$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d69fae0e-e57e-339d-b215-5ebe3b1560a5.roa File: d69fae0e-e57e-339d-b215-5ebe3b1560a5.roa (raw, json) Hash identifier: TBmQzhlyR5hdaG7NRjnUAGonlICsDNtnT3zbpWRmapw= Subject key identifier: DD:32:70:51:0D:C4:CD:5B:E0:73:02:A2:4E:3F:67:B2:59:01:DC:F7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF49097CE772DB557C490C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d69fae0e-e57e-339d-b215-5ebe3b1560a5.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.209.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:90:97:ce:77:2d:b5:57:c4:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=ba504712-7854-414e-9b54-33efaebcba6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9e:6d:9f:ec:45:43:58:ae:3e:d3:19:2b:ed: 87:f2:a2:dd:22:13:ea:c0:84:15:28:ba:c8:90:f4: 94:e9:b6:7a:6c:a1:d6:01:dc:08:9b:5c:1a:51:3b: e8:7e:68:e5:a5:86:07:bd:61:17:f0:e5:0b:69:7c: 14:d4:66:42:5b:9f:a0:35:91:bf:2e:f7:7f:76:9a: ec:46:85:f3:65:9d:26:5d:c7:72:4e:6f:c8:13:db: ea:c0:3a:5e:7e:2f:9f:3c:b1:d8:d8:1f:0c:6b:7c: 94:86:c7:6c:1f:c7:28:7f:5b:da:35:62:14:cb:40: 6f:7a:79:3f:39:f9:f6:8b:9e:53:c3:a5:6e:f3:82: be:9e:e9:aa:bd:ee:04:6c:1d:57:31:db:ac:5f:17: 59:78:f6:a0:8a:cf:ac:40:1a:b8:ba:08:8e:41:e8: a1:c0:2b:0f:d0:73:2c:64:b5:30:6f:c0:76:f0:6e: 2d:b0:53:67:9b:56:2e:cf:c9:63:0a:ac:6f:7e:62: d2:b0:26:6d:d9:a0:6a:3f:3d:e7:2d:4e:d0:a0:af: 20:64:f6:be:79:62:56:1f:0b:95:50:af:26:f4:d0: f3:0a:0b:3f:7c:c8:62:d6:a7:be:33:99:eb:80:9c: d2:8f:54:fe:de:ac:f1:b2:11:6c:12:81:0c:82:79: 7b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:32:70:51:0D:C4:CD:5B:E0:73:02:A2:4E:3F:67:B2:59:01:DC:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d69fae0e-e57e-339d-b215-5ebe3b1560a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:9b:82:71:aa:b1:6e:f9:4e:95:ac:0f:1e:80:d4:73:cb:5a: 37:2d:e8:ac:63:f5:e6:84:c2:42:82:47:34:61:15:2e:23:c6: 77:07:45:78:cd:49:a6:4f:e4:3b:b8:39:80:6d:14:12:b8:a2: 6f:6d:c2:c0:ac:fd:86:1d:0b:8e:fb:37:96:e7:fa:92:17:71: 49:40:d0:e7:a9:37:40:e7:fc:4e:b5:f2:2a:5e:4b:80:74:e0: 9b:48:3f:66:21:1f:de:b7:e9:2d:ca:04:35:1b:d5:8e:21:db: 6a:f4:3b:4d:94:da:92:16:c2:9b:fa:9c:09:eb:f4:39:8f:ea: c0:93:3b:3c:52:1f:2f:60:f6:23:09:e3:20:25:da:b7:ce:99: eb:c3:98:b3:9f:6b:72:71:72:fa:2b:1a:4e:b5:d8:32:40:62: 59:80:b9:25:e0:60:4b:ee:85:f7:47:ab:18:34:9e:99:22:8e: 41:4f:96:0b:36:53:c1:1a:f6:a9:25:f1:00:aa:bb:9f:92:3d: 66:1e:91:a2:a3:60:9a:65:7b:08:e3:9b:c0:20:9d:0f:e5:1f: 0a:fe:a0:5b:d7:06:d1:4f:49:63:4b:08:e8:88:f0:58:93:ae: 48:9d:e4:5c:43:42:1f:9f:e4:92:e8:31:e3:61:f5:08:e7:51: fa:32:e8:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JCXzncttVfEkMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk YmE1MDQ3MTItNzg1NC00MTRlLTliNTQtMzNlZmFlYmNiYTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ5tn+xFQ1iuPtMZK+2H8qLdIhPqwIQVKLrI kPSU6bZ6bKHWAdwIm1waUTvofmjlpYYHvWEX8OULaXwU1GZCW5+gNZG/Lvd/dprs RoXzZZ0mXcdyTm/IE9vqwDpefi+fPLHY2B8Ma3yUhsdsH8cof1vaNWIUy0Bvenk/ Ofn2i55Tw6Vu84K+numqve4EbB1XMdusXxdZePagis+sQBq4ugiOQeihwCsP0HMs ZLUwb8B28G4tsFNnm1Yuz8ljCqxvfmLSsCZt2aBqPz3nLU7QoK8gZPa+eWJWHwuV UK8m9NDzCgs/fMhi1qe+M5nrgJzSj1T+3qzxshFsEoEMgnl72QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0ycFENxM1b4HMCok4/Z7JZAdz3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDY5ZmFlMGUtZTU3ZS0z MzlkLWIyMTUtNWViZTNiMTU2MGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9HoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGubgnGqsW75TpWsDx6A1HPLWjct6Kxj9eaEwkKCRzRhFS4jxncHRXjN SaZP5Du4OYBtFBK4om9twsCs/YYdC477N5bn+pIXcUlA0OepN0Dn/E618ipeS4B0 4JtIP2YhH9636S3KBDUb1Y4h22r0O02U2pIWwpv6nAnr9DmP6sCTOzxSHy9g9iMJ 4yAl2rfOmevDmLOfa3JxcvorGk612DJAYlmAuSXgYEvuhfdHqxg0npkijkFPlgs2 U8Ea9qkl8QCqu5+SPWYekaKjYJplewjjm8AgnQ/lHwr+oFvXBtFPSWNLCOiI8FiT rkid5FxDQh+f5JLoMeNh9QjnUfoy6P0= -----END CERTIFICATE-----Generated at Sun Jun 15 19:04:14 2025 by rpki-client