$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/911c01cb-d955-3b3d-a7aa-fac07f89292d.roa File: 911c01cb-d955-3b3d-a7aa-fac07f89292d.roa (raw, json) Hash identifier: 6j9AxlKqxFyL0I1zabHOcuY3qEBJpxlX4ZqlRAQzyeY= Subject key identifier: 8D:4F:DB:45:30:AA:51:A7:0E:16:FE:4A:A9:74:C8:98:42:F9:BB:7D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF48337C4348CEE13B4180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/911c01cb-d955-3b3d-a7aa-fac07f89292d.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 16625 IP address blocks: 23.216.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:48:33:7c:43:48:ce:e1:3b:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=44853f1f-d0ad-4b2e-8365-75565c3a476e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:30:0c:9f:7d:20:b3:1a:08:32:e5:cf:4c:20: cd:af:f2:aa:cd:22:fb:75:bb:77:03:15:46:f4:38: 28:ab:34:e7:19:4e:eb:bf:ab:ec:35:70:6d:56:5e: e1:0a:74:4b:97:c2:f1:f3:50:98:99:64:8b:94:0d: 91:9d:37:e3:49:80:79:62:bb:d3:e4:e5:b7:0d:d3: 1a:35:a0:a4:f6:09:3e:16:b4:13:05:f9:cc:e8:f6: f6:94:58:80:c7:6c:51:2d:41:d2:5f:9b:0c:92:15: c6:9b:7c:e6:d5:35:1e:21:91:68:04:5c:f6:4c:8c: 03:be:a9:b9:96:3e:c2:b4:19:0b:35:d5:93:d3:aa: 18:7c:a4:ce:6d:c1:81:9f:08:b1:b8:96:85:a9:65: b5:2e:0b:49:92:25:c8:80:39:e2:b4:32:99:b9:4e: 37:bc:9c:e9:88:ce:d6:20:42:3c:61:f7:ba:f4:f5: a5:0b:cc:8b:57:47:b5:55:75:2e:fb:3b:3b:d2:46: d2:79:20:e5:53:c4:27:30:d5:9f:32:63:b1:3a:79: 70:00:84:be:27:e0:67:ef:76:3a:12:89:3e:a5:a7: 42:59:f4:e5:2d:02:1e:92:70:8f:20:7c:5b:c2:14: 22:04:af:0f:01:86:79:01:79:ee:df:f1:dc:27:0c: 47:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4F:DB:45:30:AA:51:A7:0E:16:FE:4A:A9:74:C8:98:42:F9:BB:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/911c01cb-d955-3b3d-a7aa-fac07f89292d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:3d:27:c0:cb:d4:71:2f:40:a9:5a:cc:cd:8f:65:fe:a9:c6: 57:21:72:28:b2:86:5f:40:47:20:a9:18:9e:d2:d9:91:57:1e: 98:1c:81:53:a2:cb:e2:d3:4e:29:f3:94:a7:b9:55:84:3b:42: 93:05:77:0c:8a:56:93:3e:3c:40:3a:3a:e4:e5:15:f8:e0:06: 11:1a:ef:f0:2f:fa:6c:a1:e4:b1:0b:02:1a:0c:fe:be:89:7b: 44:16:e3:66:8d:df:2a:0b:7e:71:f1:0d:52:82:2b:b9:48:b0: c1:0f:e4:98:5d:13:c5:8a:07:05:c8:be:85:f2:57:6d:ed:75: 3d:f0:ba:f5:72:f2:f9:f7:81:7b:3e:13:69:de:77:fe:34:98: 9a:4c:21:7d:b9:f2:9f:16:f9:c1:f4:06:a5:e6:f0:d9:8e:fa: 21:e4:b3:bd:e2:2d:29:4f:90:30:7d:bf:7b:d7:61:b7:8c:9f: 80:bf:c6:35:7e:b8:69:84:d8:e1:ef:ca:db:57:aa:39:06:42: ba:34:6b:cc:7e:45:c6:ba:2a:4a:61:15:46:84:c8:39:7b:eb: d3:77:a2:1f:c6:b4:20:77:1d:e6:b9:81:2b:2e:86:3d:2e:bc: 1e:51:55:a7:2d:d8:21:88:d5:48:4b:26:a1:4d:ef:3e:85:e7: c2:79:e1:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0gzfENIzuE7QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NDQ4NTNmMWYtZDBhZC00YjJlLTgzNjUtNzU1NjVjM2E0NzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDAMn30gsxoIMuXPTCDNr/KqzSL7dbt3AxVG 9DgoqzTnGU7rv6vsNXBtVl7hCnRLl8Lx81CYmWSLlA2RnTfjSYB5YrvT5OW3DdMa NaCk9gk+FrQTBfnM6Pb2lFiAx2xRLUHSX5sMkhXGm3zm1TUeIZFoBFz2TIwDvqm5 lj7CtBkLNdWT06oYfKTObcGBnwixuJaFqWW1LgtJkiXIgDnitDKZuU43vJzpiM7W IEI8Yfe69PWlC8yLV0e1VXUu+zs70kbSeSDlU8QnMNWfMmOxOnlwAIS+J+Bn73Y6 Eok+padCWfTlLQIeknCPIHxbwhQiBK8PAYZ5AXnu3/HcJwxHzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1P20UwqlGnDhb+Sql0yJhC+bt9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTExYzAxY2ItZDk1NS0z YjNkLWE3YWEtZmFjMDdmODkyOTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9jIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF49J8DL1HEvQKlazM2PZf6pxlchciiyhl9ARyCpGJ7S2ZFXHpgcgVOi y+LTTinzlKe5VYQ7QpMFdwyKVpM+PEA6OuTlFfjgBhEa7/Av+myh5LELAhoM/r6J e0QW42aN3yoLfnHxDVKCK7lIsMEP5JhdE8WKBwXIvoXyV23tdT3wuvVy8vn3gXs+ E2ned/40mJpMIX258p8W+cH0BqXm8NmO+iHks73iLSlPkDB9v3vXYbeMn4C/xjV+ uGmE2OHvyttXqjkGQro0a8x+Rca6KkphFUaEyDl769N3oh/GtCB3Hea5gSsuhj0u vB5RVact2CGI1UhLJqFN7z6F58J54cQ= -----END CERTIFICATE-----Generated at Sun Apr 27 05:39:55 2025 by rpki-client