$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9e42446-97f3-360b-afee-7c193951d849.roa File: b9e42446-97f3-360b-afee-7c193951d849.roa (raw, json) Hash identifier: Nu9VvUw7/N2T7u7rzM/F6LlWi7KwV2Vfbc4OsI40Uc0= Subject key identifier: F1:20:E3:4C:D9:AD:AE:3D:6B:FD:E7:44:A1:E0:6C:DB:E2:06:7C:12 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF48562A0E4F0BFF9866B8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9e42446-97f3-360b-afee-7c193951d849.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.217.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:48:56:2a:0e:4f:0b:ff:98:66:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=cc508790-bc8c-4c90-8396-71ac4b021651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9f:c8:9a:1e:06:ce:45:6c:9a:3e:f8:f9:86: ff:d6:a7:17:f7:fe:a0:c8:e7:47:74:e8:6c:2e:24: b2:ba:25:29:a4:a1:0b:9a:a7:02:89:2e:32:2c:0e: 46:7c:0b:bc:b7:84:ad:49:27:5f:c5:48:72:18:1a: 15:6a:de:9a:ab:e1:78:ed:fe:f3:f4:66:a7:de:6d: 2f:2f:e6:c3:43:fb:3d:9d:16:3a:3f:bb:7a:da:fd: 3a:60:98:35:f2:9e:b4:25:64:6f:44:20:5f:11:be: 20:f5:57:cd:bf:75:10:9a:db:2e:0b:b9:d9:83:72: 47:b7:77:c6:b3:94:06:1a:af:a4:91:5a:ab:76:ab: 8f:03:c0:e0:1f:21:3c:27:f3:e8:9e:49:a1:2a:76: 94:ed:82:b5:f9:c6:c4:83:cd:03:09:3a:11:a7:b0: 7c:b2:30:da:61:8a:7c:d9:a4:c7:7c:36:ff:0b:90: ff:2b:b6:57:01:2d:1e:0c:ff:19:50:2e:5b:d6:95: 06:71:b2:66:42:5c:b9:9e:8c:61:de:44:8e:30:84: 12:c9:d4:62:dd:64:57:13:77:e0:9f:e5:45:a8:76: 99:8f:88:22:bb:87:a3:73:5f:03:4d:83:15:c0:7c: 4c:ed:45:97:52:75:47:2d:c5:7e:50:2b:1d:ed:12: 0d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:20:E3:4C:D9:AD:AE:3D:6B:FD:E7:44:A1:E0:6C:DB:E2:06:7C:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9e42446-97f3-360b-afee-7c193951d849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:77:89:5e:8f:14:a0:53:df:dc:5a:05:87:85:4a:e8:60:e5: 11:6c:23:e6:1c:8a:af:7f:02:b8:0f:62:80:57:39:45:57:d1: 17:3a:09:a1:ba:ef:b3:fc:84:9d:e4:1e:0d:e7:05:df:28:05: 49:59:4c:0f:ae:ab:18:d1:7c:72:ba:7e:39:89:b2:16:9f:00: e8:75:02:b6:2d:49:5a:30:15:03:2d:c1:f8:cb:d5:b5:a9:c7: fe:8a:89:19:71:e6:cb:73:48:25:bb:1a:96:60:be:ce:10:cc: 23:0c:5b:e4:79:99:66:dc:98:e1:d3:3d:a0:9b:f9:7a:f2:9d: 26:88:d4:7f:29:5f:b9:81:3b:cf:6b:02:f9:30:3a:15:9b:1f: 58:bf:23:fc:5c:47:88:8e:5a:3a:0b:53:50:0d:0a:e8:ab:69: a2:2c:09:9b:a5:79:75:4f:22:7d:d3:30:de:f1:4a:7f:55:d8: 6c:47:48:07:88:61:7f:a8:a1:11:fc:b0:d5:86:88:2e:c6:fd: da:23:00:e7:46:81:e4:b0:6e:f6:26:99:41:e8:97:43:4d:80: d9:d7:c8:85:44:e7:61:f7:b1:59:e1:ef:e0:13:72:c1:a6:30: 78:b6:b8:8d:c6:36:ba:c0:5d:09:25:19:5f:65:09:86:97:21: 31:bb:01:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0hWKg5PC/+YZrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk Y2M1MDg3OTAtYmM4Yy00YzkwLTgzOTYtNzFhYzRiMDIxNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5/Imh4GzkVsmj74+Yb/1qcX9/6gyOdHdOhs LiSyuiUppKELmqcCiS4yLA5GfAu8t4StSSdfxUhyGBoVat6aq+F47f7z9Gan3m0v L+bDQ/s9nRY6P7t62v06YJg18p60JWRvRCBfEb4g9VfNv3UQmtsuC7nZg3JHt3fG s5QGGq+kkVqrdquPA8DgHyE8J/PonkmhKnaU7YK1+cbEg80DCToRp7B8sjDaYYp8 2aTHfDb/C5D/K7ZXAS0eDP8ZUC5b1pUGcbJmQly5noxh3kSOMIQSydRi3WRXE3fg n+VFqHaZj4giu4ejc18DTYMVwHxM7UWXUnVHLcV+UCsd7RINWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEg40zZra49a/3nRKHgbNviBnwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjllNDI0NDYtOTdmMy0z NjBiLWFmZWUtN2MxOTM5NTFkODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9k0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC13iV6PFKBT39xaBYeFSuhg5RFsI+Yciq9/ArgPYoBXOUVX0Rc6CaG6 77P8hJ3kHg3nBd8oBUlZTA+uqxjRfHK6fjmJshafAOh1ArYtSVowFQMtwfjL1bWp x/6KiRlx5stzSCW7GpZgvs4QzCMMW+R5mWbcmOHTPaCb+XrynSaI1H8pX7mBO89r AvkwOhWbH1i/I/xcR4iOWjoLU1ANCuiraaIsCZuleXVPIn3TMN7xSn9V2GxHSAeI YX+ooRH8sNWGiC7G/dojAOdGgeSwbvYmmUHol0NNgNnXyIVE52H3sVnh7+ATcsGm MHi2uI3GNrrAXQklGV9lCYaXITG7AUk= -----END CERTIFICATE-----Generated at Sat Apr 26 19:14:56 2025 by rpki-client