$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1959e95-4c16-32a9-a049-d324b2dd4edc.roa File: b1959e95-4c16-32a9-a049-d324b2dd4edc.roa (raw, json) Hash identifier: bEdupL5eE5TIBSwlv4DEcZV3gBjEn8F4+m+9PJTG3Tk= Subject key identifier: B5:99:D3:98:EB:4B:88:D4:F9:71:66:5B:02:BB:60:A4:B7:EA:C3:0E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849912F25D8402FF694AAFFC880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1959e95-4c16-32a9-a049-d324b2dd4edc.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.211.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:25:d8:40:2f:f6:94:aa:ff:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=409a93bc-095b-450b-a3c8-5e237b212fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:aa:c5:4d:bc:22:46:9d:53:f6:11:27:3d:c8: 21:8c:15:bc:5b:5a:fc:ca:82:20:96:7a:70:4b:d3: 1f:0a:13:8f:bf:49:c1:e5:4c:bf:26:ae:b0:cd:d0: 4d:78:cf:24:37:ae:35:4b:30:47:c4:6f:1c:f5:f5: 47:7a:f6:ab:28:a3:15:9d:8d:39:50:b3:e6:86:7b: 5b:99:9c:b1:53:3d:a2:f4:ee:39:c1:10:bd:92:d1: 48:c5:bc:f7:85:71:da:26:23:a0:29:6d:42:fa:d7: 92:a2:86:1c:7e:eb:f9:69:77:56:38:61:96:e9:80: d5:e9:b1:06:f9:fc:b5:db:10:2a:fd:01:06:21:12: 04:4b:d9:b4:a7:08:c4:a4:9d:b3:34:a6:39:4f:49: 43:c2:57:67:c0:e0:cc:bd:d3:b0:7c:29:2a:d1:0a: 57:15:e1:51:d9:eb:1c:42:1a:94:e6:84:da:bf:04: c5:53:da:d1:d2:eb:6a:39:3e:14:ff:8a:43:29:c6: ac:b8:b6:12:2b:11:f5:af:4d:2a:d5:53:ba:00:76: 8d:21:b9:e6:7f:03:15:b7:9f:0b:a7:14:ba:fa:13: bf:04:38:76:1d:44:8d:32:13:83:3d:f4:a2:4a:ba: d9:fb:9d:21:3d:8d:21:89:74:44:fb:1a:ff:9d:c7: 2c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:99:D3:98:EB:4B:88:D4:F9:71:66:5B:02:BB:60:A4:B7:EA:C3:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1959e95-4c16-32a9-a049-d324b2dd4edc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:9d:cf:eb:fb:83:14:8c:c8:d1:b2:6d:33:02:8c:bc:12:95: e8:de:5b:d0:83:f0:70:cb:98:58:80:de:3f:93:22:a4:ef:fe: 5f:92:17:06:d5:c5:3c:ac:12:42:7d:8c:26:16:c5:61:f3:d7: 4d:02:15:d1:6b:ec:3c:89:2c:95:99:b9:97:94:cb:c8:cc:e5: 74:1f:33:9a:bc:a5:e7:8d:44:c2:cd:89:87:d5:68:97:e9:b1: d1:4b:bb:69:78:c1:54:40:ce:00:f4:14:d5:8e:79:26:72:b1: 7e:93:d5:70:68:fe:0d:a2:84:d8:98:7c:ce:fb:30:12:4b:f8: af:fc:5b:dc:95:c3:ed:e6:12:a4:1a:a4:84:90:fd:c8:6f:96: f0:4b:d7:8e:87:13:fd:23:03:e6:52:12:f1:fe:9d:c9:28:cd: 9b:49:30:1e:fd:64:7e:27:e5:69:ab:76:e1:a7:af:6a:f0:7f: 5d:f7:2e:4c:93:c4:de:b0:0e:96:a7:73:89:c3:74:70:c7:70: 06:ed:9e:d0:29:fd:41:23:47:72:17:37:c6:e7:dd:37:13:31: f7:30:0c:9c:13:a2:28:7b:2d:e5:a5:fb:63:55:e5:93:35:32: 1d:af:8a:e4:e1:f6:9e:f6:4f:bc:01:29:43:0c:f8:61:fb:97: 6b:23:9b:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLyXYQC/2lKr/yIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk NDA5YTkzYmMtMDk1Yi00NTBiLWEzYzgtNWUyMzdiMjEyZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6rFTbwiRp1T9hEnPcghjBW8W1r8yoIglnpw S9MfChOPv0nB5Uy/Jq6wzdBNeM8kN641SzBHxG8c9fVHevarKKMVnY05ULPmhntb mZyxUz2i9O45wRC9ktFIxbz3hXHaJiOgKW1C+teSooYcfuv5aXdWOGGW6YDV6bEG +fy12xAq/QEGIRIES9m0pwjEpJ2zNKY5T0lDwldnwODMvdOwfCkq0QpXFeFR2esc QhqU5oTavwTFU9rR0utqOT4U/4pDKcasuLYSKxH1r00q1VO6AHaNIbnmfwMVt58L pxS6+hO/BDh2HUSNMhODPfSiSrrZ+50hPY0hiXRE+xr/nccsrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWZ05jrS4jU+XFmWwK7YKS36sMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjE5NTllOTUtNGMxNi0z MmE5LWEwNDktZDMyNGIyZGQ0ZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9N8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGidz+v7gxSMyNGybTMCjLwSlejeW9CD8HDLmFiA3j+TIqTv/l+SFwbV xTysEkJ9jCYWxWHz100CFdFr7DyJLJWZuZeUy8jM5XQfM5q8peeNRMLNiYfVaJfp sdFLu2l4wVRAzgD0FNWOeSZysX6T1XBo/g2ihNiYfM77MBJL+K/8W9yVw+3mEqQa pISQ/chvlvBL146HE/0jA+ZSEvH+nckozZtJMB79ZH4n5WmrduGnr2rwf133LkyT xN6wDpanc4nDdHDHcAbtntAp/UEjR3IXN8bn3TcTMfcwDJwToih7LeWl+2NV5ZM1 Mh2viuTh9p72T7wBKUMM+GH7l2sjm2M= -----END CERTIFICATE-----Generated at Sat Apr 26 19:09:13 2025 by rpki-client