$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd67a1c3-cbb0-38cc-a326-a50d469c5e3b.roa File: bd67a1c3-cbb0-38cc-a326-a50d469c5e3b.roa (raw, json) Hash identifier: 5FBpNbtJDK6kR927db3EEBY3RYZZcxWf2AQdds8SniU= Subject key identifier: 7E:C2:40:7A:02:21:4C:6C:50:C0:24:30:84:0F:2B:15:B5:A3:F3:B0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF48FCAE7ED7310D9FF3040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd67a1c3-cbb0-38cc-a326-a50d469c5e3b.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.209.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8f:ca:e7:ed:73:10:d9:ff:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=207edba4-4dd9-4fc7-af3e-acf34bbd2f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8e:db:95:7a:72:9d:25:fb:ad:2b:c6:81:24: 24:65:c1:cb:af:64:fa:d5:80:3b:11:df:87:1d:90: a8:05:c2:19:43:c4:6a:84:ea:19:ab:33:55:b6:d5: ce:6c:d0:ba:56:09:19:be:8f:d5:8f:4d:5d:c8:98: 74:4d:32:a9:e5:95:43:f8:f2:42:2b:50:fd:be:21: a4:5e:5b:0d:d3:1b:de:f8:54:9f:c8:29:1f:bf:ec: 0f:fd:1d:a1:39:ba:82:54:4f:23:71:3e:42:58:e2: 62:56:7d:c5:8a:a6:7b:ac:2c:c9:9e:9b:bf:5b:37: c7:61:33:1e:83:ce:7b:bd:dd:b0:86:f5:6f:2d:8f: c5:c7:33:e8:52:d6:80:27:54:87:0e:73:6f:d3:f6: d0:85:53:73:24:35:47:95:ee:fd:e4:98:62:22:eb: 16:0e:39:6d:b6:e6:ed:6b:b9:b8:fa:97:5d:bf:f4: a1:dd:55:a9:53:7b:f6:ff:a2:7f:16:9e:00:c7:34: a1:68:2a:c1:9f:0f:75:74:9e:62:85:23:b3:5d:d8: 30:1c:4c:0f:0a:be:d8:31:60:cf:10:48:d4:94:03: e8:38:bf:3f:7d:8f:25:8b:97:bc:c4:da:e4:71:69: e4:f1:04:11:83:26:6a:8d:3a:85:3e:a3:92:d0:33: a0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C2:40:7A:02:21:4C:6C:50:C0:24:30:84:0F:2B:15:B5:A3:F3:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd67a1c3-cbb0-38cc-a326-a50d469c5e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:56:63:fe:df:73:28:86:72:0f:4f:06:f1:b7:d9:4b:30:81: 24:c4:33:b6:65:d9:f8:bd:ea:63:0a:8c:2d:6e:2c:bb:2c:ff: 82:0c:a4:0b:d8:c3:3d:f1:90:6d:f1:f7:7d:b7:d9:40:2b:08: 13:82:0b:0b:e6:40:38:f0:0b:01:27:54:c6:61:e2:e3:2b:f6: 12:08:8d:4e:6a:3b:8b:ba:e9:c9:ce:a2:59:e1:95:e8:e4:72: 49:60:22:c8:34:b5:50:ec:65:b2:95:38:bd:6f:2b:3a:6e:1b: 7e:3c:c3:05:24:f0:05:c4:ff:2a:47:89:97:d6:f8:3a:08:d0: 43:b5:8f:54:93:1c:10:c0:dd:29:4a:52:cb:f6:d8:09:a0:2e: 8f:13:42:9d:20:7f:18:8e:f2:1e:fa:cc:51:2f:c1:90:4b:c9: 26:fa:a0:8e:0f:ff:ee:f3:2a:e7:8f:ea:85:1e:78:1d:28:fd: fd:54:ae:0c:97:99:37:e3:7d:ee:06:a7:cd:28:44:05:db:6e: ef:0b:cf:ff:dd:5d:8d:16:0a:ec:d0:f1:d6:f7:1f:b2:e3:42: 80:25:ec:1e:b2:e9:df:ba:9b:38:2b:81:ad:45:79:ef:4f:2f: db:96:92:6e:56:96:4d:3d:0d:51:60:fa:35:22:95:ef:fa:26: b3:ea:a8:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9I/K5+1zENn/MEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MjA3ZWRiYTQtNGRkOS00ZmM3LWFmM2UtYWNmMzRiYmQyZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY7blXpynSX7rSvGgSQkZcHLr2T61YA7Ed+H HZCoBcIZQ8RqhOoZqzNVttXObNC6VgkZvo/Vj01dyJh0TTKp5ZVD+PJCK1D9viGk XlsN0xve+FSfyCkfv+wP/R2hObqCVE8jcT5CWOJiVn3FiqZ7rCzJnpu/WzfHYTMe g857vd2whvVvLY/FxzPoUtaAJ1SHDnNv0/bQhVNzJDVHle795JhiIusWDjlttubt a7m4+pddv/Sh3VWpU3v2/6J/Fp4AxzShaCrBnw91dJ5ihSOzXdgwHEwPCr7YMWDP EEjUlAPoOL8/fY8li5e8xNrkcWnk8QQRgyZqjTqFPqOS0DOg8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7CQHoCIUxsUMAkMIQPKxW1o/OwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmQ2N2ExYzMtY2JiMC0z OGNjLWEzMjYtYTUwZDQ2OWM1ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9WY/7fcyiGcg9PBvG32UswgSTEM7Zl2fi96mMKjC1uLLss/4IMpAvY wz3xkG3x93232UArCBOCCwvmQDjwCwEnVMZh4uMr9hIIjU5qO4u66cnOolnhlejk cklgIsg0tVDsZbKVOL1vKzpuG348wwUk8AXE/ypHiZfW+DoI0EO1j1STHBDA3SlK Usv22AmgLo8TQp0gfxiO8h76zFEvwZBLySb6oI4P/+7zKueP6oUeeB0o/f1UrgyX mTfjfe4Gp80oRAXbbu8Lz//dXY0WCuzQ8db3H7LjQoAl7B6y6d+6mzgrga1Fee9P L9uWkm5Wlk09DVFg+jUile/6JrPqqC4= -----END CERTIFICATE-----Generated at Sat Apr 26 18:37:17 2025 by rpki-client