$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b8e17af-d372-3d58-b7c3-a42bf96bbf79.roa File: 9b8e17af-d372-3d58-b7c3-a42bf96bbf79.roa (raw, json) Hash identifier: sucKbA/5N8GpQkzgiC0Ea7iEB6UGtNyjJRYsKl/9d4I= Subject key identifier: 63:56:09:1C:2B:5B:D3:A6:8D:5B:33:5E:5C:1B:81:71:AA:C5:02:68 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF4982A5E1F2C4344ACEC40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b8e17af-d372-3d58-b7c3-a42bf96bbf79.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.213.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:98:2a:5e:1f:2c:43:44:ac:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=b849f256-20fd-41fd-8efb-35e660b7275b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:07:63:31:aa:d0:aa:18:b1:51:84:b1:81:47: 44:a2:13:0b:05:74:51:5e:c7:b8:89:bd:61:b3:21: 43:c5:7e:0b:72:e8:60:82:83:d6:0e:13:59:50:60: 3b:ad:6b:61:71:f2:de:23:e8:e4:44:43:4b:ac:f9: 8c:8e:2f:95:b5:92:65:6c:fe:68:43:58:ae:4b:7b: 26:f6:25:fc:cb:25:75:83:ce:eb:9e:e6:09:4f:b9: 39:d8:f1:f1:57:33:bf:83:f7:8b:e4:d4:a8:4b:31: ae:88:98:91:d8:9f:f7:f5:f6:7f:38:bd:45:ef:22: 58:2c:58:dc:ba:ad:56:bc:97:f4:6c:c3:07:ae:a9: 7a:b3:ee:53:cb:36:cf:68:b4:9f:0a:0f:79:47:af: 03:29:7b:61:0f:ce:f8:6e:95:9a:8a:9a:8a:9c:96: c0:bf:8f:41:71:dd:da:ae:ba:75:e3:16:42:9a:40: 5c:b2:56:75:54:da:c8:07:a5:ed:52:61:41:06:d2: 77:d7:6b:83:28:be:9b:71:3f:93:88:18:44:63:fa: b5:74:8c:6c:a9:82:97:fd:40:27:bc:92:b1:bd:5d: d0:e9:fb:e8:c9:b4:c3:e5:76:19:93:7d:4c:1d:34: f5:bc:8a:a2:ef:65:73:78:75:89:2f:3a:c9:fe:84: bd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:56:09:1C:2B:5B:D3:A6:8D:5B:33:5E:5C:1B:81:71:AA:C5:02:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b8e17af-d372-3d58-b7c3-a42bf96bbf79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:83:00:d7:02:57:68:26:7b:ba:d5:8f:87:70:3a:58:68:84: 3e:81:a5:26:bd:a6:5e:38:eb:78:8b:9e:9b:6b:77:bd:08:3d: 4e:e7:a5:5d:38:fc:c9:bf:3e:1d:4e:ad:ad:86:f2:b0:af:18: 98:d3:46:40:d4:36:3f:99:21:cf:35:55:84:8f:a8:84:1d:0e: c9:06:9e:26:99:e1:7e:ac:9b:db:4b:2a:ba:ff:35:14:a9:c7: b0:bb:30:3b:42:01:88:cd:0a:05:65:5a:02:e7:d9:11:96:f2: ed:63:8c:9c:dc:02:06:d1:d1:8b:a5:4f:66:af:92:a0:ea:5c: 11:d6:8f:21:92:b4:51:3b:1f:62:7d:a0:8b:ce:b0:2a:3a:0b: db:f6:aa:40:23:49:fa:68:88:83:6b:f4:fc:79:36:10:8b:21: f3:78:4b:3b:e4:6d:0b:ac:fa:3a:36:20:cb:d1:12:cb:90:46: 6b:90:4e:a6:8c:bc:6e:c1:99:ab:0b:f6:32:ad:71:20:0a:77: 4d:eb:62:81:2e:ac:22:26:81:1d:0c:91:b2:24:48:11:07:24: 8f:be:79:8f:6d:54:7e:f8:47:47:3c:cd:76:43:44:2d:87:d4: 2b:0b:de:a9:7a:74:73:94:64:c4:3e:f3:ac:95:68:91:37:1d: 02:59:1e:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JgqXh8sQ0Ss7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk Yjg0OWYyNTYtMjBmZC00MWZkLThlZmItMzVlNjYwYjcyNzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAdjMarQqhixUYSxgUdEohMLBXRRXse4ib1h syFDxX4LcuhggoPWDhNZUGA7rWthcfLeI+jkRENLrPmMji+VtZJlbP5oQ1iuS3sm 9iX8yyV1g87rnuYJT7k52PHxVzO/g/eL5NSoSzGuiJiR2J/39fZ/OL1F7yJYLFjc uq1WvJf0bMMHrql6s+5TyzbPaLSfCg95R68DKXthD874bpWaipqKnJbAv49Bcd3a rrp14xZCmkBcslZ1VNrIB6XtUmFBBtJ312uDKL6bcT+TiBhEY/q1dIxsqYKX/UAn vJKxvV3Q6fvoybTD5XYZk31MHTT1vIqi72VzeHWJLzrJ/oS9JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNWCRwrW9OmjVszXlwbgXGqxQJoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWI4ZTE3YWYtZDM3Mi0z ZDU4LWI3YzMtYTQyYmY5NmJiZjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9WvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeDANcCV2gme7rVj4dwOlhohD6BpSa9pl4463iLnptrd70IPU7npV04 /Mm/Ph1Ora2G8rCvGJjTRkDUNj+ZIc81VYSPqIQdDskGniaZ4X6sm9tLKrr/NRSp x7C7MDtCAYjNCgVlWgLn2RGW8u1jjJzcAgbR0YulT2avkqDqXBHWjyGStFE7H2J9 oIvOsCo6C9v2qkAjSfpoiINr9Px5NhCLIfN4SzvkbQus+jo2IMvREsuQRmuQTqaM vG7BmasL9jKtcSAKd03rYoEurCImgR0MkbIkSBEHJI++eY9tVH74R0c8zXZDRC2H 1CsL3ql6dHOUZMQ+86yVaJE3HQJZHpI= -----END CERTIFICATE-----Generated at Sat Apr 26 15:57:41 2025 by rpki-client