$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd558792-b295-30bb-b2dc-c6122d5a2ff6.roa File: dd558792-b295-30bb-b2dc-c6122d5a2ff6.roa (raw, json) Hash identifier: xDjAyPM2hynbpZe/sXhb6RVQD6KHaoDCJeGeI/u/Png= Subject key identifier: C0:FD:6F:CA:84:E8:73:D0:95:B3:36:8D:86:EC:DF:0B:18:3C:B9:67 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF493AD21F8870B4AE86600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd558792-b295-30bb-b2dc-c6122d5a2ff6.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.211.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:93:ad:21:f8:87:0b:4a:e8:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=b34cb696-ca3a-48c0-abcd-c07c5640a058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3b:59:db:19:70:9a:0a:32:f9:b6:19:89:23: 18:51:5f:d6:61:99:c9:4c:19:27:91:89:e0:20:1a: a7:32:79:9a:1f:4f:e2:27:d7:03:b9:d9:70:1e:23: 70:ff:89:85:68:0b:8a:2f:7b:67:77:05:a9:f6:b6: 6c:2b:a4:e8:14:ae:3c:21:ec:a9:1e:8d:39:8e:8e: e1:6f:0b:1a:c3:2e:08:4c:ef:70:cd:b0:0a:dc:6c: 3d:80:5d:d6:cd:e0:07:d2:86:5c:26:6b:36:1d:e1: 0d:db:71:13:67:1b:06:21:43:0f:7b:f6:3a:d4:4d: 5e:76:ac:1e:23:ab:d6:65:7b:6f:83:b0:96:87:12: 48:a9:0f:04:50:19:03:0e:c2:50:c1:b1:2c:2b:7b: f0:a5:ff:c1:33:f3:8c:de:11:d0:7f:b1:61:4c:79: b1:9b:c3:bd:f5:a9:12:1e:0b:5a:a0:44:87:af:3d: 2c:86:21:a5:dc:19:d2:74:e6:42:4c:77:0b:61:17: 21:01:83:6d:bb:9c:0b:75:b7:39:9f:26:41:d8:78: 1b:6d:a1:ab:52:0f:a2:d6:b2:64:7a:28:cb:43:57: 37:5e:38:9b:37:f5:d3:d5:d1:7a:79:1b:b4:dc:0e: c4:eb:7b:08:e2:0e:9b:e6:51:06:3c:ea:62:71:08: 38:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FD:6F:CA:84:E8:73:D0:95:B3:36:8D:86:EC:DF:0B:18:3C:B9:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd558792-b295-30bb-b2dc-c6122d5a2ff6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:a2:bf:3e:44:5a:0e:97:f5:14:28:2e:c4:65:35:74:39:fe: 6e:fb:87:bf:48:ee:fb:10:16:4c:c7:00:e4:f1:e5:22:75:0d: 30:63:77:a7:d3:d3:dd:c4:99:c2:d0:2b:59:49:8b:4c:9f:cc: 43:f8:9e:73:b2:05:e7:4e:9e:17:cc:ac:cf:6f:35:9f:a8:1f: 24:1c:3a:0b:24:39:0a:a2:87:88:2a:37:f4:0b:86:2c:ed:41: cb:f8:a3:3b:06:30:ad:4d:27:1a:b2:98:35:1e:e9:2f:2a:52: b6:97:b9:a5:59:2d:a2:12:b9:da:d6:77:2c:6c:14:1b:0c:f4: fd:a2:ff:93:93:ca:08:2b:60:38:cd:a9:e9:bc:5e:5c:fd:87: ca:fc:42:71:e3:5c:49:4c:1a:27:83:00:d6:f3:77:2f:00:a6: 53:89:03:b3:5c:fe:7a:9c:37:8c:fb:03:7b:7e:7f:6f:97:06: c8:e5:39:c9:72:ef:df:89:9f:d5:48:71:95:b0:27:ad:c2:bc: c0:7e:51:bc:bc:84:98:26:44:2b:17:85:a9:a3:27:f4:79:0a: bf:87:29:3a:bb:42:4a:de:33:3a:07:97:08:56:b1:d8:47:54: ca:2a:ed:42:71:da:f1:03:2f:2e:78:e4:23:dd:78:6c:63:28: 9f:5e:1b:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JOtIfiHC0roZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk YjM0Y2I2OTYtY2EzYS00OGMwLWFiY2QtYzA3YzU2NDBhMDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jtZ2xlwmgoy+bYZiSMYUV/WYZnJTBknkYng IBqnMnmaH0/iJ9cDudlwHiNw/4mFaAuKL3tndwWp9rZsK6ToFK48IeypHo05jo7h bwsawy4ITO9wzbAK3Gw9gF3WzeAH0oZcJms2HeEN23ETZxsGIUMPe/Y61E1edqwe I6vWZXtvg7CWhxJIqQ8EUBkDDsJQwbEsK3vwpf/BM/OM3hHQf7FhTHmxm8O99akS HgtaoESHrz0shiGl3BnSdOZCTHcLYRchAYNtu5wLdbc5nyZB2HgbbaGrUg+i1rJk eijLQ1c3XjibN/XT1dF6eRu03A7E63sI4g6b5lEGPOpicQg4swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMD9b8qE6HPQlbM2jYbs3wsYPLlnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGQ1NTg3OTItYjI5NS0z MGJiLWIyZGMtYzYxMjJkNWEyZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9PwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeivz5EWg6X9RQoLsRlNXQ5/m77h79I7vsQFkzHAOTx5SJ1DTBjd6fT 093EmcLQK1lJi0yfzEP4nnOyBedOnhfMrM9vNZ+oHyQcOgskOQqih4gqN/QLhizt Qcv4ozsGMK1NJxqymDUe6S8qUraXuaVZLaISudrWdyxsFBsM9P2i/5OTyggrYDjN qem8Xlz9h8r8QnHjXElMGieDANbzdy8AplOJA7Nc/nqcN4z7A3t+f2+XBsjlOcly 79+Jn9VIcZWwJ63CvMB+Uby8hJgmRCsXhamjJ/R5Cr+HKTq7QkreMzoHlwhWsdhH VMoq7UJx2vEDLy545CPdeGxjKJ9eG3s= -----END CERTIFICATE-----Generated at Sat Apr 26 16:12:51 2025 by rpki-client