$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/92842453-4930-3172-983a-00d4789c1932.roa File: 92842453-4930-3172-983a-00d4789c1932.roa (raw, json) Hash identifier: M6gn6q1z4OTtDEW+NZZsdLjZYPjp01s1X+2vvYQr61Y= Subject key identifier: 9E:1D:3C:B3:47:81:3E:AC:FE:67:DA:CE:93:E6:B9:6A:C1:8F:AD:3D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF495FAEADFD3122BC66600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/92842453-4930-3172-983a-00d4789c1932.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.212.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:95:fa:ea:df:d3:12:2b:c6:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=fd090133-f231-461a-acd2-8f3702472674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a7:f9:e6:e9:43:84:43:b7:f7:02:be:31:96: cd:37:aa:0f:e7:31:6f:20:46:b6:a0:93:1d:4b:bf: c0:27:58:fd:24:50:14:f9:7c:7e:72:f0:4d:e6:1c: b2:59:bb:27:9e:40:e4:a5:7a:69:c5:23:dd:04:e1: 10:a1:2f:91:be:fe:e0:bf:2e:30:7c:ac:0f:a7:59: 37:ed:f6:1e:fd:0e:45:74:dd:16:bc:99:cc:dc:b7: 99:28:f5:94:ae:b6:b4:11:9f:8d:25:c4:ac:5e:39: 50:27:08:b5:9b:79:a0:3f:5d:56:e4:c2:e3:3f:d1: 69:6d:c9:1b:2c:a4:02:e2:4e:9b:18:25:57:90:bd: 59:d1:d2:dd:1f:03:57:9b:d2:06:98:5b:53:e5:18: d7:e7:ac:c2:1f:8c:13:a4:15:56:96:ee:bd:cb:78: 7d:07:a8:58:16:85:bd:ab:8c:ef:3a:29:e5:98:bd: 55:f8:75:16:c9:73:b5:a7:e4:62:72:82:4b:b9:52: 9a:05:2d:b2:06:d4:60:17:55:7e:ef:14:f9:02:40: 65:3b:28:24:13:da:18:dd:6e:a9:21:8c:c6:57:f2: 74:51:db:92:e6:24:4e:87:15:20:f6:93:a8:a1:8c: 83:29:bb:e6:17:b5:6a:68:17:96:d6:50:a1:86:19: 81:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1D:3C:B3:47:81:3E:AC:FE:67:DA:CE:93:E6:B9:6A:C1:8F:AD:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/92842453-4930-3172-983a-00d4789c1932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:7b:a9:6a:db:8f:e3:a6:3b:ca:af:ac:95:8d:87:ac:85:b4: 4c:50:f9:15:46:56:a4:23:e4:09:85:6f:4f:42:04:72:02:42: 78:5d:1b:44:e5:b6:1f:aa:dd:26:c7:3c:33:79:a6:fb:91:7c: fb:06:c8:3a:38:83:27:ee:e6:66:b0:7c:5c:90:af:49:1a:77: 93:70:a6:53:90:7f:45:b3:38:b4:42:50:3e:ad:90:5f:e8:34: c2:fe:a6:2a:47:8f:81:7d:a3:f3:cf:a6:e1:0c:6a:b1:65:b2: a4:af:45:21:05:22:2c:1e:d4:ce:51:e8:2d:48:11:d0:59:3c: 06:f1:c5:d2:35:36:5f:02:10:f8:2b:c2:f6:7d:76:c9:86:b8: ed:80:4b:25:77:6f:d3:46:6a:e2:38:ba:05:72:5a:08:c3:80: 62:9c:21:2f:82:f9:8c:5b:0f:0d:79:b1:0c:ad:c6:f2:df:76: 3d:37:03:01:ff:e6:88:cb:29:3e:0e:fc:8c:35:4a:2e:56:c4: d6:e1:03:cd:75:1f:3b:23:f9:c3:1f:a1:03:17:1b:18:04:d5: 15:f3:f4:ab:26:e4:cf:f1:f1:91:e8:17:8f:42:95:05:64:e4: 3f:3a:59:3f:7a:2e:0b:35:89:32:a1:e0:b9:d7:d9:fb:28:d4: 46:46:3d:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JX66t/TEivGZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZmQwOTAxMzMtZjIzMS00NjFhLWFjZDItOGYzNzAyNDcyNjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqf55ulDhEO39wK+MZbNN6oP5zFvIEa2oJMd S7/AJ1j9JFAU+Xx+cvBN5hyyWbsnnkDkpXppxSPdBOEQoS+Rvv7gvy4wfKwPp1k3 7fYe/Q5FdN0WvJnM3LeZKPWUrra0EZ+NJcSsXjlQJwi1m3mgP11W5MLjP9Fpbckb LKQC4k6bGCVXkL1Z0dLdHwNXm9IGmFtT5RjX56zCH4wTpBVWlu69y3h9B6hYFoW9 q4zvOinlmL1V+HUWyXO1p+RicoJLuVKaBS2yBtRgF1V+7xT5AkBlOygkE9oY3W6p IYzGV/J0UduS5iROhxUg9pOooYyDKbvmF7VqaBeW1lChhhmBjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4dPLNHgT6s/mfazpPmuWrBj609MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTI4NDI0NTMtNDkzMC0z MTcyLTk4M2EtMDBkNDc4OWMxOTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9T0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD17qWrbj+OmO8qvrJWNh6yFtExQ+RVGVqQj5AmFb09CBHICQnhdG0Tl th+q3SbHPDN5pvuRfPsGyDo4gyfu5mawfFyQr0kad5NwplOQf0WzOLRCUD6tkF/o NML+pipHj4F9o/PPpuEMarFlsqSvRSEFIiwe1M5R6C1IEdBZPAbxxdI1Nl8CEPgr wvZ9dsmGuO2ASyV3b9NGauI4ugVyWgjDgGKcIS+C+YxbDw15sQytxvLfdj03AwH/ 5ojLKT4O/Iw1Si5WxNbhA811Hzsj+cMfoQMXGxgE1RXz9Ksm5M/x8ZHoF49ClQVk 5D86WT96Lgs1iTKh4LnX2fso1EZGPaA= -----END CERTIFICATE-----Generated at Sat Apr 26 22:51:32 2025 by rpki-client