$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b0b35ca-a5b0-3b09-91c9-098c8aa2f22f.roa File: 9b0b35ca-a5b0-3b09-91c9-098c8aa2f22f.roa (raw, json) Hash identifier: i0hPobWm8i3KoAJ42cp17XvU8YSfR1V3o0lIycJsl8w= Subject key identifier: 41:78:D4:C5:54:A8:B3:BE:A6:CC:9F:7A:6B:85:0C:3A:38:65:D0:D7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849A8E9E7833F73A80BAD829680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b0b35ca-a5b0-3b09-91c9-098c8aa2f22f.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 27947 IP address blocks: 23.219.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:e7:83:3f:73:a8:0b:ad:82:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=14bdd83a-e97a-4d9e-858b-4916e69409da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:57:88:b3:cc:12:96:3a:bd:f0:0a:da:23:92: 1c:ab:1f:b7:9c:4e:a8:84:cb:86:d5:c2:44:9a:78: e7:9f:9f:d8:e1:06:1c:c6:00:b9:cc:71:c1:8e:0d: 5d:09:d5:2b:33:7b:44:44:7e:1f:d8:da:66:28:9d: 13:3a:75:44:97:fa:9d:aa:a1:6b:f0:20:42:f5:5b: 27:99:f6:89:ed:bb:b6:29:7c:d0:e2:88:ec:87:10: 73:40:d3:7e:0f:6a:ed:70:2a:66:85:ea:fb:fa:4c: 3c:4e:0e:d7:13:9a:a6:a7:64:90:3a:65:fa:4f:e3: 94:34:ef:cc:fd:21:d2:13:c7:bf:b3:5e:b8:ba:77: 8d:ba:3a:0a:f6:21:63:2d:1e:74:df:30:cf:9a:be: 24:3b:6f:db:9e:88:7a:02:87:8d:d6:ec:7b:86:22: 60:84:80:05:e4:ba:de:30:ba:1d:57:b5:43:e3:ca: 3e:31:14:41:a4:0c:69:93:02:70:7e:d7:ea:b8:e7: 7d:ab:0c:69:a5:30:7a:9b:dd:c2:84:7b:8e:be:33: ca:b9:bc:a3:75:08:49:85:50:71:fa:6e:6d:55:22: bc:94:ae:f7:ac:64:89:43:d8:71:30:07:33:e4:df: 79:8e:87:dd:df:af:d5:a5:b0:2a:dd:41:e0:cd:4e: ff:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:78:D4:C5:54:A8:B3:BE:A6:CC:9F:7A:6B:85:0C:3A:38:65:D0:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b0b35ca-a5b0-3b09-91c9-098c8aa2f22f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:36:04:45:a5:10:c7:ac:1e:fd:72:90:33:25:09:8a:19:e9: 48:34:c2:29:ec:84:c2:a7:34:05:3b:c0:75:f0:8d:18:4f:84: 75:54:fd:64:a9:56:6b:7f:99:7c:e6:21:9e:3e:21:0e:94:16: 93:ed:27:83:91:c9:54:ab:23:0d:e6:45:9c:27:04:d5:ad:ea: 18:65:1b:57:42:d2:f3:81:87:00:3e:74:5d:2c:f7:b5:2c:ed: ec:6f:1e:dc:d3:aa:ed:25:bf:78:2f:0b:5b:8a:c3:cd:04:73: b3:fd:c8:55:2e:7a:bb:7e:81:22:25:d5:d1:2c:9e:57:e9:30: b4:11:e6:7a:43:5b:1c:59:79:de:4e:0f:95:36:7b:da:31:e4: 41:a3:1c:bb:da:24:10:e9:a7:2c:e5:95:67:2a:85:29:92:1d: b1:67:78:ee:5b:a4:dd:81:a1:0c:fc:2c:aa:20:bf:aa:68:f3: 85:4c:0e:4b:78:72:02:ab:ea:24:58:b5:b4:d0:c7:50:9d:e1: 71:d5:e2:63:bc:ad:e7:4c:d3:30:78:6d:dd:fd:d4:81:06:77: b1:67:71:68:99:02:27:f7:ce:2a:a8:0a:c6:b3:61:27:d4:68: ca:4a:a8:c3:98:77:f9:fd:49:a0:b8:3b:6f:93:15:26:78:21: b7:a7:b4:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6eeDP3OoC62CloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk MTRiZGQ4M2EtZTk3YS00ZDllLTg1OGItNDkxNmU2OTQwOWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1eIs8wSljq98AraI5Icqx+3nE6ohMuG1cJE mnjnn5/Y4QYcxgC5zHHBjg1dCdUrM3tERH4f2NpmKJ0TOnVEl/qdqqFr8CBC9Vsn mfaJ7bu2KXzQ4ojshxBzQNN+D2rtcCpmher7+kw8Tg7XE5qmp2SQOmX6T+OUNO/M /SHSE8e/s164uneNujoK9iFjLR503zDPmr4kO2/bnoh6AoeN1ux7hiJghIAF5Lre MLodV7VD48o+MRRBpAxpkwJwftfquOd9qwxppTB6m93ChHuOvjPKubyjdQhJhVBx +m5tVSK8lK73rGSJQ9hxMAcz5N95jofd36/VpbAq3UHgzU7/NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEF41MVUqLO+psyfemuFDDo4ZdDXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWIwYjM1Y2EtYTViMC0z YjA5LTkxYzktMDk4YzhhYTJmMjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9uQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAII2BEWlEMesHv1ykDMlCYoZ6Ug0winshMKnNAU7wHXwjRhPhHVU/WSp Vmt/mXzmIZ4+IQ6UFpPtJ4ORyVSrIw3mRZwnBNWt6hhlG1dC0vOBhwA+dF0s97Us 7exvHtzTqu0lv3gvC1uKw80Ec7P9yFUuert+gSIl1dEsnlfpMLQR5npDWxxZed5O D5U2e9ox5EGjHLvaJBDppyzllWcqhSmSHbFneO5bpN2BoQz8LKogv6po84VMDkt4 cgKr6iRYtbTQx1Cd4XHV4mO8redM0zB4bd391IEGd7FncWiZAif3ziqoCsazYSfU aMpKqMOYd/n9SaC4O2+TFSZ4IbentKI= -----END CERTIFICATE-----Generated at Sun Apr 27 15:31:17 2025 by rpki-client