$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91d0c088-54e0-3768-8f2a-66f44957a2c6.roa File: 91d0c088-54e0-3768-8f2a-66f44957a2c6.roa (raw, json) Hash identifier: GHUPB+D/F/Xa3/D6DNhxuKy/R+1s+uX+cKSTQSvnUuQ= Subject key identifier: 80:83:05:9F:93:C2:B9:57:9F:5A:5A:C6:FA:13:A1:8C:62:6C:9A:3F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF498F859475003577243D0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91d0c088-54e0-3768-8f2a-66f44957a2c6.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.213.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:98:f8:59:47:50:03:57:72:43:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=5b2c4844-51c9-4642-bac3-94a8ccaa858c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:94:78:e9:67:d2:e1:bd:0a:aa:47:8a:b4:4f: d5:07:59:ac:a5:dd:a8:1c:f8:cb:89:17:9e:39:1b: b4:97:53:7d:f5:48:d9:8d:32:90:e3:9e:bc:6e:91: d7:ac:91:48:18:aa:76:e9:51:18:da:4c:39:83:07: 32:1b:6e:34:0f:a9:ce:f6:a3:64:27:e3:98:07:c9: 0b:fe:8d:50:90:70:5d:c6:fe:8d:e6:e4:0c:1f:75: 20:aa:85:ed:a1:13:e7:58:7a:20:e8:a0:93:1a:08: bb:c0:03:c0:f0:e4:c0:8e:da:ed:70:e0:b2:87:c0: fe:25:80:d6:bf:ae:68:8f:b0:37:c7:06:f2:a3:b6: 97:cd:0d:6f:93:a7:b5:97:84:f4:a5:f9:70:4d:8b: 76:e2:3e:0c:cc:72:9e:65:84:00:10:44:9f:09:b6: f0:74:e0:94:8a:b4:e4:ad:74:f9:e4:ee:99:df:2a: ef:07:1c:bd:77:64:4a:b9:8d:be:a6:76:83:0e:bb: d5:fd:84:65:99:31:79:2e:9e:3a:6e:f4:51:e5:d2: c5:0b:c5:4c:6d:c8:28:4c:fa:2a:4a:c8:04:95:6e: 25:5e:e5:87:20:1f:c9:e8:29:e5:0d:51:90:34:bc: 31:27:cf:df:bf:60:bd:ff:f9:20:ed:68:0b:84:75: 9f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:83:05:9F:93:C2:B9:57:9F:5A:5A:C6:FA:13:A1:8C:62:6C:9A:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91d0c088-54e0-3768-8f2a-66f44957a2c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:fe:b3:d1:8c:5f:5f:8e:dc:ae:4f:7d:bd:a4:03:59:76:56: d1:84:87:a7:51:4d:4e:3b:f4:cc:fe:91:c5:7d:71:ad:35:bd: 2b:c5:91:fe:76:00:92:ef:27:61:18:cc:7f:5c:e6:65:76:0b: 3e:52:9d:a3:36:9f:18:e2:d7:3c:0f:7e:1e:66:fc:0a:24:f3: 97:48:05:c0:2d:a6:05:bf:a7:7d:c4:20:31:a7:3c:0b:c0:59: 9d:d7:9f:cc:00:b8:0a:e6:66:a7:90:f8:3d:f2:27:af:93:c1: 90:bf:c9:30:b3:9f:8b:06:29:c0:fd:c1:85:fb:ed:17:5c:83: e8:32:ac:3e:d9:39:21:f5:92:1e:89:d3:8a:4c:0a:b0:0e:dc: 0f:2a:75:24:16:ac:bf:f0:ca:29:62:bb:cf:dc:55:7a:b2:c1: 28:79:14:dd:4f:76:22:45:a1:69:18:ad:94:bd:39:e5:2b:25: fd:8d:37:6c:f2:00:7c:92:3b:69:2a:ff:0d:b4:70:84:c8:e6: 09:a3:96:a0:f1:f2:7d:b2:70:c7:51:2f:4d:17:5a:ea:93:2e: a3:61:eb:30:35:05:14:7b:33:b5:63:dc:e7:c3:7c:6f:97:b9: 22:9d:9c:8c:37:e7:aa:35:8c:28:00:ef:db:6b:44:e8:1d:e7: 73:13:2a:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9Jj4WUdQA1dyQ9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NWIyYzQ4NDQtNTFjOS00NjQyLWJhYzMtOTRhOGNjYWE4NThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25R46WfS4b0KqkeKtE/VB1mspd2oHPjLiRee ORu0l1N99UjZjTKQ4568bpHXrJFIGKp26VEY2kw5gwcyG240D6nO9qNkJ+OYB8kL /o1QkHBdxv6N5uQMH3UgqoXtoRPnWHog6KCTGgi7wAPA8OTAjtrtcOCyh8D+JYDW v65oj7A3xwbyo7aXzQ1vk6e1l4T0pflwTYt24j4MzHKeZYQAEESfCbbwdOCUirTk rXT55O6Z3yrvBxy9d2RKuY2+pnaDDrvV/YRlmTF5Lp46bvRR5dLFC8VMbcgoTPoq SsgElW4lXuWHIB/J6CnlDVGQNLwxJ8/fv2C9//kg7WgLhHWfGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICDBZ+TwrlXn1paxvoToYxibJo/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTFkMGMwODgtNTRlMC0z NzY4LThmMmEtNjZmNDQ5NTdhMmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9X3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACD+s9GMX1+O3K5Pfb2kA1l2VtGEh6dRTU479Mz+kcV9ca01vSvFkf52 AJLvJ2EYzH9c5mV2Cz5SnaM2nxji1zwPfh5m/Aok85dIBcAtpgW/p33EIDGnPAvA WZ3Xn8wAuArmZqeQ+D3yJ6+TwZC/yTCzn4sGKcD9wYX77Rdcg+gyrD7ZOSH1kh6J 04pMCrAO3A8qdSQWrL/wyiliu8/cVXqywSh5FN1PdiJFoWkYrZS9OeUrJf2NN2zy AHySO2kq/w20cITI5gmjlqDx8n2ycMdRL00XWuqTLqNh6zA1BRR7M7Vj3OfDfG+X uSKdnIw356o1jCgA79trROgd53MTKhQ= -----END CERTIFICATE-----Generated at Sat Apr 26 20:24:13 2025 by rpki-client