$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96dafe3a-e894-39e3-a567-8c80d02ab87c.roa File: 96dafe3a-e894-39e3-a567-8c80d02ab87c.roa (raw, json) Hash identifier: KQxncnCFizMbaIHmiZ1YefVDTGEWebniH3zrTmxjcU8= Subject key identifier: 0A:85:25:19:43:F7:82:BC:6D:06:9D:63:3C:24:BB:82:45:9F:C9:D9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF48ECE4DB087591FE7000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96dafe3a-e894-39e3-a567-8c80d02ab87c.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.217.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:48:ec:e4:db:08:75:91:fe:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=a5def638-64d8-4eb0-b56a-57034231c769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:59:75:1a:c3:8e:6e:38:58:31:30:87:57:08: 04:dc:7e:4f:7d:56:06:3f:c2:10:b8:a4:92:54:72: 07:8c:f4:a0:a1:cb:c0:9f:ca:27:52:73:b2:88:74: b7:3d:e7:11:08:ad:e3:ec:51:4a:4f:b5:a9:0a:3f: be:23:c3:89:99:40:3d:5c:f0:5a:99:4e:27:f6:1b: 0c:e4:b4:26:2f:45:0a:46:81:d2:39:45:c7:70:0b: c5:58:79:bf:d9:1c:2c:19:0e:3b:fe:0e:90:9d:c5: 79:f9:ba:89:de:62:d9:35:a8:d4:38:1a:f4:80:1e: a8:3c:09:1a:6b:9b:ce:51:af:b9:6d:5b:3d:c4:e7: e0:14:40:f7:7e:70:c5:a2:86:a8:88:6d:63:3f:d0: 83:98:7d:57:1c:b0:a8:29:ad:ea:04:a7:19:18:99: e8:d1:d4:87:62:2b:32:c9:d6:42:7f:16:9f:06:9b: 3a:d3:74:94:ab:38:6f:0a:20:b3:8f:c5:c8:c8:1b: 83:c9:a3:9b:f7:e2:55:8d:64:59:1b:d8:2b:86:e8: f9:54:21:3c:64:80:30:3c:16:2a:5f:e5:7e:5c:fa: a8:18:2f:04:60:c3:02:c8:9a:5c:a1:d0:a5:4c:7b: 75:d1:2c:5a:ec:4e:28:4a:78:19:7c:90:bc:3e:c7: 34:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:85:25:19:43:F7:82:BC:6D:06:9D:63:3C:24:BB:82:45:9F:C9:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96dafe3a-e894-39e3-a567-8c80d02ab87c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:17:69:6c:07:e8:13:4c:71:d3:e3:13:43:ad:10:b5:07:8d: c8:cf:d3:53:f4:d7:b6:b3:29:2b:a6:bc:30:00:1b:2a:e4:ba: cb:f5:c5:eb:db:aa:99:09:2b:dc:c8:45:49:88:76:48:e7:6b: 65:87:55:69:86:64:e6:7c:18:b7:7f:f0:a6:db:13:06:f5:04: 2f:0b:33:65:7c:a3:9e:20:b7:14:aa:22:ba:e0:75:62:18:93: 96:ce:dc:2b:c4:0f:93:bf:0d:6d:7c:58:4c:dd:dc:0f:74:a5: 56:3b:89:28:ad:06:1e:c7:ce:c3:76:c4:80:e0:3e:4d:c6:c6: 85:60:f0:bc:dc:4a:9d:11:2a:ab:e7:b8:45:13:68:40:a7:6b: 60:6c:e3:26:c5:aa:5d:fc:e1:a7:81:b5:bd:3b:9c:61:b7:b5: 69:5e:f0:03:07:6b:99:11:f9:c9:f2:3a:94:0d:44:d3:5f:22: fe:aa:0c:b3:30:d5:95:f1:02:e3:93:f2:5d:d7:83:40:1f:8d: c2:73:52:e6:90:ac:e7:f1:13:fc:f7:78:2b:11:5e:29:f5:79: 7c:ab:86:4b:33:18:5a:7a:0a:41:eb:e6:f3:88:87:2f:e2:6c: 4c:25:00:cb:b6:5c:29:10:3e:57:72:65:1b:bd:d7:47:18:cf: 9d:f9:06:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0js5NsIdZH+cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk YTVkZWY2MzgtNjRkOC00ZWIwLWI1NmEtNTcwMzQyMzFjNzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFl1GsOObjhYMTCHVwgE3H5PfVYGP8IQuKSS VHIHjPSgocvAn8onUnOyiHS3PecRCK3j7FFKT7WpCj++I8OJmUA9XPBamU4n9hsM 5LQmL0UKRoHSOUXHcAvFWHm/2RwsGQ47/g6QncV5+bqJ3mLZNajUOBr0gB6oPAka a5vOUa+5bVs9xOfgFED3fnDFooaoiG1jP9CDmH1XHLCoKa3qBKcZGJno0dSHYisy ydZCfxafBps603SUqzhvCiCzj8XIyBuDyaOb9+JVjWRZG9grhuj5VCE8ZIAwPBYq X+V+XPqoGC8EYMMCyJpcodClTHt10Sxa7E4oSngZfJC8Psc0qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqFJRlD94K8bQadYzwku4JFn8nZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTZkYWZlM2EtZTg5NC0z OWUzLWE1NjctOGM4MGQwMmFiODdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9l3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUXaWwH6BNMcdPjE0OtELUHjcjP01P017azKSumvDAAGyrkusv1xevb qpkJK9zIRUmIdkjna2WHVWmGZOZ8GLd/8KbbEwb1BC8LM2V8o54gtxSqIrrgdWIY k5bO3CvED5O/DW18WEzd3A90pVY7iSitBh7HzsN2xIDgPk3GxoVg8LzcSp0RKqvn uEUTaECna2Bs4ybFql384aeBtb07nGG3tWle8AMHa5kR+cnyOpQNRNNfIv6qDLMw 1ZXxAuOT8l3Xg0AfjcJzUuaQrOfxE/z3eCsRXin1eXyrhkszGFp6CkHr5vOIhy/i bEwlAMu2XCkQPldyZRu910cYz535Bv0= -----END CERTIFICATE-----Generated at Sat Apr 26 17:40:51 2025 by rpki-client