$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1e01f2a-1c15-3d8d-9809-e999d0425f02.roa File: b1e01f2a-1c15-3d8d-9809-e999d0425f02.roa (raw, json) Hash identifier: udFOpTMjeuS592gKEiiO6wvSOCAwlNf9Ikxp44mEqOI= Subject key identifier: BD:9C:BA:CD:D5:7B:88:49:B5:76:47:53:2A:AE:15:04:29:1E:B2:BB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF49E065E3F47B4B22CFBC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1e01f2a-1c15-3d8d-9809-e999d0425f02.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.211.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:9e:06:5e:3f:47:b4:b2:2c:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=fb422b2e-bc9d-44ea-8a71-7360998f4655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c8:56:59:75:30:c0:62:83:06:85:76:36:f8: 35:88:24:ca:5b:e0:1c:e0:97:7e:d1:27:9b:c5:52: 19:27:e4:42:0a:d4:45:a8:1e:03:23:8b:ea:dc:26: cd:ca:8a:2b:78:6c:5a:6d:07:2d:ad:fd:44:8e:bc: 68:9e:4c:e6:e4:40:47:70:f3:28:80:78:78:58:83: 27:e0:91:2c:c5:7f:a0:f4:01:dc:83:fd:5e:02:0a: 96:55:a9:f2:6e:09:4c:ae:25:14:72:f8:d8:03:d3: 9c:28:39:47:b6:87:83:3e:c0:04:66:20:1e:78:be: 7e:ff:be:2b:10:f0:ee:ed:ac:78:37:a2:98:95:3f: 9f:53:82:46:50:c3:fa:3c:69:7f:32:0d:de:6a:80: 57:c1:d0:ef:b4:d8:46:3b:cc:87:ff:e7:7b:f9:11: 03:a3:e6:8c:3e:b7:94:7b:8d:88:a2:01:5c:64:b7: 94:8d:cd:17:95:21:e6:34:79:08:2a:0d:c6:6c:79: 47:2b:ef:88:d7:76:53:bd:a5:31:3a:85:aa:96:53: 9b:07:78:39:30:32:b2:99:91:25:7b:f0:99:a1:11: a4:d4:a0:9f:8d:87:1c:78:49:3e:c9:d5:02:36:ae: 2d:fb:3d:1a:e9:44:05:9c:77:52:dd:15:5d:6c:d2: f3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9C:BA:CD:D5:7B:88:49:B5:76:47:53:2A:AE:15:04:29:1E:B2:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1e01f2a-1c15-3d8d-9809-e999d0425f02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:3f:21:39:65:f4:c4:db:b9:5d:98:ed:64:54:fb:68:70:b2: b0:73:b4:48:93:ae:eb:59:ce:b2:fd:e6:4d:bd:d2:3f:4b:3d: 6d:0f:84:d1:bc:a8:9d:06:82:bd:f3:b7:e8:07:94:6f:82:c5: de:3f:fc:3a:8d:58:20:e8:1e:23:c1:a3:a8:29:7d:04:3e:ec: 0a:09:93:9e:60:01:fc:8c:aa:93:67:d5:dd:10:4e:cf:49:b8: b9:8a:e9:37:65:30:0c:ac:51:2e:3c:2f:35:83:ae:77:a8:0f: 6a:41:c4:aa:5a:b2:3b:32:eb:8b:64:50:bf:c9:a1:f6:31:5d: a1:d0:41:d1:da:d1:c4:3f:5d:9a:e8:f2:5e:e3:cd:32:55:ba: d8:74:da:29:7e:c6:ef:d7:68:b0:9f:01:5a:b2:b9:b3:51:61: 36:86:b9:58:c1:27:b6:a4:dc:6e:fa:f0:45:ed:4f:47:0d:17: 5e:d8:df:aa:a5:75:cf:b8:9e:40:ff:b9:ce:b1:d4:a0:03:4f: a8:88:92:a4:c2:28:fd:e3:c4:5e:7d:c9:df:93:20:c4:b0:fc: fa:90:25:47:c4:1c:84:bd:9a:82:22:de:6d:82:de:ee:87:32: 14:a8:ca:48:41:22:e7:a2:df:af:40:cb:ae:c5:21:a8:49:4d: 15:d9:8a:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9J4GXj9HtLIs+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZmI0MjJiMmUtYmM5ZC00NGVhLThhNzEtNzM2MDk5OGY0NjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMhWWXUwwGKDBoV2Nvg1iCTKW+Ac4Jd+0Seb xVIZJ+RCCtRFqB4DI4vq3CbNyooreGxabQctrf1Ejrxonkzm5EBHcPMogHh4WIMn 4JEsxX+g9AHcg/1eAgqWVanybglMriUUcvjYA9OcKDlHtoeDPsAEZiAeeL5+/74r EPDu7ax4N6KYlT+fU4JGUMP6PGl/Mg3eaoBXwdDvtNhGO8yH/+d7+REDo+aMPreU e42IogFcZLeUjc0XlSHmNHkIKg3GbHlHK++I13ZTvaUxOoWqllObB3g5MDKymZEl e/CZoRGk1KCfjYcceEk+ydUCNq4t+z0a6UQFnHdS3RVdbNLz8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2cus3Ve4hJtXZHUyquFQQpHrK7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjFlMDFmMmEtMWMxNS0z ZDhkLTk4MDktZTk5OWQwNDI1ZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9PxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEU/ITll9MTbuV2Y7WRU+2hwsrBztEiTrutZzrL95k290j9LPW0PhNG8 qJ0Ggr3zt+gHlG+Cxd4//DqNWCDoHiPBo6gpfQQ+7AoJk55gAfyMqpNn1d0QTs9J uLmK6TdlMAysUS48LzWDrneoD2pBxKpasjsy64tkUL/JofYxXaHQQdHa0cQ/XZro 8l7jzTJVuth02il+xu/XaLCfAVqyubNRYTaGuVjBJ7ak3G768EXtT0cNF17Y36ql dc+4nkD/uc6x1KADT6iIkqTCKP3jxF59yd+TIMSw/PqQJUfEHIS9moIi3m2C3u6H MhSoykhBIuei369Ay67FIahJTRXZiro= -----END CERTIFICATE-----Generated at Sat Apr 26 18:40:06 2025 by rpki-client