$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d91578a3-2b08-35ed-944e-d37239e82084.roa File: d91578a3-2b08-35ed-944e-d37239e82084.roa (raw, json) Hash identifier: iz/3SK2d9h+VkSdbADnnae1YXGlOEA5dKEC+7lRg+Hg= Subject key identifier: B1:13:52:31:03:86:59:CE:9B:E4:03:87:82:B0:A0:21:73:3E:31:54 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849998F41415920E92EE5E40A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d91578a3-2b08-35ed-944e-d37239e82084.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.208.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:41:41:59:20:e9:2e:e5:e4:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=b6539a8e-51c0-4821-9a54-e563e4f6ad93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:05:ce:23:3a:56:b2:be:df:40:50:df:1f:db: f8:8d:af:ef:a9:b1:85:06:17:be:f7:d0:fd:ed:37: 24:6d:a7:7b:58:ac:cd:a8:d0:10:66:40:e4:97:ee: b2:f2:71:c1:9d:91:55:9e:b9:20:bb:17:ab:75:9a: fe:41:7a:4b:ea:91:0a:8e:e3:be:e9:74:78:5f:6b: f0:59:0e:c6:86:c2:d3:f0:5e:a9:be:81:0d:d1:fa: d0:14:a9:b5:d9:42:03:6f:eb:f2:ba:2d:e9:a6:f8: df:e7:bd:7c:78:3f:5a:14:b5:7d:a1:24:d0:5e:85: 4d:c3:90:8d:f7:7e:67:ca:74:b7:59:5c:ac:3d:ed: e8:94:82:4f:5b:c6:a7:70:c4:b1:08:39:5a:f1:84: 2d:bc:f3:58:cb:61:bf:52:41:75:c4:2c:cb:38:30: 16:39:51:61:a8:28:f8:c9:f9:85:25:1a:d0:c3:8f: a7:60:b6:77:99:ca:d1:06:6c:13:36:0e:12:17:a9: c9:e2:71:42:a9:f9:e4:90:1d:21:e3:06:9e:9a:28: b8:d7:0d:3c:96:53:e3:0c:e1:bb:80:8e:2e:4b:39: e6:4b:18:9f:06:d0:d4:47:94:b2:2e:aa:71:4f:30: 27:cd:cd:07:94:5d:51:42:af:8b:7f:95:a8:f9:3d: 4b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:13:52:31:03:86:59:CE:9B:E4:03:87:82:B0:A0:21:73:3E:31:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d91578a3-2b08-35ed-944e-d37239e82084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:7f:a6:45:5b:06:62:5e:dd:84:b4:a1:aa:31:a2:2d:1a:39: 1d:b5:95:17:18:46:1a:58:87:1a:16:6e:de:5c:4f:4e:57:c4: fb:9a:bf:83:53:37:3f:22:f8:e2:fe:1f:f5:98:50:51:64:7b: fe:3a:ff:2d:ca:eb:48:de:7b:59:0f:7c:9b:a3:14:a0:f2:2e: 32:bc:5c:5b:e1:3a:2e:47:ce:72:29:b1:ef:7e:7d:29:92:5d: 6d:a6:7c:ab:c1:e4:0e:ea:94:2f:8e:57:77:fe:3a:96:d4:7b: bc:41:94:4f:e3:b8:1a:61:11:12:41:81:2a:61:9c:fb:d5:c0: 83:46:d7:97:03:f3:e7:7d:49:7d:ee:40:02:f1:38:28:60:7a: 0b:63:54:60:94:b8:37:22:92:ba:40:5a:66:70:fb:6d:df:fb: ab:ef:1e:0d:29:d8:06:30:e1:82:59:7e:20:0e:6b:3d:58:75: ac:82:d3:df:6b:84:05:74:8c:56:66:8b:33:cc:34:52:be:8b: 0f:06:20:5d:10:4f:f6:ac:08:8a:f8:cf:35:07:ab:da:f0:62: 06:32:3a:64:d5:e3:16:59:5e:f8:b4:ac:42:07:b9:d7:db:87: 9a:02:e2:38:bb:46:b8:63:fa:fc:c0:6b:36:b1:15:f0:d0:43: b6:68:dc:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZj0FBWSDpLuXkCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk YjY1MzlhOGUtNTFjMC00ODIxLTlhNTQtZTU2M2U0ZjZhZDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQXOIzpWsr7fQFDfH9v4ja/vqbGFBhe+99D9 7Tckbad7WKzNqNAQZkDkl+6y8nHBnZFVnrkguxerdZr+QXpL6pEKjuO+6XR4X2vw WQ7GhsLT8F6pvoEN0frQFKm12UIDb+vyui3ppvjf5718eD9aFLV9oSTQXoVNw5CN 935nynS3WVysPe3olIJPW8ancMSxCDla8YQtvPNYy2G/UkF1xCzLODAWOVFhqCj4 yfmFJRrQw4+nYLZ3mcrRBmwTNg4SF6nJ4nFCqfnkkB0h4waemii41w08llPjDOG7 gI4uSznmSxifBtDUR5SyLqpxTzAnzc0HlF1RQq+Lf5Wo+T1LQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLETUjEDhlnOm+QDh4KwoCFzPjFUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDkxNTc4YTMtMmIwOC0z NWVkLTk0NGUtZDM3MjM5ZTgyMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9AOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGV/pkVbBmJe3YS0oaoxoi0aOR21lRcYRhpYhxoWbt5cT05XxPuav4NT Nz8i+OL+H/WYUFFke/46/y3K60jee1kPfJujFKDyLjK8XFvhOi5HznIpse9+fSmS XW2mfKvB5A7qlC+OV3f+OpbUe7xBlE/juBphERJBgSphnPvVwING15cD8+d9SX3u QALxOChgegtjVGCUuDcikrpAWmZw+23f+6vvHg0p2AYw4YJZfiAOaz1YdayC099r hAV0jFZmizPMNFK+iw8GIF0QT/asCIr4zzUHq9rwYgYyOmTV4xZZXvi0rEIHudfb h5oC4ji7Rrhj+vzAazaxFfDQQ7Zo3Pw= -----END CERTIFICATE-----Generated at Sat Apr 26 18:01:54 2025 by rpki-client