$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97a80dd9-e751-3335-a490-a9fcb3d1c4cf.roa File: 97a80dd9-e751-3335-a490-a9fcb3d1c4cf.roa (raw, json) Hash identifier: u5AGMOdr+JLT8FNR2LNnNjxH2LLRSJousqcmjTxBJ+Q= Subject key identifier: 59:FE:F6:D1:99:5C:7E:5E:9C:32:75:74:8C:B6:79:13:24:C1:68:99 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF496B452061D6B3000C140 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97a80dd9-e751-3335-a490-a9fcb3d1c4cf.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.213.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:96:b4:52:06:1d:6b:30:00:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=c9a44d1b-eea7-49f8-b8a4-b930d5b51aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:81:56:f6:37:71:1f:a8:08:c4:4f:e2:00:5d: a7:3e:16:c2:b5:b6:aa:02:b0:f0:e5:e7:a1:e6:d1: 9e:56:25:28:dd:8d:cb:a0:32:94:70:ac:cf:48:88: 21:d8:4f:ae:d3:81:c7:72:6a:b4:9d:55:5b:55:29: ae:ef:ec:2d:db:19:86:15:72:00:f5:06:20:2d:96: a6:ff:ae:52:01:08:e9:cc:60:b1:6e:ce:06:ff:af: da:6b:9f:32:8a:e4:0c:31:f1:56:a0:f5:f6:e2:2f: f8:7f:90:c7:d5:29:a5:0a:e9:eb:05:0d:7d:6b:12: 63:3b:52:5e:cc:7d:04:b8:76:22:e3:a4:c5:7d:0f: 28:c7:71:c9:70:a4:47:3d:03:a3:45:60:00:fc:78: 7f:86:bb:af:36:53:59:b0:79:3e:61:3d:15:0a:bd: 84:e6:b9:55:1e:35:f8:d2:40:c8:9b:cd:3c:79:25: 61:dd:ca:76:48:90:7f:e5:9a:8c:1f:c3:ab:95:1d: a8:11:13:68:62:20:39:ee:71:9b:83:40:b1:2f:53: 4e:2c:5a:a9:d2:1e:0d:28:6a:f6:bf:71:e0:ef:31: 88:6e:66:56:97:fa:1b:d5:ed:8a:b2:f0:d7:44:a7: 6c:b4:f2:a0:61:bf:3a:27:b0:48:13:bf:93:1e:60: a7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FE:F6:D1:99:5C:7E:5E:9C:32:75:74:8C:B6:79:13:24:C1:68:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97a80dd9-e751-3335-a490-a9fcb3d1c4cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:cc:63:04:26:5f:1f:6d:4d:33:83:e4:5c:3b:7e:30:0d:9f: 03:a4:42:9c:d9:65:38:43:50:c8:9b:67:a5:3e:7b:be:fb:27: f7:29:c3:d2:aa:50:de:c4:42:47:a2:85:7a:7f:a6:eb:66:b2: 6e:02:6e:09:50:a1:28:3f:ab:e9:0d:0e:d9:d9:db:d0:b2:3d: 73:66:9c:7e:da:c6:1d:90:03:a8:d5:49:f7:95:de:c3:a3:92: 7b:48:1f:ef:d3:91:24:4e:a8:b7:b0:5c:6b:b6:c7:87:c6:e0: 54:57:2c:be:7e:9d:5e:8d:6f:45:e8:51:c6:7e:39:d6:10:c4: d3:3a:e7:7f:66:44:05:f5:b0:dc:d1:30:4c:f8:42:f7:86:52: 64:dc:43:68:d1:51:73:3e:5f:fd:76:9f:e6:e8:43:e4:78:a8: 16:11:6c:d0:48:4b:32:0f:3b:9f:f4:fa:71:cf:bb:90:6d:76: 5f:83:9a:c8:6f:d0:ff:a8:14:78:82:eb:f4:8e:04:39:77:4d: 63:dc:80:a7:91:a1:c4:26:e0:25:ca:e8:fc:bc:40:98:b0:04: e5:5c:b7:f6:e8:7e:d6:d2:04:75:ea:fb:64:a6:21:b6:cb:2f: df:d9:31:b0:93:e5:97:5d:98:50:f4:c1:c2:85:ef:cc:fd:89: ee:63:97:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9Ja0UgYdazAAwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk YzlhNDRkMWItZWVhNy00OWY4LWI4YTQtYjkzMGQ1YjUxYWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIFW9jdxH6gIxE/iAF2nPhbCtbaqArDw5eeh 5tGeViUo3Y3LoDKUcKzPSIgh2E+u04HHcmq0nVVbVSmu7+wt2xmGFXIA9QYgLZam /65SAQjpzGCxbs4G/6/aa58yiuQMMfFWoPX24i/4f5DH1SmlCunrBQ19axJjO1Je zH0EuHYi46TFfQ8ox3HJcKRHPQOjRWAA/Hh/hruvNlNZsHk+YT0VCr2E5rlVHjX4 0kDIm808eSVh3cp2SJB/5ZqMH8OrlR2oERNoYiA57nGbg0CxL1NOLFqp0h4NKGr2 v3Hg7zGIbmZWl/ob1e2KsvDXRKdstPKgYb86J7BIE7+THmCnNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn+9tGZXH5enDJ1dIy2eRMkwWiZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTdhODBkZDktZTc1MS0z MzM1LWE0OTAtYTlmY2IzZDFjNGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9UcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfMYwQmXx9tTTOD5Fw7fjANnwOkQpzZZThDUMibZ6U+e777J/cpw9Kq UN7EQkeihXp/putmsm4CbglQoSg/q+kNDtnZ29CyPXNmnH7axh2QA6jVSfeV3sOj kntIH+/TkSROqLewXGu2x4fG4FRXLL5+nV6Nb0XoUcZ+OdYQxNM6539mRAX1sNzR MEz4QveGUmTcQ2jRUXM+X/12n+boQ+R4qBYRbNBISzIPO5/0+nHPu5Btdl+Dmshv 0P+oFHiC6/SOBDl3TWPcgKeRocQm4CXK6Py8QJiwBOVct/boftbSBHXq+2SmIbbL L9/ZMbCT5ZddmFD0wcKF78z9ie5jl5A= -----END CERTIFICATE-----Generated at Sat Apr 26 15:58:36 2025 by rpki-client