$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b683a66a-b30e-3f83-b9b1-719db901cd44.roa File: b683a66a-b30e-3f83-b9b1-719db901cd44.roa (raw, json) Hash identifier: BuHmh0OeR8Xt9pSOjy4arz8Ln6FVlbs6f1KOkolF8Xc= Subject key identifier: 56:02:19:47:92:70:F3:EF:BC:76:B6:33:65:20:56:3A:98:F0:E7:BD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF49F2BA6413215C1B81600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b683a66a-b30e-3f83-b9b1-719db901cd44.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.212.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:9f:2b:a6:41:32:15:c1:b8:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=00790f67-9522-44aa-80c7-d0b5d478a6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:28:84:6e:2f:c2:0f:16:c8:49:ec:38:25:c8: f6:64:43:70:13:4e:78:78:38:c3:bb:47:10:e3:6d: 44:8f:8f:30:d2:0a:3b:49:ee:dc:f2:c3:7a:34:06: dc:5d:66:5f:a5:6d:b0:24:43:be:fd:75:7a:2d:06: f3:96:8f:29:f8:d0:8f:3e:68:82:48:8a:e6:88:7d: ca:12:51:eb:82:2b:c4:0e:76:6c:1e:81:2a:c3:3f: 07:06:65:9e:3e:5d:ff:06:0e:85:4d:5d:a1:91:a4: 8e:62:bd:f3:6b:c0:42:79:28:a2:e0:95:b3:7c:00: 45:2a:a8:11:5d:9c:c9:3a:13:d7:a9:fd:05:a0:68: d5:a6:f7:f1:42:9b:cb:f7:4a:4d:17:21:4b:52:5e: 64:7f:1c:a0:0c:04:53:aa:73:db:09:8f:b5:c4:69: dd:cd:6f:a4:1a:76:46:c9:20:d5:8e:7d:bf:26:76: a8:9b:e0:37:0c:cd:fe:fb:e0:15:18:e8:16:f3:f5: f7:f3:78:ac:50:51:81:ad:dc:b3:30:d0:9d:2a:1a: c5:23:c6:a8:03:18:f9:87:ff:0f:a5:1d:04:5c:c9: 91:63:50:37:c2:fe:fa:fc:f5:8e:75:87:7e:7e:cb: 79:f2:60:07:2b:02:80:9b:3d:63:aa:78:35:7f:ea: e8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:02:19:47:92:70:F3:EF:BC:76:B6:33:65:20:56:3A:98:F0:E7:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b683a66a-b30e-3f83-b9b1-719db901cd44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:db:3a:13:a5:4f:47:ae:66:7f:9a:99:2d:33:a3:4c:40:92: 69:05:65:87:39:ef:2b:ed:36:ef:3d:d1:d7:81:6b:ba:d2:4c: d3:29:25:b6:ec:70:b3:7b:c0:2a:5e:8c:e3:e5:8c:12:c7:a3: 9d:a3:a3:a1:ae:04:ba:56:64:58:2b:b0:da:5e:95:86:4d:91: dd:b4:8d:77:c5:18:8b:26:55:86:98:a9:41:33:9c:71:53:10: 7e:26:7a:e9:ca:1f:87:4d:25:cf:19:7c:f6:3e:2e:0d:8f:e1: e2:3b:1c:84:7c:bb:0a:9f:f6:78:f3:55:5e:94:7c:07:3a:62: 26:9d:15:f2:3a:07:bd:4e:4b:1d:0a:63:c1:ce:12:e9:bf:fe: 91:18:08:57:93:8b:66:eb:2c:42:8b:bb:15:5c:4c:c4:5e:ff: db:cf:b1:24:64:5a:4c:73:49:e7:b3:a7:a1:23:ec:5d:78:30: 57:bc:b3:65:00:b6:93:5b:13:89:a0:3d:93:3f:29:81:a8:11: db:0f:e7:e1:ae:d4:79:e5:2f:2d:b4:43:5d:1e:21:18:dc:97: 3f:4e:37:a1:a8:24:9b:d5:b1:a2:7d:08:f7:02:44:99:5d:60: d9:69:f5:e3:42:9b:42:b0:3d:e2:78:7a:9a:7c:dc:a2:f5:c4: ad:61:90:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9J8rpkEyFcG4FgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MDA3OTBmNjctOTUyMi00NGFhLTgwYzctZDBiNWQ0NzhhNmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSiEbi/CDxbISew4Jcj2ZENwE054eDjDu0cQ 421Ej48w0go7Se7c8sN6NAbcXWZfpW2wJEO+/XV6LQbzlo8p+NCPPmiCSIrmiH3K ElHrgivEDnZsHoEqwz8HBmWePl3/Bg6FTV2hkaSOYr3za8BCeSii4JWzfABFKqgR XZzJOhPXqf0FoGjVpvfxQpvL90pNFyFLUl5kfxygDARTqnPbCY+1xGndzW+kGnZG ySDVjn2/Jnaom+A3DM3+++AVGOgW8/X383isUFGBrdyzMNCdKhrFI8aoAxj5h/8P pR0EXMmRY1A3wv76/PWOdYd+fst58mAHKwKAmz1jqng1f+roVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYCGUeScPPvvHa2M2UgVjqY8Oe9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjY4M2E2NmEtYjMwZS0z ZjgzLWI5YjEtNzE5ZGI5MDFjZDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9SnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfbOhOlT0euZn+amS0zo0xAkmkFZYc57yvtNu890deBa7rSTNMpJbbs cLN7wCpejOPljBLHo52jo6GuBLpWZFgrsNpelYZNkd20jXfFGIsmVYaYqUEznHFT EH4meunKH4dNJc8ZfPY+Lg2P4eI7HIR8uwqf9njzVV6UfAc6YiadFfI6B71OSx0K Y8HOEum//pEYCFeTi2brLEKLuxVcTMRe/9vPsSRkWkxzSeezp6Ej7F14MFe8s2UA tpNbE4mgPZM/KYGoEdsP5+Gu1HnlLy20Q10eIRjclz9ON6GoJJvVsaJ9CPcCRJld YNlp9eNCm0KwPeJ4epp83KL1xK1hkP8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:04:08 2025 by rpki-client