$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbc4547f-1ba5-3f60-b517-462148e6c7fe.roa File: cbc4547f-1ba5-3f60-b517-462148e6c7fe.roa (raw, json) Hash identifier: Z20wfxD9qzCC53md1FOVL3rrppNDCrPLtNFEM3lBjUY= Subject key identifier: 43:D2:D5:96:1D:02:60:28:44:37:59:21:AD:0C:CB:27:C3:BD:54:15 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858497279BDF2759102C50FADC540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbc4547f-1ba5-3f60-b517-462148e6c7fe.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.207.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:bd:f2:75:91:02:c5:0f:ad:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=d8a95539-17eb-47ae-a47f-ca7eda5153e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:23:85:43:e1:75:bf:0f:47:13:80:62:f1:5b: fe:ca:8e:70:8f:e3:50:fa:b6:d2:96:9d:44:51:8a: f1:11:f6:e5:77:38:f6:79:23:85:be:96:59:fc:08: 77:49:35:e7:be:8e:34:bd:a5:e9:d6:0c:57:69:11: cc:94:6f:d9:b2:51:06:44:25:64:79:a9:5c:10:5b: c3:f1:71:ba:a2:ec:28:09:95:3f:28:fc:84:59:13: 8e:de:1e:88:bb:b8:9d:7e:e2:50:0f:d6:27:f9:92: 12:fe:75:47:0e:a5:43:89:e8:4f:de:4f:a8:46:6c: fe:15:bf:7c:2a:22:c2:80:9f:28:c6:63:dc:77:7d: fe:37:17:f6:89:96:1e:25:32:a7:4f:33:2e:09:47: bf:c8:de:b8:60:77:42:46:e0:10:1d:54:52:d2:08: 4d:e1:e0:d7:7c:74:ea:2c:72:a8:22:16:ae:c1:dc: f6:de:53:17:d8:37:c7:8a:0e:b1:eb:75:6e:6b:da: 6d:26:46:87:aa:e4:36:47:39:b7:9b:7d:50:c5:48: 7b:bd:80:47:4e:fa:d4:78:2c:92:07:e8:f5:c3:6d: 9f:f5:9c:71:e3:3b:1a:b3:56:e8:10:02:95:99:41: 31:a5:8c:ab:ba:79:51:bf:e8:dc:8d:76:54:5d:7b: c9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D2:D5:96:1D:02:60:28:44:37:59:21:AD:0C:CB:27:C3:BD:54:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbc4547f-1ba5-3f60-b517-462148e6c7fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:c2:20:b5:0c:ff:eb:67:40:fe:d0:de:af:9f:b1:ef:3d:a9: 0a:d1:1d:30:31:f9:61:b2:ba:d0:dc:46:6f:a8:3c:63:d4:64: 3b:fc:b6:69:0e:e6:56:95:b0:ff:d7:40:43:17:32:47:28:15: 18:28:2e:27:ac:8b:78:6a:95:82:69:64:a8:80:74:a3:18:45: 5e:7a:c4:b8:83:f2:dc:c2:b9:dd:4b:80:6e:1f:f1:9b:bb:95: 96:a9:6f:59:df:35:77:7c:1e:5c:3e:7b:d7:a0:a6:80:02:67: 83:69:39:2e:60:00:b8:6d:b8:18:d4:0d:e4:1d:7d:04:ce:24: 2f:97:e7:a3:fd:c0:fd:ce:af:87:9b:0d:63:a4:92:2e:10:2f: f2:08:40:1e:b8:20:d0:1c:53:38:29:85:55:f3:23:8c:56:52: 96:51:88:d8:cd:5d:4b:50:b6:31:0e:68:50:10:57:fe:f0:ca: d0:52:be:78:ce:6e:b6:db:76:27:b3:1b:6b:78:b7:81:77:de: 44:6c:53:b0:9a:f2:32:6d:a6:12:58:0e:08:e5:05:e1:c3:9a: 6b:bc:bb:9e:64:74:a8:5c:33:66:2e:1e:12:4d:60:7f:6f:a2: 7f:53:7e:ca:54:2e:09:8f:fb:52:a4:d5:7a:32:92:55:86:4f: f7:f0:69:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyeb3ydZECxQ+txUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk ZDhhOTU1MzktMTdlYi00N2FlLWE0N2YtY2E3ZWRhNTE1M2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCOFQ+F1vw9HE4Bi8Vv+yo5wj+NQ+rbSlp1E UYrxEfbldzj2eSOFvpZZ/Ah3STXnvo40vaXp1gxXaRHMlG/ZslEGRCVkealcEFvD 8XG6ouwoCZU/KPyEWROO3h6Iu7idfuJQD9Yn+ZIS/nVHDqVDiehP3k+oRmz+Fb98 KiLCgJ8oxmPcd33+Nxf2iZYeJTKnTzMuCUe/yN64YHdCRuAQHVRS0ghN4eDXfHTq LHKoIhauwdz23lMX2DfHig6x63Vua9ptJkaHquQ2Rzm3m31QxUh7vYBHTvrUeCyS B+j1w22f9Zxx4zsas1boEAKVmUExpYyrunlRv+jcjXZUXXvJpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPS1ZYdAmAoRDdZIa0MyyfDvVQVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2JjNDU0N2YtMWJhNS0z ZjYwLWI1MTctNDYyMTQ4ZTZjN2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvCILUM/+tnQP7Q3q+fse89qQrRHTAx+WGyutDcRm+oPGPUZDv8tmkO 5laVsP/XQEMXMkcoFRgoLiesi3hqlYJpZKiAdKMYRV56xLiD8tzCud1LgG4f8Zu7 lZapb1nfNXd8Hlw+e9egpoACZ4NpOS5gALhtuBjUDeQdfQTOJC+X56P9wP3Or4eb DWOkki4QL/IIQB64INAcUzgphVXzI4xWUpZRiNjNXUtQtjEOaFAQV/7wytBSvnjO brbbdiezG2t4t4F33kRsU7Ca8jJtphJYDgjlBeHDmmu8u55kdKhcM2YuHhJNYH9v on9TfspULgmP+1Kk1XoyklWGT/fwaRw= -----END CERTIFICATE-----Generated at Sat Apr 26 16:01:52 2025 by rpki-client