$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fd85f48-5693-3de9-b87c-9c6701cd2320.roa File: 9fd85f48-5693-3de9-b87c-9c6701cd2320.roa (raw, json) Hash identifier: b4B3Jg1JX5quU/0yn3Hzjqm1GpSiicqqYsjW5Sfd8os= Subject key identifier: 48:F5:36:1D:91:DD:9B:1D:26:1F:F6:9C:11:82:DA:C6:55:B1:96:28 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849A8E9E8D2D535065D5F999680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fd85f48-5693-3de9-b87c-9c6701cd2320.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 16625 IP address blocks: 23.218.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:e8:d2:d5:35:06:5d:5f:99:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=7428b555-42df-4e86-b933-0482ba89aa19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2b:64:21:03:ea:ae:fa:2d:69:ba:fe:3e:61: 20:9d:04:87:a2:84:cb:b7:6c:66:34:cb:f5:4c:d4: 11:c9:43:66:fd:22:90:34:da:e3:ec:5e:c5:c6:57: cd:2f:dc:2f:c6:42:98:4b:bb:5a:36:f9:cf:dc:04: ee:30:72:9d:a0:00:e4:ca:28:a5:75:dd:ac:6f:01: ca:d6:d6:4e:01:92:b0:e5:5a:cb:90:e7:58:45:aa: 10:0c:1d:4b:9b:42:0c:d4:5a:1c:04:3d:63:bc:a8: 51:59:b3:86:8e:7a:80:f2:a1:3b:de:2b:79:f9:1b: 86:7d:e8:a5:32:4a:ed:10:72:7f:ce:e4:65:2c:0b: 41:c9:13:ad:75:91:8e:38:81:0a:54:ae:5c:c2:8a: ca:c7:22:ed:2f:3b:ab:24:51:39:cf:0d:9f:b3:ef: 82:40:c3:58:12:3a:f5:4e:5d:88:79:38:87:ba:6e: 53:64:29:5e:c6:5e:e6:45:a7:ff:c6:d8:bd:6e:8f: 19:77:c8:7c:18:bc:f3:2b:7d:6d:8c:a7:5a:8e:8d: a0:c8:b1:78:e2:a7:92:48:f8:53:f0:28:6c:12:42: 0c:85:31:79:4c:e1:3d:1b:ac:b0:81:af:be:67:c6: 4b:da:61:ef:d1:dc:42:31:59:54:e5:e4:32:99:98: 6e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F5:36:1D:91:DD:9B:1D:26:1F:F6:9C:11:82:DA:C6:55:B1:96:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fd85f48-5693-3de9-b87c-9c6701cd2320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:4d:0c:84:ff:b0:c2:14:3a:c0:9f:08:5f:aa:d8:44:73:2d: f9:84:09:88:13:33:31:91:09:d8:27:ea:b0:0a:0d:62:97:20: 03:8e:17:fd:33:8e:fa:e5:8b:fd:9c:99:2d:5a:8c:02:34:6f: 9a:67:54:2f:31:02:52:d6:68:dd:53:1e:77:05:dd:07:05:0e: f6:99:11:08:8a:71:47:45:1a:d8:39:fd:61:94:00:60:43:14: 16:f1:43:31:06:15:71:b9:dc:67:a1:d4:0c:07:0c:d3:69:b4: 90:0e:1a:16:5e:e6:af:bf:aa:69:64:75:85:e0:cf:cf:6a:e3: a5:35:6c:4b:67:c5:55:3f:6c:9d:28:c8:02:97:04:be:29:bc: 30:85:47:d9:9b:62:5b:98:40:7e:4c:c4:92:66:e3:61:cd:94: cd:fe:9a:c4:f0:6c:7d:6b:99:c0:d5:50:23:03:44:7a:10:69: b8:b4:a0:2e:02:45:2a:48:d9:bc:b2:21:96:bd:f9:e3:06:02: ae:31:1d:0e:0b:d6:4c:40:17:dd:ce:f3:ae:9b:64:e7:38:1b: 5c:71:49:ac:a8:08:be:17:a2:d6:12:28:be:ec:05:21:6d:4c: 3e:fc:57:fc:fe:08:89:8f:cd:11:ca:52:61:da:4c:0a:60:c8: 61:3f:4f:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6ejS1TUGXV+ZloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk NzQyOGI1NTUtNDJkZi00ZTg2LWI5MzMtMDQ4MmJhODlhYTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuStkIQPqrvotabr+PmEgnQSHooTLt2xmNMv1 TNQRyUNm/SKQNNrj7F7FxlfNL9wvxkKYS7taNvnP3ATuMHKdoADkyiildd2sbwHK 1tZOAZKw5VrLkOdYRaoQDB1Lm0IM1FocBD1jvKhRWbOGjnqA8qE73it5+RuGfeil MkrtEHJ/zuRlLAtByROtdZGOOIEKVK5cworKxyLtLzurJFE5zw2fs++CQMNYEjr1 Tl2IeTiHum5TZClexl7mRaf/xti9bo8Zd8h8GLzzK31tjKdajo2gyLF44qeSSPhT 8ChsEkIMhTF5TOE9G6ywga++Z8ZL2mHv0dxCMVlU5eQymZhuyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEj1Nh2R3ZsdJh/2nBGC2sZVsZYoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWZkODVmNDgtNTY5My0z ZGU5LWI4N2MtOWM2NzAxY2QyMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9oQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJNDIT/sMIUOsCfCF+q2ERzLfmECYgTMzGRCdgn6rAKDWKXIAOOF/0z jvrli/2cmS1ajAI0b5pnVC8xAlLWaN1THncF3QcFDvaZEQiKcUdFGtg5/WGUAGBD FBbxQzEGFXG53Geh1AwHDNNptJAOGhZe5q+/qmlkdYXgz89q46U1bEtnxVU/bJ0o yAKXBL4pvDCFR9mbYluYQH5MxJJm42HNlM3+msTwbH1rmcDVUCMDRHoQabi0oC4C RSpI2byyIZa9+eMGAq4xHQ4L1kxAF93O866bZOc4G1xxSayoCL4XotYSKL7sBSFt TD78V/z+CImPzRHKUmHaTApgyGE/T0U= -----END CERTIFICATE-----Generated at Sun Apr 27 11:19:07 2025 by rpki-client