$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6566798-5acd-3154-8064-6c08dd24b666.roa File: a6566798-5acd-3154-8064-6c08dd24b666.roa (raw, json) Hash identifier: TmVSqKYbXcubZmvIvfmFfqRSKKHtitliMc3JQi9eS+A= Subject key identifier: 17:0F:22:A1:03:CB:1F:37:39:0C:67:D3:7E:DC:24:02:E8:71:67:74 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849998F3FECE1098699D283EF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6566798-5acd-3154-8064-6c08dd24b666.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.208.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:3f:ec:e1:09:86:99:d2:83:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=a111e5b1-a1d8-41dd-9c03-36a725a8c8c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1e:b7:f0:ff:6e:d5:69:52:ed:8b:3f:71:ad: 3e:c8:d9:0c:43:91:67:ba:60:45:42:c2:ae:89:c4: 1b:1b:94:b0:e5:90:3e:1a:9b:39:e1:32:64:f6:ec: ad:2c:24:bd:29:9b:35:8a:94:54:bb:9c:52:db:4f: 4f:51:25:7c:f0:86:02:b8:c8:15:3d:ec:1e:80:97: ed:16:24:57:6c:26:6d:ac:12:af:7f:be:85:8a:c0: 80:67:00:36:22:7e:f9:3c:e7:85:76:4d:88:f4:6d: d9:79:90:2f:30:87:8a:99:2b:2c:67:0e:d2:6b:00: c6:5b:8c:0d:7b:10:15:ed:6f:ed:e1:b7:73:b1:9b: 14:be:70:51:b2:20:8e:81:f2:5a:e8:06:56:03:65: 07:65:8b:b7:18:b9:93:9d:69:3f:a5:88:c3:91:ca: 85:46:8d:7c:48:d2:68:b8:46:22:fe:25:6c:b0:62: 65:3d:2e:0c:ad:80:85:dc:78:65:4f:8e:2a:b6:4c: ae:df:7c:6f:02:3d:b8:6e:fa:b1:3f:3d:5d:5e:8a: 43:fa:40:f4:e3:f3:ad:e2:2b:2c:d2:9d:1a:da:12: ce:74:8b:4b:f3:ca:b8:e1:b8:f7:36:62:4a:a0:9b: 0c:fc:61:c5:bd:6e:33:c2:22:09:9e:9f:de:df:24: 3d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0F:22:A1:03:CB:1F:37:39:0C:67:D3:7E:DC:24:02:E8:71:67:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6566798-5acd-3154-8064-6c08dd24b666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:14:d9:c1:f1:af:8a:f6:a6:b7:e8:20:f0:b9:18:97:e5:69: b3:57:f1:e0:3a:94:9a:7e:07:da:23:c2:e5:00:39:d5:71:9b: 68:5c:bf:e9:a3:e6:83:31:84:a1:aa:84:04:56:a2:f8:0f:83: ec:71:ae:a2:ba:b9:69:96:12:63:46:64:98:5c:ef:8b:a6:a2: f6:ba:dd:5e:01:97:86:37:75:0a:50:4a:da:16:07:6e:f1:0e: 9f:8c:a0:af:77:94:e0:e8:89:dc:27:4c:cd:65:98:56:ae:df: f2:1b:33:bf:35:58:9f:2f:0f:3c:35:66:83:ae:ef:13:40:92: 95:ac:65:e9:86:b0:e1:42:dd:04:69:7e:4c:96:f9:79:fe:e3: df:6d:33:31:d7:49:48:e8:32:34:7a:0d:d8:6d:b0:43:b5:f6: 1a:19:73:e6:9c:06:3a:30:bb:57:c5:fc:43:31:f8:b6:50:97: 49:f6:47:5c:3d:f3:ce:72:f9:7d:76:f4:2f:98:e9:09:b3:1a: cd:40:db:d9:9b:62:59:ec:4b:58:fb:06:ce:0f:cf:5d:10:9a: 97:29:f1:bb:11:5f:ee:08:56:26:8b:86:01:80:af:c7:e6:65: 80:82:90:12:49:8a:44:a6:c2:bf:2b:75:67:ae:0e:c3:cc:97: 87:e2:d2:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZjz/s4QmGmdKD7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk YTExMWU1YjEtYTFkOC00MWRkLTljMDMtMzZhNzI1YThjOGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx638P9u1WlS7Ys/ca0+yNkMQ5FnumBFQsKu icQbG5Sw5ZA+Gps54TJk9uytLCS9KZs1ipRUu5xS209PUSV88IYCuMgVPewegJft FiRXbCZtrBKvf76FisCAZwA2In75POeFdk2I9G3ZeZAvMIeKmSssZw7SawDGW4wN exAV7W/t4bdzsZsUvnBRsiCOgfJa6AZWA2UHZYu3GLmTnWk/pYjDkcqFRo18SNJo uEYi/iVssGJlPS4MrYCF3HhlT44qtkyu33xvAj24bvqxPz1dXopD+kD04/Ot4iss 0p0a2hLOdItL88q44bj3NmJKoJsM/GHFvW4zwiIJnp/e3yQ9vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcPIqEDyx83OQxn037cJALocWd0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTY1NjY3OTgtNWFjZC0z MTU0LTgwNjQtNmMwOGRkMjRiNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9BgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoU2cHxr4r2prfoIPC5GJflabNX8eA6lJp+B9ojwuUAOdVxm2hcv+mj 5oMxhKGqhARWovgPg+xxrqK6uWmWEmNGZJhc74umova63V4Bl4Y3dQpQStoWB27x Dp+MoK93lODoidwnTM1lmFau3/IbM781WJ8vDzw1ZoOu7xNAkpWsZemGsOFC3QRp fkyW+Xn+499tMzHXSUjoMjR6DdhtsEO19hoZc+acBjowu1fF/EMx+LZQl0n2R1w9 885y+X129C+Y6QmzGs1A29mbYlnsS1j7Bs4Pz10Qmpcp8bsRX+4IViaLhgGAr8fm ZYCCkBJJikSmwr8rdWeuDsPMl4fi0r8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:11:38 2025 by rpki-client