$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1c4310f-ca7d-3d7c-97eb-0ad7bd8f66f9.roa File: a1c4310f-ca7d-3d7c-97eb-0ad7bd8f66f9.roa (raw, json) Hash identifier: AUjS1yOZSraKg8EPItU6AYK3k/5kbZMj7KBgcTxO+jg= Subject key identifier: 11:17:B3:52:B9:08:BF:79:6E:77:36:50:AF:DB:C3:48:57:D1:DA:ED Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF450909310BDE19657F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1c4310f-ca7d-3d7c-97eb-0ad7bd8f66f9.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 16625 IP address blocks: 23.214.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:45:09:09:31:0b:de:19:65:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=59513b8d-7cc2-404c-9f03-e23d77b77a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8e:33:57:aa:0b:58:a0:1b:c7:6b:67:43:5a: cc:89:95:8c:15:c2:6e:bc:65:1a:23:39:2c:aa:c4: 92:73:b0:40:98:af:4d:93:37:d7:4f:c3:d6:d4:2e: 70:68:10:a4:6b:d4:a4:cf:e8:67:d6:05:36:1f:e3: 42:f5:05:22:a2:97:08:3e:c3:23:43:27:31:c9:77: 4b:25:0d:ac:7a:df:94:7f:7e:77:12:dc:68:f2:3a: 0f:13:2e:df:ec:cb:54:81:b0:47:70:3b:db:aa:03: 12:a8:a0:95:92:90:5d:8d:51:27:37:cf:aa:e3:12: 1e:75:ed:88:a1:ae:fd:0b:db:78:99:e4:86:09:c8: 08:4e:ac:02:73:ef:57:fb:13:fc:a1:cf:89:6d:fe: 53:34:c8:8b:20:53:45:87:c3:bd:a4:67:77:da:f2: cf:c4:b8:9d:18:82:1d:39:dd:7a:54:85:8e:02:46: 0b:5a:c7:17:20:9f:eb:05:f8:01:17:71:47:6b:6d: a4:3d:c3:d3:fb:cc:cd:fe:23:f7:e1:ec:d0:06:72: 0e:9d:39:d9:00:92:1e:a2:fe:0a:9a:29:7e:d8:a2: 6a:b3:61:95:1d:93:d9:cb:fa:33:16:cb:ae:dd:e2: bc:95:22:1e:65:a4:5a:e9:32:d4:3e:04:10:6e:c8: 24:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:17:B3:52:B9:08:BF:79:6E:77:36:50:AF:DB:C3:48:57:D1:DA:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1c4310f-ca7d-3d7c-97eb-0ad7bd8f66f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:7b:05:52:b1:ea:cb:25:9e:4d:e8:dc:db:4e:ac:3f:2a:bd: c5:a1:0b:00:9c:39:1b:a6:48:69:7f:9f:57:5b:61:79:40:5c: a2:ab:3e:10:2d:e9:d8:48:52:2f:87:48:7a:95:9f:e7:f5:d0: 78:60:4e:1c:b7:a9:7c:4a:d0:50:80:71:c2:bf:b9:cc:ec:6a: 66:4f:f6:ae:03:cc:9d:1d:9f:2f:80:e5:fd:55:2b:2a:15:07: ec:7c:fb:a3:28:fc:d5:b9:01:8c:ac:50:c9:61:14:25:75:d3: 8b:90:cb:87:f5:bd:68:c0:50:17:5b:11:28:66:6d:e6:b7:ac: 52:ea:88:cf:f0:b9:c9:06:98:b5:60:6a:dc:c6:b6:2d:3a:2f: c0:c5:23:77:cc:17:27:cf:7f:e3:fa:15:45:85:bd:21:15:b9: aa:48:ab:41:2d:ab:a1:fc:d7:91:39:2f:40:b1:f1:4b:91:cf: 85:c6:33:44:5f:97:29:b0:5e:59:be:20:30:20:a2:ad:bd:90: e6:19:f0:29:5d:9e:8c:76:cf:56:89:1f:01:d7:86:94:09:a8: 1c:84:fe:d2:5d:08:ec:16:77:6b:6a:e8:52:23:88:bb:06:48: 77:19:58:bc:b5:1a:0c:cf:b5:3a:c7:e8:45:d3:f8:90:c9:68: fa:1a:78:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0UJCTEL3hllfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NTk1MTNiOGQtN2NjMi00MDRjLTlmMDMtZTIzZDc3Yjc3YTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno4zV6oLWKAbx2tnQ1rMiZWMFcJuvGUaIzks qsSSc7BAmK9NkzfXT8PW1C5waBCka9Skz+hn1gU2H+NC9QUiopcIPsMjQycxyXdL JQ2set+Uf353Etxo8joPEy7f7MtUgbBHcDvbqgMSqKCVkpBdjVEnN8+q4xIede2I oa79C9t4meSGCcgITqwCc+9X+xP8oc+Jbf5TNMiLIFNFh8O9pGd32vLPxLidGIId Od16VIWOAkYLWscXIJ/rBfgBF3FHa22kPcPT+8zN/iP34ezQBnIOnTnZAJIeov4K mil+2KJqs2GVHZPZy/ozFsuu3eK8lSIeZaRa6TLUPgQQbsgk8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEXs1K5CL95bnc2UK/bw0hX0drtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTFjNDMxMGYtY2E3ZC0z ZDdjLTk3ZWItMGFkN2JkOGY2NmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9bAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD17BVKx6sslnk3o3NtOrD8qvcWhCwCcORumSGl/n1dbYXlAXKKrPhAt 6dhIUi+HSHqVn+f10HhgThy3qXxK0FCAccK/uczsamZP9q4DzJ0dny+A5f1VKyoV B+x8+6Mo/NW5AYysUMlhFCV104uQy4f1vWjAUBdbEShmbea3rFLqiM/wuckGmLVg atzGti06L8DFI3fMFyfPf+P6FUWFvSEVuapIq0Etq6H815E5L0Cx8UuRz4XGM0Rf lymwXlm+IDAgoq29kOYZ8Cldnox2z1aJHwHXhpQJqByE/tJdCOwWd2tq6FIjiLsG SHcZWLy1GgzPtTrH6EXT+JDJaPoaeEM= -----END CERTIFICATE-----Generated at Sun Apr 27 12:10:59 2025 by rpki-client