$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1b30b05-6b54-3314-9899-cf771573535d.roa File: a1b30b05-6b54-3314-9899-cf771573535d.roa (raw, json) Hash identifier: MfNnI+ypmMi/IqfOON6gOO2Yu5yupjzc1wO60LopFCs= Subject key identifier: 03:C3:95:3D:F9:10:A6:C5:98:F7:AE:4D:37:02:8C:A3:D6:C9:77:F4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF495AB365D24BF0FC08330 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1b30b05-6b54-3314-9899-cf771573535d.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.212.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:95:ab:36:5d:24:bf:0f:c0:83:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=abd886ef-bc14-415f-beed-95605deb35e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1d:bc:9f:02:16:73:00:fe:93:01:4e:32:cc: 1b:36:9f:b5:3f:00:9c:b1:41:c6:3d:00:ba:e8:e6: 0d:3a:14:79:1d:71:5a:90:44:51:cd:4f:10:49:ff: 69:90:84:92:10:24:8c:5c:11:98:fb:6d:df:48:7e: 47:d8:a7:ea:7e:20:d9:25:3b:66:e1:e5:79:c2:55: 2a:6c:74:3e:03:fa:9c:7d:90:aa:60:22:37:f4:b6: 88:0f:28:c2:8d:d2:84:a1:4d:3a:44:93:1d:a4:89: 5f:0f:d1:cb:60:16:a4:f3:60:cf:8a:f2:9c:ca:8d: 96:13:8b:c6:1b:76:72:04:aa:eb:94:64:40:90:2d: 9d:b5:ed:17:4c:f0:41:c7:ae:f3:e4:6a:f4:00:2b: 7d:68:5f:cc:7b:2d:f0:3c:3a:21:0f:37:be:10:9b: df:a9:b9:0c:7d:c0:81:5c:ca:17:3c:29:0f:46:c7: b3:62:91:71:21:a3:d7:4d:ec:40:f6:d0:b4:aa:af: 98:c4:4c:be:13:15:f0:23:d8:8f:6d:89:04:8a:43: 56:0f:16:57:3b:2a:13:1c:80:d6:08:67:e5:54:57: 41:76:3f:91:a8:67:94:91:7d:2a:24:07:14:6c:70: 9b:ad:ff:6c:eb:ae:fa:86:1d:c7:63:89:fb:32:f7: eb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C3:95:3D:F9:10:A6:C5:98:F7:AE:4D:37:02:8C:A3:D6:C9:77:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1b30b05-6b54-3314-9899-cf771573535d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f5:69:b8:12:43:3d:bb:9d:85:d2:5b:2f:21:0c:e1:ba:12: c4:6e:5f:96:ea:b3:84:9f:34:cc:2e:af:66:02:0a:1b:05:52: b4:f1:bc:28:fb:f7:04:6f:77:11:aa:74:46:dd:1e:11:39:ac: 04:58:dc:e0:4a:ba:31:7e:24:78:4e:4d:86:3b:c1:9f:c0:b8: 26:ae:0c:d5:01:f6:b4:bf:c7:fc:99:49:9a:f8:bf:f3:61:d9: 32:69:59:ac:b4:d4:d8:74:7e:04:7f:92:b0:01:83:8a:c7:92: 9f:7e:47:3c:74:83:b4:4c:e2:80:71:9a:da:db:2f:6a:42:dc: 50:0b:a7:d2:51:3a:78:d7:ed:2f:94:ac:0a:8f:10:cb:ca:ee: e2:d0:6a:b2:11:62:c3:83:36:c9:9e:06:ff:87:9f:c5:bd:3a: 9d:4f:e5:92:c8:af:fd:7a:e5:bd:28:b7:64:08:91:d6:b0:6d: e3:3a:99:72:19:d7:c7:2c:df:9d:5d:f3:1d:a9:05:2c:26:5b: df:1e:08:9c:e9:8a:58:4b:51:7c:c6:60:a5:4b:0c:f1:be:e9: 28:77:d9:32:49:ff:a6:7c:aa:20:96:3e:12:d1:2c:b8:1b:9e: a8:4f:9e:1c:7c:7d:26:42:45:fa:35:7e:6d:ca:63:8b:db:89: d8:25:e2:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JWrNl0kvw/AgzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk YWJkODg2ZWYtYmMxNC00MTVmLWJlZWQtOTU2MDVkZWIzNWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR28nwIWcwD+kwFOMswbNp+1PwCcsUHGPQC6 6OYNOhR5HXFakERRzU8QSf9pkISSECSMXBGY+23fSH5H2KfqfiDZJTtm4eV5wlUq bHQ+A/qcfZCqYCI39LaIDyjCjdKEoU06RJMdpIlfD9HLYBak82DPivKcyo2WE4vG G3ZyBKrrlGRAkC2dte0XTPBBx67z5Gr0ACt9aF/Mey3wPDohDze+EJvfqbkMfcCB XMoXPCkPRsezYpFxIaPXTexA9tC0qq+YxEy+ExXwI9iPbYkEikNWDxZXOyoTHIDW CGflVFdBdj+RqGeUkX0qJAcUbHCbrf9s6676hh3HY4n7MvfrdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPDlT35EKbFmPeuTTcCjKPWyXf0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTFiMzBiMDUtNmI1NC0z MzE0LTk4OTktY2Y3NzE1NzM1MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9S6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/1abgSQz27nYXSWy8hDOG6EsRuX5bqs4SfNMwur2YCChsFUrTxvCj7 9wRvdxGqdEbdHhE5rARY3OBKujF+JHhOTYY7wZ/AuCauDNUB9rS/x/yZSZr4v/Nh 2TJpWay01Nh0fgR/krABg4rHkp9+Rzx0g7RM4oBxmtrbL2pC3FALp9JROnjX7S+U rAqPEMvK7uLQarIRYsODNsmeBv+Hn8W9Op1P5ZLIr/165b0ot2QIkdawbeM6mXIZ 18cs351d8x2pBSwmW98eCJzpilhLUXzGYKVLDPG+6Sh32TJJ/6Z8qiCWPhLRLLgb nqhPnhx8fSZCRfo1fm3KY4vbidgl4qc= -----END CERTIFICATE-----Generated at Sun Apr 27 09:18:20 2025 by rpki-client