-a3b1-e5c6905f0b05.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.206.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:dc:ee:97:7a:09:ef:e7:ed:f0:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=7ca259cd-e194-419e-861f-5ea5753d7598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:27:b5:9f:09:89:11:04:f1:29:fa:d0:02:7c: 40:e1:d8:9a:67:0e:bf:5f:11:ee:04:ef:3c:a5:bc: 16:8f:c6:0a:8e:26:5e:a3:47:26:e9:ab:b4:15:ba: 35:3e:58:ab:93:26:64:77:5b:6d:45:dc:e2:61:06: a4:53:f8:90:3c:0a:99:d6:ba:80:e8:50:a9:fd:d0: 31:7f:bc:07:40:42:7e:71:6d:22:50:dd:e3:75:75: 67:ec:00:af:58:a8:19:1e:38:5f:91:03:06:e1:41: 46:b1:b1:be:eb:aa:55:72:1e:98:81:8e:8c:48:eb: 62:07:44:7f:1f:f3:52:d6:16:2d:9b:84:e9:e8:47: 3f:2b:2b:4b:1c:fb:b1:58:69:dc:bb:70:71:bd:83: 62:08:8f:59:d1:07:f9:cd:d2:62:61:d8:2a:29:6b: 12:78:94:f7:f9:b1:5e:32:e7:42:26:53:f3:ee:ea: 92:ed:27:69:61:93:f8:6e:eb:cc:b7:78:87:d4:f8: d4:4e:72:a4:35:d5:83:af:96:1a:38:74:71:9c:8a: 97:37:2d:71:f6:bf:aa:e6:05:a0:3a:20:85:c9:7c: 1b:b6:e2:36:b8:ff:26:1a:2d:b7:a6:a1:53:36:a4: e5:37:eb:3b:b3:d3:d8:08:bc:8f:8c:47:5a:45:c6: 1d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6B:E1:3C:5D:BF:13:E0:FB:1B:0C:6D:C6:7E:14:D7:EC:04:1C:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e7a536c-b584-35dc-a3b1-e5c6905f0b05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:15:2d:5c:a7:30:a3:96:d9:c0:39:73:18:cd:7e:26:ab:3f: 42:e9:8d:4e:cb:be:9b:4c:35:d1:f8:3d:90:21:91:30:3e:ce: f1:3e:d9:4c:d3:54:f2:a6:7f:71:ad:73:66:8b:98:a3:12:59: aa:78:0b:95:ff:65:57:04:58:30:a0:0e:5c:19:9f:9c:af:92: 41:e5:aa:3d:91:1c:fe:fb:4c:96:58:11:1f:8c:90:16:c9:41: a4:06:74:65:0d:b0:ec:71:82:43:7f:d4:f6:5b:2e:83:74:fe: 9b:11:0c:06:44:4c:b0:a9:aa:68:1d:c9:b8:1f:d8:2d:fb:a1: 97:75:0a:80:19:82:fc:6d:f5:63:f2:a6:64:f0:d1:eb:a8:e6: 91:d4:74:24:9e:a6:ee:f5:04:27:9e:a1:c2:d6:74:00:3f:dd: 08:71:de:75:bb:02:b9:5c:f4:79:0a:9c:56:dc:1a:03:48:20: c0:10:f5:b4:2c:44:f3:a6:0e:28:c9:44:20:3d:c9:a0:51:72: 81:9d:2d:e5:0e:ec:55:fe:96:df:24:5e:2e:0f:7e:eb:cb:2d: 78:24:ca:55:57:7a:a6:70:7f:dc:b4:3c:e9:64:be:13:4c:5d: c6:73:29:7e:b2:73:db:c2:63:e8:0d:f1:cc:55:d9:ed:d5:66: a5:42:31:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdzul3oJ7+ft8OwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk N2NhMjU5Y2QtZTE5NC00MTllLTg2MWYtNWVhNTc1M2Q3NTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApie1nwmJEQTxKfrQAnxA4diaZw6/XxHuBO88 pbwWj8YKjiZeo0cm6au0Fbo1PlirkyZkd1ttRdziYQakU/iQPAqZ1rqA6FCp/dAx f7wHQEJ+cW0iUN3jdXVn7ACvWKgZHjhfkQMG4UFGsbG+66pVch6YgY6MSOtiB0R/ H/NS1hYtm4Tp6Ec/KytLHPuxWGncu3BxvYNiCI9Z0Qf5zdJiYdgqKWsSeJT3+bFe MudCJlPz7uqS7SdpYZP4buvMt3iH1PjUTnKkNdWDr5YaOHRxnIqXNy1x9r+q5gWg OiCFyXwbtuI2uP8mGi23pqFTNqTlN+s7s9PYCLyPjEdaRcYd5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhr4TxdvxPg+xsMbcZ+FNfsBByEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGU3YTUzNmMtYjU4NC0z NWRjLWEzYjEtZTVjNjkwNWYwYjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF87VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsVLVynMKOW2cA5cxjNfiarP0LpjU7LvptMNdH4PZAhkTA+zvE+2UzT VPKmf3Gtc2aLmKMSWap4C5X/ZVcEWDCgDlwZn5yvkkHlqj2RHP77TJZYER+MkBbJ QaQGdGUNsOxxgkN/1PZbLoN0/psRDAZETLCpqmgdybgf2C37oZd1CoAZgvxt9WPy pmTw0euo5pHUdCSepu71BCeeocLWdAA/3Qhx3nW7Arlc9HkKnFbcGgNIIMAQ9bQs RPOmDijJRCA9yaBRcoGdLeUO7FX+lt8kXi4PfuvLLXgkylVXeqZwf9y0POlkvhNM XcZzKX6yc9vCY+gN8cxV2e3VZqVCMS0= -----END CERTIFICATE-----Generated at Sat Apr 26 19:54:09 2025 by rpki-client