$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab0260b0-6da1-353f-b0b3-5b733586f240.roa File: ab0260b0-6da1-353f-b0b3-5b733586f240.roa (raw, json) Hash identifier: GZdtPp3BbmaRGvczzp25zYfS4TPXAHa6bKWPglzq7mM= Subject key identifier: 5B:45:A2:93:13:F4:89:AB:5D:3C:C6:9A:73:29:7C:50:22:09:EB:E3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF4A04F4D6AF57337792880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab0260b0-6da1-353f-b0b3-5b733586f240.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.213.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:a0:4f:4d:6a:f5:73:37:79:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=4fe991b6-9393-4a77-bcf6-650bd17ad2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:bc:9b:53:a9:e0:1d:a0:a2:f1:50:76:4c: b6:3f:71:21:e2:cc:6f:08:02:f4:52:dd:87:7e:45: 59:24:be:c8:fe:e2:b5:ce:b1:40:ab:ad:f8:55:75: 97:64:5e:73:bc:b0:0b:a9:93:4a:e7:59:b2:fb:b3: 8e:30:0e:e2:de:b6:c7:60:b9:dd:98:aa:d4:d2:cb: 8b:a6:8d:9e:5a:74:b6:2d:e8:f7:4c:c6:c6:4d:59: e8:94:b1:08:b8:55:c3:10:ae:e7:20:7d:d6:33:6c: bf:1a:a2:f0:17:44:c6:28:1e:6f:08:c9:78:36:2e: 95:25:78:3b:ed:09:17:a6:ca:f4:ca:78:39:14:94: 1e:f4:79:4f:86:4d:9b:c2:0a:31:b8:33:d7:ae:10: 39:47:bb:7d:bb:cf:c4:54:39:bd:3b:52:20:8b:20: f1:79:73:63:91:28:48:91:8f:b2:24:64:21:df:4f: 3c:5a:5e:b9:30:43:f4:67:33:cc:8d:c3:9c:a0:57: d1:99:c3:bd:e7:b0:07:82:d8:09:90:f4:da:82:5f: df:d7:e7:a1:73:7a:75:a2:b2:e3:1d:fa:dc:ca:fe: 70:42:06:b5:98:10:2b:4e:63:07:e6:16:b9:e3:e5: b2:7d:51:99:ab:f1:5c:83:7f:48:7c:c7:0a:7f:62: 3e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:45:A2:93:13:F4:89:AB:5D:3C:C6:9A:73:29:7C:50:22:09:EB:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab0260b0-6da1-353f-b0b3-5b733586f240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:be:29:d5:c8:db:5a:22:cf:46:6d:a6:b4:85:a4:c6:8a:5f: 0f:90:22:eb:34:3b:91:8e:a6:55:05:6c:15:51:06:ef:1e:f1: e6:32:fd:ed:13:38:72:6d:76:87:04:fe:c7:b7:f0:82:64:6b: c8:71:e6:b5:7b:22:f4:18:9f:80:5e:cd:60:f7:35:ea:81:99: fa:35:19:3d:2d:85:3a:53:b5:99:93:b7:b1:6e:ef:f8:a4:d9: 0c:1c:02:a0:bc:19:c7:88:58:50:64:3b:06:2c:6e:b0:67:09: 03:f3:3c:2b:67:04:db:c9:87:f7:23:f4:6c:36:90:bb:46:45: cf:4c:51:15:35:46:60:65:8e:6c:72:7a:0e:c7:f5:91:05:7e: 70:6f:3f:d1:8a:4e:5e:9f:89:64:50:f8:bc:25:ae:31:9f:9b: ed:3c:e1:6f:46:82:db:30:9a:a8:19:45:16:bb:6d:4a:ef:f9: 7f:f5:49:de:42:0b:dc:43:aa:38:2b:69:ab:61:7c:b4:45:5d: 61:21:5f:c2:04:24:ea:50:17:4e:cb:4f:2b:cc:b9:6c:db:49: b5:ef:89:91:c2:83:ca:f1:0e:1f:d9:28:f8:24:09:57:04:d6: ca:10:d5:57:cb:c5:4f:3b:2d:84:56:52:aa:b7:47:96:de:98: da:b9:ec:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9KBPTWr1czd5KIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NGZlOTkxYjYtOTM5My00YTc3LWJjZjYtNjUwYmQxN2FkMmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNa8m1Op4B2govFQdky2P3Eh4sxvCAL0Ut2H fkVZJL7I/uK1zrFAq634VXWXZF5zvLALqZNK51my+7OOMA7i3rbHYLndmKrU0suL po2eWnS2Lej3TMbGTVnolLEIuFXDEK7nIH3WM2y/GqLwF0TGKB5vCMl4Ni6VJXg7 7QkXpsr0yng5FJQe9HlPhk2bwgoxuDPXrhA5R7t9u8/EVDm9O1IgiyDxeXNjkShI kY+yJGQh3088Wl65MEP0ZzPMjcOcoFfRmcO957AHgtgJkPTagl/f1+ehc3p1orLj Hfrcyv5wQga1mBArTmMH5ha54+WyfVGZq/Fcg39IfMcKf2I+JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtFopMT9ImrXTzGmnMpfFAiCevjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWIwMjYwYjAtNmRhMS0z NTNmLWIwYjMtNWI3MzM1ODZmMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9U0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADe+KdXI21oiz0ZtprSFpMaKXw+QIus0O5GOplUFbBVRBu8e8eYy/e0T OHJtdocE/se38IJka8hx5rV7IvQYn4BezWD3NeqBmfo1GT0thTpTtZmTt7Fu7/ik 2QwcAqC8GceIWFBkOwYsbrBnCQPzPCtnBNvJh/cj9Gw2kLtGRc9MURU1RmBljmxy eg7H9ZEFfnBvP9GKTl6fiWRQ+LwlrjGfm+084W9GgtswmqgZRRa7bUrv+X/1Sd5C C9xDqjgraathfLRFXWEhX8IEJOpQF07LTyvMuWzbSbXviZHCg8rxDh/ZKPgkCVcE 1soQ1VfLxU87LYRWUqq3R5bemNq57JM= -----END CERTIFICATE-----Generated at Sat Apr 26 19:11:23 2025 by rpki-client