$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9f2d51e-8e57-322b-ac5d-a8e90450bfeb.roa File: a9f2d51e-8e57-322b-ac5d-a8e90450bfeb.roa (raw, json) Hash identifier: oB2eTv58D4uUb9ZJsCe5EcIeOJ7/QyhzSMq00aVU00w= Subject key identifier: 9E:6C:8E:18:7B:95:43:2A:6C:94:AE:58:B4:F0:94:2A:BD:46:D9:42 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829D892F96305F25C994A40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9f2d51e-8e57-322b-ac5d-a8e90450bfeb.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.204.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d8:92:f9:63:05:f2:5c:99:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=00d87759-fca8-41e7-8de5-8dd6826645ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7d:c9:11:17:27:12:4f:18:94:3e:d5:fa:65: 94:fe:46:f5:d3:8e:6b:e3:18:b5:03:1d:91:89:85: 03:48:65:a1:9c:ca:59:16:ec:cd:cc:c9:67:63:9e: 0c:08:75:36:14:9a:8d:c2:66:e1:2e:dd:dd:2a:2e: 12:11:2f:dc:c3:b6:e6:79:63:3e:b2:84:c7:8e:66: 5e:d3:d8:a3:1d:82:eb:8b:9f:91:16:c2:b3:80:b7: ca:e4:49:80:c9:81:51:ef:c2:5e:ec:81:18:8e:95: 5b:59:2d:b0:0a:90:cb:ec:1a:fb:6b:ff:db:7b:a3: cc:e9:d6:78:61:79:d8:2a:93:5a:d2:f5:9f:e6:30: 53:3f:0f:5f:b4:c2:99:6e:b8:92:08:91:45:e0:6d: 40:ac:8f:71:d0:ff:66:85:cb:05:b3:85:0c:40:5c: 5b:0a:84:1b:e5:4d:b6:46:99:af:71:6b:36:b5:95: 08:fd:24:ed:c3:17:a0:6f:5a:9b:87:9f:02:de:f6: 1b:65:42:22:85:e0:c8:ed:75:28:3b:7a:c3:d0:5e: cf:53:70:d0:09:81:82:09:26:7d:ba:91:ee:d2:1d: 80:09:eb:44:c6:b0:84:7a:4e:cc:98:4f:cb:2a:28: 6f:a9:f2:9d:9f:a7:03:de:3a:03:03:79:60:a4:44: e7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6C:8E:18:7B:95:43:2A:6C:94:AE:58:B4:F0:94:2A:BD:46:D9:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9f2d51e-8e57-322b-ac5d-a8e90450bfeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a8:b1:dd:a7:b3:44:e2:a5:2e:ed:9a:16:74:20:e1:6b:e1: a6:09:e1:f6:5e:38:c8:74:ef:ad:28:72:30:85:22:a8:41:3c: a4:99:76:26:f8:b0:09:44:0e:bc:8a:7f:fb:7a:b5:ce:81:76: fa:b6:b5:c0:0a:0d:18:de:49:f3:96:33:ef:62:e4:03:00:07: bf:3d:de:7d:87:92:0b:1d:46:1c:dd:95:f5:f8:61:db:8f:4c: 2a:1a:69:6c:3b:6c:b1:c8:8c:d4:e1:ba:5d:28:d7:1d:43:26: 54:12:73:27:59:e8:23:1a:60:5a:97:dd:25:df:36:cc:ea:65: 7e:f8:ff:99:e4:ca:4f:63:aa:25:05:70:3a:62:0f:49:b7:77: aa:23:33:09:08:de:7f:04:75:76:d8:8c:71:9e:0d:5b:ce:d0: a4:8b:15:56:00:62:7b:21:d1:d1:2f:0c:a5:5e:00:84:9e:8a: 2c:f7:0d:8e:c8:b1:5d:64:ad:57:2f:f7:5e:91:7d:d9:af:c8: 06:9a:57:52:9d:09:22:9d:fc:72:09:b5:e9:f2:f0:7d:3e:13: a1:f2:40:93:2e:34:e4:d4:1d:be:bd:1d:99:96:c1:93:9c:d1: 07:cd:0b:37:d6:8d:ed:25:c4:a4:3b:83:3c:fb:e8:f8:af:95: 24:e4:8e:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdiS+WMF8lyZSkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MDBkODc3NTktZmNhOC00MWU3LThkZTUtOGRkNjgyNjY0NWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH3JERcnEk8YlD7V+mWU/kb1045r4xi1Ax2R iYUDSGWhnMpZFuzNzMlnY54MCHU2FJqNwmbhLt3dKi4SES/cw7bmeWM+soTHjmZe 09ijHYLri5+RFsKzgLfK5EmAyYFR78Je7IEYjpVbWS2wCpDL7Br7a//be6PM6dZ4 YXnYKpNa0vWf5jBTPw9ftMKZbriSCJFF4G1ArI9x0P9mhcsFs4UMQFxbCoQb5U22 RpmvcWs2tZUI/STtwxegb1qbh58C3vYbZUIiheDI7XUoO3rD0F7PU3DQCYGCCSZ9 upHu0h2ACetExrCEek7MmE/LKihvqfKdn6cD3joDA3lgpETnrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5sjhh7lUMqbJSuWLTwlCq9RtlCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTlmMmQ1MWUtOGU1Ny0z MjJiLWFjNWQtYThlOTA0NTBiZmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8ySMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGosd2ns0TipS7tmhZ0IOFr4aYJ4fZeOMh0760ocjCFIqhBPKSZdib4 sAlEDryKf/t6tc6Bdvq2tcAKDRjeSfOWM+9i5AMAB7893n2HkgsdRhzdlfX4YduP TCoaaWw7bLHIjNThul0o1x1DJlQScydZ6CMaYFqX3SXfNszqZX74/5nkyk9jqiUF cDpiD0m3d6ojMwkI3n8EdXbYjHGeDVvO0KSLFVYAYnsh0dEvDKVeAISeiiz3DY7I sV1krVcv916RfdmvyAaaV1KdCSKd/HIJteny8H0+E6HyQJMuNOTUHb69HZmWwZOc 0QfNCzfWje0lxKQ7gzz76PivlSTkjgE= -----END CERTIFICATE-----Generated at Sat Apr 26 18:33:57 2025 by rpki-client