$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d01ac20a-36cd-3f02-b13d-e12feb88da0e.roa File: d01ac20a-36cd-3f02-b13d-e12feb88da0e.roa (raw, json) Hash identifier: XjX1TvySkZqptBIG8t2uQq7jL6OfbpbSTJCo6OyC89M= Subject key identifier: 78:4B:7C:75:23:F9:AB:95:F7:F8:9D:EE:E8:74:E3:C1:DA:25:89:EB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858491D7164CDBB6F7238AC7A3980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d01ac20a-36cd-3f02-b13d-e12feb88da0e.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.209.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:64:cd:bb:6f:72:38:ac:7a:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=9187e9f4-2304-4045-8637-e57edfebd2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:64:ee:97:65:92:50:d4:f7:7e:11:2d:0b:14: dd:26:46:53:42:ce:d0:9e:09:70:3f:b0:89:91:be: 7d:1b:06:a6:91:5e:94:d7:17:5e:f6:73:58:ba:f6: 21:31:c3:fc:97:55:48:d7:6d:31:6d:3c:4e:e9:a5: 7d:8b:94:6d:73:e4:58:a8:b7:70:6c:ca:76:ff:62: 6b:9a:f4:20:4b:e2:f8:ec:f6:13:3b:b0:0e:5b:11: 79:0b:22:55:19:bd:98:c7:e4:1e:a1:33:fe:b2:58: ce:0d:9d:5f:87:c9:1f:4a:7b:71:ac:74:87:45:4f: 86:85:21:63:94:04:a2:b4:4d:52:2f:f2:c0:73:76: f1:21:20:49:8f:f8:73:07:a9:1a:31:fe:89:e6:62: 9c:0a:73:4c:f2:cf:40:37:de:96:5d:00:6a:16:20: a8:f3:05:46:c0:9b:5f:b0:66:c3:ec:ec:7d:23:49: 4c:b1:8e:d7:16:ff:98:a6:56:a5:fd:ab:14:6b:28: 2e:c4:f3:ef:e0:76:0b:9e:e0:0c:10:a9:37:84:ba: 68:76:b5:9d:46:7e:0a:56:f5:a7:7a:06:ac:71:ae: 7a:cf:d2:8b:92:14:4b:1a:2f:99:6d:59:75:02:3e: 8f:2e:cd:f5:62:fa:32:6e:98:a5:d2:13:bc:5b:c6: e3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4B:7C:75:23:F9:AB:95:F7:F8:9D:EE:E8:74:E3:C1:DA:25:89:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d01ac20a-36cd-3f02-b13d-e12feb88da0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b4:dd:bd:80:b4:c1:f0:71:74:40:2f:9e:db:4f:a8:99:89: fa:1d:c2:5f:ff:d0:3f:e2:92:cd:47:75:47:bd:42:3a:e1:85: dd:17:77:03:67:f9:08:17:3f:59:c4:ec:93:fe:9d:06:c3:0e: 9d:5a:c1:17:a5:09:6c:d2:ab:dc:6e:ab:4f:85:24:b4:22:dc: f3:7e:42:7b:76:96:d2:d1:02:00:19:74:a9:93:3f:16:39:41: 51:74:a8:64:e5:8a:03:57:fc:f7:f8:83:5c:e0:a0:72:cf:fc: 74:4a:80:2c:3e:87:b8:d8:91:c9:62:8c:28:8f:e3:48:f9:30: ac:96:f5:39:1f:d4:2b:41:87:46:27:34:8d:87:52:a1:c0:c3: 88:34:2b:e0:e3:c7:1e:93:fb:4a:ed:b5:51:75:4d:03:e4:53: 80:e8:01:0c:8e:ba:2d:b9:1a:5b:c8:3d:7c:75:22:f6:1e:cc: eb:82:6c:3c:19:8c:8b:7b:99:89:44:74:64:21:cf:f3:3a:81: dc:f6:18:93:84:b0:ab:87:bd:af:31:1c:cf:2e:5b:db:e9:2d: 07:bf:5c:31:41:e2:85:d5:ce:77:be:d9:3f:b1:89:ce:4e:f8: fe:6f:c1:61:9a:c8:2f:e5:e9:b3:17:83:62:d1:4b:8e:06:03: a7:6f:da:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWTNu29yOKx6OYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk OTE4N2U5ZjQtMjMwNC00MDQ1LTg2MzctZTU3ZWRmZWJkMmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mTul2WSUNT3fhEtCxTdJkZTQs7QnglwP7CJ kb59GwamkV6U1xde9nNYuvYhMcP8l1VI120xbTxO6aV9i5Rtc+RYqLdwbMp2/2Jr mvQgS+L47PYTO7AOWxF5CyJVGb2Yx+QeoTP+sljODZ1fh8kfSntxrHSHRU+GhSFj lASitE1SL/LAc3bxISBJj/hzB6kaMf6J5mKcCnNM8s9AN96WXQBqFiCo8wVGwJtf sGbD7Ox9I0lMsY7XFv+Yplal/asUayguxPPv4HYLnuAMEKk3hLpodrWdRn4KVvWn egasca56z9KLkhRLGi+ZbVl1Aj6PLs31Yvoybpil0hO8W8bj8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhLfHUj+auV9/id7uh048HaJYnrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDAxYWMyMGEtMzZjZC0z ZjAyLWIxM2QtZTEyZmViODhkYTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9F1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABq03b2AtMHwcXRAL57bT6iZifodwl//0D/iks1HdUe9Qjrhhd0XdwNn +QgXP1nE7JP+nQbDDp1awRelCWzSq9xuq0+FJLQi3PN+Qnt2ltLRAgAZdKmTPxY5 QVF0qGTligNX/Pf4g1zgoHLP/HRKgCw+h7jYkclijCiP40j5MKyW9Tkf1CtBh0Yn NI2HUqHAw4g0K+Djxx6T+0rttVF1TQPkU4DoAQyOui25GlvIPXx1IvYezOuCbDwZ jIt7mYlEdGQhz/M6gdz2GJOEsKuHva8xHM8uW9vpLQe/XDFB4oXVzne+2T+xic5O +P5vwWGayC/l6bMXg2LRS44GA6dv2n4= -----END CERTIFICATE-----Generated at Sun Apr 27 03:01:09 2025 by rpki-client