$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b86f3f8d-cb01-3a39-97c7-be151e03fbc5.roa File: b86f3f8d-cb01-3a39-97c7-be151e03fbc5.roa (raw, json) Hash identifier: FBLfHJSiXTrTnTUwuzfMnf3ZFQi7jS0Ef1vYTzqEPMo= Subject key identifier: E5:2C:F9:AB:A6:9E:D5:88:69:86:7A:C1:77:9F:44:06:E3:44:18:30 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829DC611B5FF861F80BE668 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b86f3f8d-cb01-3a39-97c7-be151e03fbc5.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.206.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:dc:61:1b:5f:f8:61:f8:0b:e6:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=f045acf3-ef2d-4598-b8eb-3151c10219ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:77:11:8b:d4:ee:d3:ec:07:c4:70:40:af:b2: 02:e8:6e:6b:fb:cc:2f:a6:a1:57:7c:e9:6f:bc:20: c8:e5:cb:86:52:9b:c8:6e:ce:c1:18:c8:08:36:05: 58:45:33:59:e4:07:0e:ae:a0:f4:b3:e9:3f:10:99: 0a:e1:3b:8a:92:4f:68:c0:1b:1c:db:0f:ec:02:82: 61:9f:94:35:71:37:7d:06:d7:b7:d5:84:64:98:c8: d3:84:71:a4:23:87:86:01:ff:17:5a:f7:6d:80:b9: d8:3d:0d:77:75:9f:df:08:74:5e:84:e8:8a:98:92: 8a:85:14:b1:b0:ab:16:49:76:0b:0c:f8:2b:41:44: 17:a8:d1:9d:be:5a:72:13:ab:16:c5:b3:37:ae:2c: 9d:be:90:55:bf:f8:68:45:eb:ae:01:da:3d:25:73: 79:4c:43:b7:19:fa:1e:d8:df:64:c4:b2:57:63:81: 01:73:5c:c4:bc:9c:2d:1c:ad:27:14:e9:79:07:2b: 8b:56:e0:f6:23:a3:88:d5:d7:9a:44:c2:36:8d:8c: 1a:30:d8:c8:c3:95:85:c9:3a:cf:3e:eb:aa:78:f2: a3:a6:74:17:58:cd:c8:e7:bd:d1:87:c5:fa:71:e0: 1d:ae:1c:81:85:02:a1:cf:d8:3b:20:74:44:f5:eb: b5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2C:F9:AB:A6:9E:D5:88:69:86:7A:C1:77:9F:44:06:E3:44:18:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b86f3f8d-cb01-3a39-97c7-be151e03fbc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:46:ca:d8:43:f0:13:93:c3:b1:72:72:56:7b:59:ca:2e:62: 09:8b:46:27:8e:dc:16:ea:fc:bf:15:a7:81:72:38:9f:69:70: 74:d3:c1:e3:5b:09:b2:0a:f2:26:d4:64:f3:f3:e6:49:13:f6: 08:5e:61:4c:5d:7a:32:12:16:f0:d5:6d:2b:61:af:21:6f:86: a8:98:e4:c4:f3:f4:86:eb:79:56:66:b0:6f:a8:18:40:59:cc: a9:e0:be:6e:f8:85:77:dd:ef:99:44:50:4e:75:06:6f:98:98: e6:90:25:6f:0e:7b:4c:ac:f0:e5:b1:ca:f9:5d:48:11:51:a6: 0c:cf:9e:0e:6f:65:fb:45:47:07:d4:26:69:ab:34:0a:2a:d8: 42:b7:9a:b0:b7:35:a3:53:55:5b:d5:78:4b:45:83:27:b3:19: 71:2f:fe:4d:2b:36:38:d2:f7:71:91:26:8b:82:d2:78:8e:21: 8c:5f:90:08:8e:0e:0b:94:b0:02:c1:fe:95:5a:c4:1e:1f:3a: 2e:16:d2:16:39:cc:6f:95:80:d6:26:b3:25:ff:59:2d:d9:fb: 52:49:e3:f3:be:bf:93:8e:cc:20:a9:a5:f0:89:e8:dd:de:8e: 46:2f:6b:84:62:0b:ff:38:9e:21:cb:2a:37:bc:a2:1c:42:6f: c8:c6:17:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdxhG1/4YfgL5mgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk ZjA0NWFjZjMtZWYyZC00NTk4LWI4ZWItMzE1MWMxMDIxOWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3cRi9Tu0+wHxHBAr7IC6G5r+8wvpqFXfOlv vCDI5cuGUpvIbs7BGMgINgVYRTNZ5AcOrqD0s+k/EJkK4TuKkk9owBsc2w/sAoJh n5Q1cTd9Bte31YRkmMjThHGkI4eGAf8XWvdtgLnYPQ13dZ/fCHRehOiKmJKKhRSx sKsWSXYLDPgrQUQXqNGdvlpyE6sWxbM3riydvpBVv/hoReuuAdo9JXN5TEO3Gfoe 2N9kxLJXY4EBc1zEvJwtHK0nFOl5ByuLVuD2I6OI1deaRMI2jYwaMNjIw5WFyTrP PuuqePKjpnQXWM3I573Rh8X6ceAdrhyBhQKhz9g7IHRE9eu1WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUs+aumntWIaYZ6wXefRAbjRBgwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjg2ZjNmOGQtY2IwMS0z YTM5LTk3YzctYmUxNTFlMDNmYmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF864MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVGythD8BOTw7FyclZ7WcouYgmLRieO3Bbq/L8Vp4FyOJ9pcHTTweNb CbIK8ibUZPPz5kkT9gheYUxdejISFvDVbSthryFvhqiY5MTz9IbreVZmsG+oGEBZ zKngvm74hXfd75lEUE51Bm+YmOaQJW8Oe0ys8OWxyvldSBFRpgzPng5vZftFRwfU JmmrNAoq2EK3mrC3NaNTVVvVeEtFgyezGXEv/k0rNjjS93GRJouC0niOIYxfkAiO DguUsALB/pVaxB4fOi4W0hY5zG+VgNYmsyX/WS3Z+1JJ4/O+v5OOzCCppfCJ6N3e jkYva4RiC/84niHLKje8ohxCb8jGF/8= -----END CERTIFICATE-----Generated at Sun Apr 27 09:16:31 2025 by rpki-client