$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/972666f9-4cd5-309a-9767-3d4a2a18856a.roa File: 972666f9-4cd5-309a-9767-3d4a2a18856a.roa (raw, json) Hash identifier: 9t6d+T+0iH9A6trBvqORuubiEzw0QnkTEn9LKjg6BSw= Subject key identifier: 12:47:D9:98:98:8C:29:70:7C:86:50:10:25:FF:4C:AC:1B:08:58:B3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF49F99B01F6536F4891540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/972666f9-4cd5-309a-9767-3d4a2a18856a.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 18717 IP address blocks: 23.212.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:9f:99:b0:1f:65:36:f4:89:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=41e8a7a7-7be7-40de-9aa1-3a0cdce36f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:af:db:e0:a3:cf:46:90:1b:eb:0e:9f:7e:b3: c7:f1:46:0d:9f:0c:7b:54:2b:3b:e0:89:89:13:63: 40:f6:27:af:f6:d4:3c:b9:ca:f8:73:6a:7b:55:00: cd:2c:db:e2:8a:ac:e4:be:20:09:57:69:40:1a:3c: dc:30:3e:74:7f:7f:73:64:84:bd:e7:0d:2f:7c:44: e1:8e:35:0b:42:ee:9c:3a:f7:c4:e3:84:2d:00:da: bb:3e:62:f7:31:a4:16:5e:1a:8b:98:14:e5:b4:c3: 0d:5f:fc:40:c3:76:41:a6:f8:ea:03:f0:90:64:55: 4e:85:84:5a:b8:f1:7d:54:20:a6:cd:84:e8:26:0d: b3:fc:c9:1d:1d:50:78:80:d1:eb:0e:8d:1a:57:27: e1:ba:d1:c4:a4:03:10:29:4e:97:30:84:47:8c:c4: f6:6c:13:c5:31:22:d9:c7:da:4e:9b:9b:c8:98:c9: cc:08:4e:16:ce:8e:ee:b6:2c:25:f1:bb:5e:93:8d: 05:f2:97:c2:3f:5f:f6:02:ad:d2:7b:cd:72:9f:c4: 03:cc:e8:b7:f7:54:8d:9e:96:4e:37:d3:cb:de:76: fc:9d:19:1a:85:b1:9c:4f:6e:e2:14:f6:ec:9b:65: 85:e3:ca:ec:5b:7b:74:55:6b:4f:ac:f6:a4:9d:23: b1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:47:D9:98:98:8C:29:70:7C:86:50:10:25:FF:4C:AC:1B:08:58:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/972666f9-4cd5-309a-9767-3d4a2a18856a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:48:88:8f:d8:1d:21:ef:a7:99:66:78:1b:3c:4b:ce:57:db: f1:b7:23:bf:c8:8f:00:38:33:e5:8d:27:14:0a:a9:e5:1c:f1: 4c:46:98:e8:22:06:4a:3e:ae:1f:bd:53:0c:c0:c8:7d:c3:d4: 7c:62:02:f6:58:b4:98:31:a9:df:fd:74:90:e8:bb:f8:dc:0b: f3:c0:93:3f:6e:aa:d6:86:e3:3d:80:9d:2e:a5:5d:2e:44:5a: d5:b1:ad:94:62:6b:92:a4:d5:2f:76:63:cf:e6:a8:11:81:78: 91:9e:bf:65:dc:b0:85:4f:ae:5a:d6:b0:e8:90:4a:39:7d:b5: ee:78:21:27:05:ce:1d:7d:3c:35:7c:45:51:14:1d:64:92:c9: a0:89:30:b8:06:d0:cf:b5:5b:90:33:99:24:fc:32:a4:76:54: a6:d6:76:a7:72:37:e2:23:d3:d2:47:f8:4f:b9:e3:95:9e:28: 16:85:73:c4:7b:2d:45:c4:3c:f2:52:4c:d2:9a:66:3f:6f:77: 53:3c:19:2c:d1:9d:18:60:b5:ef:57:cd:b4:bc:38:45:ce:56: 0f:78:73:c8:ce:75:4b:35:cf:1d:1f:3e:bb:17:d4:21:72:73: 4c:9e:ff:62:f8:08:aa:15:ea:3d:c1:d1:0b:59:be:76:b9:ce: 92:45:e4:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9J+ZsB9lNvSJFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NDFlOGE3YTctN2JlNy00MGRlLTlhYTEtM2EwY2RjZTM2ZjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6/b4KPPRpAb6w6ffrPH8UYNnwx7VCs74ImJ E2NA9iev9tQ8ucr4c2p7VQDNLNviiqzkviAJV2lAGjzcMD50f39zZIS95w0vfETh jjULQu6cOvfE44QtANq7PmL3MaQWXhqLmBTltMMNX/xAw3ZBpvjqA/CQZFVOhYRa uPF9VCCmzYToJg2z/MkdHVB4gNHrDo0aVyfhutHEpAMQKU6XMIRHjMT2bBPFMSLZ x9pOm5vImMnMCE4Wzo7utiwl8btek40F8pfCP1/2Aq3Se81yn8QDzOi391SNnpZO N9PL3nb8nRkahbGcT27iFPbsm2WF48rsW3t0VWtPrPaknSOxBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJH2ZiYjClwfIZQECX/TKwbCFizMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTcyNjY2ZjktNGNkNS0z MDlhLTk3NjctM2Q0YTJhMTg4NTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9TvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRIiI/YHSHvp5lmeBs8S85X2/G3I7/IjwA4M+WNJxQKqeUc8UxGmOgi Bko+rh+9UwzAyH3D1HxiAvZYtJgxqd/9dJDou/jcC/PAkz9uqtaG4z2AnS6lXS5E WtWxrZRia5Kk1S92Y8/mqBGBeJGev2XcsIVPrlrWsOiQSjl9te54IScFzh19PDV8 RVEUHWSSyaCJMLgG0M+1W5AzmST8MqR2VKbWdqdyN+Ij09JH+E+545WeKBaFc8R7 LUXEPPJSTNKaZj9vd1M8GSzRnRhgte9XzbS8OEXOVg94c8jOdUs1zx0fPrsX1CFy c0ye/2L4CKoV6j3B0QtZvna5zpJF5I4= -----END CERTIFICATE-----Generated at Sun Apr 27 07:27:22 2025 by rpki-client