$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1373d94-9528-3891-9655-57df8aeeaf9b.roa File: d1373d94-9528-3891-9655-57df8aeeaf9b.roa (raw, json) Hash identifier: WpVkr9m/eGDssMeZnGiMQUCcth//mhwUYjQBWRsuYBo= Subject key identifier: 4D:D1:B2:7A:15:B2:F0:FE:76:D2:C1:80:8C:92:E6:E9:FC:91:65:18 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF493543CA79FF7E81FC200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1373d94-9528-3891-9655-57df8aeeaf9b.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.211.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:93:54:3c:a7:9f:f7:e8:1f:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=2d7f1d64-ebca-4272-8484-44ac52089505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f3:89:99:88:ef:d3:26:8d:a2:e7:52:1e:c3: e7:37:24:5b:8e:fb:0f:02:e1:ea:b4:3b:d1:2c:20: 3e:90:38:89:9a:08:23:75:4b:1c:0d:bf:2c:3c:5d: 16:01:57:dc:6b:33:c9:60:31:5f:22:56:59:18:ec: 5d:37:c8:87:95:27:66:70:83:9d:53:f8:fd:77:67: 37:98:d2:be:18:07:da:92:1d:cf:d0:76:11:63:56: 3e:a9:55:da:c3:ee:86:9b:49:41:9a:42:23:6a:34: ed:aa:b6:a5:d3:72:4f:13:44:e8:d0:dd:e5:d4:b4: 44:af:d3:96:71:ad:33:37:59:ca:76:c8:32:3b:b2: 24:dc:ec:d8:88:aa:1b:05:a7:77:9d:fd:89:4e:a1: 43:37:c8:e8:e3:ef:f1:72:4e:5c:55:79:da:de:9d: 5f:1e:ef:7f:e6:59:9e:cd:fd:76:cb:0a:74:56:d9: 74:0d:33:f4:52:be:9d:50:1d:1a:97:ee:62:c5:35: 43:be:0d:70:0d:d2:43:1d:0f:a4:dc:e9:82:42:a0: bb:ae:e4:01:77:5e:fb:4a:05:56:c4:0a:83:da:00: 6d:67:ba:2f:51:2d:e0:87:79:81:d6:cc:b9:d1:ec: b1:69:ca:1f:b0:be:b8:bb:31:e0:42:02:95:3c:8e: fd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D1:B2:7A:15:B2:F0:FE:76:D2:C1:80:8C:92:E6:E9:FC:91:65:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1373d94-9528-3891-9655-57df8aeeaf9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f1:ef:90:7b:c6:e9:7b:71:bc:47:cb:27:48:29:e7:67:02: 05:89:63:6d:5e:c1:2e:f8:4a:45:be:81:1e:5d:f2:d4:f6:3a: 9a:28:0a:ff:d8:8d:0b:a4:6d:70:7b:80:de:a9:53:51:68:d8: 9f:52:d6:6f:37:b4:9f:57:e2:88:2a:88:26:84:b0:52:5c:27: ca:f9:bd:ae:cf:18:13:c5:ce:11:cd:65:d2:be:fa:4a:fe:be: ed:e2:22:99:91:6b:f0:e0:b3:2e:33:a6:33:63:f2:b1:ac:ba: 11:3f:c9:ba:46:95:90:84:1e:03:bf:e2:b8:b2:d0:a8:5b:4b: d2:a6:c8:5f:4d:32:b4:28:34:2b:28:d4:9e:24:c6:6d:fb:8b: 93:b3:c4:32:2d:7c:74:1f:cd:be:06:16:e4:06:6a:55:0f:f7: a6:f9:35:24:e1:47:44:25:4e:29:55:ee:93:77:75:99:34:95: 14:7c:3e:6f:fd:74:ec:87:94:a6:06:c8:db:55:f2:9c:1b:15: 47:1e:df:39:87:22:74:ba:4c:7c:1b:13:1f:01:e4:1f:72:73: 7a:d3:76:fa:7b:71:5c:de:9b:ee:07:f3:9c:9f:4c:7b:f3:b3: 46:65:8d:7e:1c:7b:fd:57:b6:44:20:c5:66:c5:5b:0f:d5:03: 0d:d9:0c:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JNUPKef9+gfwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MmQ3ZjFkNjQtZWJjYS00MjcyLTg0ODQtNDRhYzUyMDg5NTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPOJmYjv0yaNoudSHsPnNyRbjvsPAuHqtDvR LCA+kDiJmggjdUscDb8sPF0WAVfcazPJYDFfIlZZGOxdN8iHlSdmcIOdU/j9d2c3 mNK+GAfakh3P0HYRY1Y+qVXaw+6Gm0lBmkIjajTtqral03JPE0To0N3l1LREr9OW ca0zN1nKdsgyO7Ik3OzYiKobBad3nf2JTqFDN8jo4+/xck5cVXna3p1fHu9/5lme zf12ywp0Vtl0DTP0Ur6dUB0al+5ixTVDvg1wDdJDHQ+k3OmCQqC7ruQBd177SgVW xAqD2gBtZ7ovUS3gh3mB1sy50eyxacofsL64uzHgQgKVPI79AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3RsnoVsvD+dtLBgIyS5un8kWUYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDEzNzNkOTQtOTUyOC0z ODkxLTk2NTUtNTdkZjhhZWVhZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9O0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjx75B7xul7cbxHyydIKednAgWJY21ewS74SkW+gR5d8tT2OpooCv/Y jQukbXB7gN6pU1Fo2J9S1m83tJ9X4ogqiCaEsFJcJ8r5va7PGBPFzhHNZdK++kr+ vu3iIpmRa/Dgsy4zpjNj8rGsuhE/ybpGlZCEHgO/4riy0KhbS9KmyF9NMrQoNCso 1J4kxm37i5OzxDItfHQfzb4GFuQGalUP96b5NSThR0QlTilV7pN3dZk0lRR8Pm/9 dOyHlKYGyNtV8pwbFUce3zmHInS6THwbEx8B5B9yc3rTdvp7cVzem+4H85yfTHvz s0ZljX4ce/1XtkQgxWbFWw/VAw3ZDGo= -----END CERTIFICATE-----Generated at Mon Apr 28 02:49:53 2025 by rpki-client