$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b73a8fb3-d110-3ad7-ad69-04ec2126030b.roa File: b73a8fb3-d110-3ad7-ad69-04ec2126030b.roa (raw, json) Hash identifier: ujWvVo7JaHUp6RXfRHOM3/0PupjXDfVNqG3053Rjt2o= Subject key identifier: 21:8B:86:B7:AB:B3:38:5C:5E:0E:ED:9A:AD:D4:2F:2C:58:80:AC:2B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF49A59D7453F9126452F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b73a8fb3-d110-3ad7-ad69-04ec2126030b.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.209.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:9a:59:d7:45:3f:91:26:45:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=0357efeb-bb10-4323-ba12-13b316dd6c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2d:c8:50:7c:4b:0a:02:dd:65:b7:9e:03:25: 0c:41:fb:67:15:a8:f1:6a:59:6a:75:68:21:05:54: 5f:1e:a6:a8:eb:b5:c3:1b:9d:9f:c1:71:d3:d3:18: d1:1c:19:b3:c9:17:bb:87:be:21:76:60:18:49:ab: bd:4d:71:69:4a:df:80:1f:b2:3b:d0:02:53:24:1e: 62:6f:4a:af:34:ae:96:7b:b5:d8:59:f4:ec:58:da: 6f:44:bd:3b:af:78:8e:71:8a:70:7d:0b:28:b4:18: 94:4f:f9:27:f5:a2:85:bc:ee:a2:9a:5d:d1:6d:29: fb:ac:a1:c3:2f:5e:5d:7c:4d:41:11:ff:04:a9:66: 28:9e:42:99:48:1e:3f:f9:11:db:31:9c:ff:0a:23: bb:5f:05:f6:2a:dc:76:59:56:f7:17:2e:2e:e3:0d: 31:c5:5f:78:70:bd:b0:c2:f0:7f:de:53:86:23:cc: 7e:48:34:f4:8c:73:15:99:10:7e:99:a1:f7:29:54: d8:a6:56:57:bd:4c:62:6f:50:b7:9e:3e:6a:d5:27: 21:b5:14:fe:2e:24:3b:60:71:b2:97:6d:39:f9:74: 80:2e:0a:52:0b:f9:6c:5a:05:c2:91:75:6f:57:78: 55:ae:4b:35:21:50:7e:65:9d:8b:70:51:ea:b8:ee: 90:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8B:86:B7:AB:B3:38:5C:5E:0E:ED:9A:AD:D4:2F:2C:58:80:AC:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b73a8fb3-d110-3ad7-ad69-04ec2126030b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.80.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:08:25:7a:ad:f0:cc:da:68:bb:7f:48:14:1b:c2:19:b3:82: d9:3f:00:db:64:25:74:01:df:88:1a:d5:14:d8:66:95:1e:9a: 06:25:a4:68:b4:85:55:ba:91:25:9f:4f:4e:32:3e:a1:37:c6: 42:f0:12:a1:f6:5e:09:6d:fe:23:ad:68:36:68:08:a5:72:bc: 9f:eb:9a:4d:0f:1c:98:be:2b:26:2d:5b:f6:b7:16:35:57:4e: a1:f6:ac:ed:33:d6:d0:4c:22:26:db:16:76:87:b7:23:79:3d: f9:66:da:57:e3:47:87:61:3f:ed:7a:55:7a:a7:32:ba:63:21: ca:06:dd:3d:a1:44:2c:39:9a:c4:e8:52:db:c4:87:cd:f0:9b: 23:83:52:4b:52:a2:5b:32:1c:42:63:6f:f8:23:d8:35:a9:f6: f4:c1:76:43:24:cb:42:87:88:77:2e:a2:37:9f:5d:f6:69:a5: 5e:f2:56:8e:42:32:f5:01:75:59:0d:db:4a:ce:86:07:e3:ef: d2:d4:1c:6c:22:b8:00:d3:51:99:49:bb:95:60:d5:1d:a7:c0: 22:8f:9e:af:77:7f:52:d9:8f:31:df:e1:03:ae:ed:59:54:67: 1d:a8:ea:ae:77:2e:4d:54:94:a4:3f:40:4f:1f:6d:84:83:9e: 0c:30:5a:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JpZ10U/kSZFLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MDM1N2VmZWItYmIxMC00MzIzLWJhMTItMTNiMzE2ZGQ2YzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki3IUHxLCgLdZbeeAyUMQftnFajxallqdWgh BVRfHqao67XDG52fwXHT0xjRHBmzyRe7h74hdmAYSau9TXFpSt+AH7I70AJTJB5i b0qvNK6We7XYWfTsWNpvRL07r3iOcYpwfQsotBiUT/kn9aKFvO6iml3RbSn7rKHD L15dfE1BEf8EqWYonkKZSB4/+RHbMZz/CiO7XwX2Ktx2WVb3Fy4u4w0xxV94cL2w wvB/3lOGI8x+SDT0jHMVmRB+maH3KVTYplZXvUxib1C3nj5q1SchtRT+LiQ7YHGy l205+XSALgpSC/lsWgXCkXVvV3hVrks1IVB+ZZ2LcFHquO6QeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGLhrerszhcXg7tmq3ULyxYgKwrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjczYThmYjMtZDExMC0z YWQ3LWFkNjktMDRlYzIxMjYwMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9FQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkIJXqt8MzaaLt/SBQbwhmzgtk/ANtkJXQB34ga1RTYZpUemgYlpGi0 hVW6kSWfT04yPqE3xkLwEqH2Xglt/iOtaDZoCKVyvJ/rmk0PHJi+KyYtW/a3FjVX TqH2rO0z1tBMIibbFnaHtyN5Pflm2lfjR4dhP+16VXqnMrpjIcoG3T2hRCw5msTo UtvEh83wmyODUktSolsyHEJjb/gj2DWp9vTBdkMky0KHiHcuojefXfZppV7yVo5C MvUBdVkN20rOhgfj79LUHGwiuADTUZlJu5Vg1R2nwCKPnq93f1LZjzHf4QOu7VlU Zx2o6q53Lk1UlKQ/QE8fbYSDngwwWhc= -----END CERTIFICATE-----Generated at Mon Apr 28 20:47:25 2025 by rpki-client