$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9faa1085-dffd-3f57-9d60-e666b72796a1.roa File: 9faa1085-dffd-3f57-9d60-e666b72796a1.roa (raw, json) Hash identifier: qhU2OcusCaOgDtPFkl8L8YmPDqSgSjtu3fhhc66K8AI= Subject key identifier: D7:91:3A:77:BE:F0:CF:5A:B2:AF:71:F2:5A:47:6D:02:83:87:4D:50 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E67020A90879C79AA480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9faa1085-dffd-3f57-9d60-e666b72796a1.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.206.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e6:70:20:a9:08:79:c7:9a:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=e5a8a0f2-30ce-45d3-90f8-54431d8afe49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:aa:66:a2:32:27:b0:50:98:f0:7d:36:f8:25: 08:68:9f:b4:b9:5c:cf:a0:a7:8f:6b:b3:be:ba:0f: 5c:41:4a:45:33:53:b3:b6:65:df:c5:de:8b:bf:ee: 93:88:3f:fb:68:5a:91:e3:0e:dc:18:5c:d8:3a:76: da:82:e1:cc:7c:4a:ad:91:e4:86:d4:17:74:cf:9d: 69:72:74:b8:d7:10:a0:de:91:8f:1d:a3:00:fe:57: 0d:3d:f1:41:85:71:80:e9:d1:c2:63:22:af:d9:e5: 07:3e:eb:e7:74:c0:c3:a4:10:b6:62:e0:ab:3e:bc: a0:b7:0f:70:e8:b8:31:1c:67:ea:e8:2e:a0:6d:6d: b4:e3:a0:21:07:c4:c8:ce:41:1d:1d:73:3b:6b:dd: 7e:7d:48:f1:b1:cb:68:5a:99:49:5e:7f:a7:c6:90: 17:b8:37:a8:c5:50:6a:9c:c2:ea:3b:9d:eb:b3:6d: e5:d2:be:d6:d8:8e:aa:f1:c0:50:2e:af:3c:12:68: 84:c1:1d:98:b7:34:1c:b2:27:99:5c:2a:12:f4:43: 2d:0e:28:59:fc:3a:54:45:e7:cb:ca:22:ae:c7:4c: b2:84:70:cf:cb:f5:b9:af:dd:2b:81:04:26:a8:26: 67:11:60:ed:9e:be:bf:25:44:2b:4f:4d:c5:9c:76: 34:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:91:3A:77:BE:F0:CF:5A:B2:AF:71:F2:5A:47:6D:02:83:87:4D:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9faa1085-dffd-3f57-9d60-e666b72796a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:aa:eb:07:d5:4d:a1:24:3d:80:61:c0:61:84:25:e7:03:57: 9b:b2:ce:06:5f:ce:95:51:f3:72:26:04:3f:3c:94:71:21:8b: 4f:c1:01:82:3d:50:f4:8f:9b:ac:9b:6c:a5:92:37:98:96:7d: 96:2e:5d:8c:4c:69:bc:87:e1:9e:4d:ff:79:b4:e8:8a:17:47: 71:3e:63:29:fa:e9:b5:16:21:04:84:d2:ec:36:3c:18:7f:bc: 63:12:10:c7:70:65:28:93:ef:f7:ed:e7:cb:70:dd:81:8b:9c: 2c:01:4c:49:ad:cc:de:72:d0:f4:32:7d:96:93:3c:95:f7:dc: 3c:d3:7c:23:2c:3d:e1:ba:27:63:37:4c:8b:d6:0b:19:c9:e6: 6e:14:97:0a:7e:d9:d7:01:e6:3e:99:18:c5:24:a9:2b:59:7a: 50:77:44:18:b7:96:88:ad:a2:98:a9:14:d1:73:ac:f9:15:ea: 65:2a:90:87:3a:4e:79:b7:b7:d9:f5:1e:ea:15:81:d5:e1:3d: 46:01:07:b8:41:5b:c9:04:db:1c:f9:e7:a0:32:bf:63:99:fb: eb:c1:e4:f3:ea:0c:3b:d4:66:e8:94:e1:95:d1:96:3c:3c:44: e0:df:ec:2c:34:e8:cf:2f:3a:04:a2:28:ad:34:31:f3:f8:19: a8:4c:78:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKeZwIKkIeceapIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk ZTVhOGEwZjItMzBjZS00NWQzLTkwZjgtNTQ0MzFkOGFmZTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuapmojInsFCY8H02+CUIaJ+0uVzPoKePa7O+ ug9cQUpFM1OztmXfxd6Lv+6TiD/7aFqR4w7cGFzYOnbaguHMfEqtkeSG1Bd0z51p cnS41xCg3pGPHaMA/lcNPfFBhXGA6dHCYyKv2eUHPuvndMDDpBC2YuCrPrygtw9w 6LgxHGfq6C6gbW2046AhB8TIzkEdHXM7a91+fUjxsctoWplJXn+nxpAXuDeoxVBq nMLqO53rs23l0r7W2I6q8cBQLq88EmiEwR2YtzQcsieZXCoS9EMtDihZ/DpURefL yiKux0yyhHDPy/W5r90rgQQmqCZnEWDtnr6/JUQrT03FnHY0MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNeROne+8M9asq9x8lpHbQKDh01QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWZhYTEwODUtZGZmZC0z ZjU3LTlkNjAtZTY2NmI3Mjc5NmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF875MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKq6wfVTaEkPYBhwGGEJecDV5uyzgZfzpVR83ImBD88lHEhi0/BAYI9 UPSPm6ybbKWSN5iWfZYuXYxMabyH4Z5N/3m06IoXR3E+Yyn66bUWIQSE0uw2PBh/ vGMSEMdwZSiT7/ft58tw3YGLnCwBTEmtzN5y0PQyfZaTPJX33DzTfCMsPeG6J2M3 TIvWCxnJ5m4Ulwp+2dcB5j6ZGMUkqStZelB3RBi3loitopipFNFzrPkV6mUqkIc6 Tnm3t9n1HuoVgdXhPUYBB7hBW8kE2xz556Ayv2OZ++vB5PPqDDvUZuiU4ZXRljw8 RODf7Cw06M8vOgSiKK00MfP4GahMeOI= -----END CERTIFICATE-----Generated at Sat Apr 26 19:10:46 2025 by rpki-client