$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/deecf598-4a1c-346c-85ae-9e839d39666c.roa File: deecf598-4a1c-346c-85ae-9e839d39666c.roa (raw, json) Hash identifier: /KYOBWTXvF3imDM+nl2PSKbh/0mB6mTMvWYWaogzRSo= Subject key identifier: 13:82:2B:FD:77:94:4C:35:74:58:F6:E8:2A:E9:BC:93:57:85:B9:8F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829DBFCD1F9C62ED6ABAB90 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/deecf598-4a1c-346c-85ae-9e839d39666c.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.206.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:db:fc:d1:f9:c6:2e:d6:ab:ab:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=4319b490-de0e-4e33-8f83-42b3eef6e8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:69:55:7c:e2:29:87:73:47:42:b5:62:29:1c: de:3c:98:35:00:3d:b5:9c:9f:82:07:b8:8c:f0:2d: 2e:8a:2e:49:eb:19:73:0e:21:b9:e9:98:f4:94:68: 74:b3:b2:eb:60:a9:67:a6:6b:ea:71:3a:f1:26:1c: 78:26:73:44:b2:0d:91:57:47:c6:ad:a2:4e:f7:a7: b0:a5:6e:78:2d:c4:1c:9e:b5:52:4e:12:1d:91:a6: 2b:4a:e5:c8:21:0f:98:c4:a9:da:12:ef:ae:e2:f2: 57:08:d9:63:d2:ce:81:0a:cd:0f:97:a6:69:02:76: bf:6a:92:5d:31:b4:ee:68:32:56:5c:93:da:42:42: 98:9a:70:7a:8d:d2:71:38:a3:70:fc:ae:bf:e3:bb: 79:96:56:96:6f:fd:13:b3:da:c1:04:63:b0:35:f6: 84:6d:c4:1d:62:8b:e7:f0:71:54:12:fd:f1:e6:5c: d2:ff:89:09:53:b8:1b:b3:11:8c:89:59:7c:b5:db: 27:e0:26:86:8c:19:8d:4b:e9:ce:68:29:80:3e:5e: e8:35:7a:ef:c9:75:46:c0:16:09:11:0c:8d:50:33: 21:07:19:e6:66:4c:5f:bf:07:b2:a6:b0:33:67:55: f4:94:e3:a1:d3:e0:63:7f:1d:3f:8e:d1:26:cb:c8: 45:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:82:2B:FD:77:94:4C:35:74:58:F6:E8:2A:E9:BC:93:57:85:B9:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/deecf598-4a1c-346c-85ae-9e839d39666c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:be:16:9a:0f:f8:22:fa:3d:e4:eb:af:4e:f3:4b:32:df:09: 77:02:e7:2e:6b:03:c2:fc:d8:7b:5f:09:e2:01:81:58:b1:67: 8e:ac:40:e3:7b:bb:1a:a4:f0:62:f4:bc:60:60:d5:d6:bf:09: dc:ca:14:d3:00:6a:46:ec:f7:80:bc:dd:7a:8c:9a:40:9d:c1: 4b:91:6c:42:dc:53:80:d9:3e:45:e6:89:66:a6:c0:93:c2:19: 4a:72:d9:af:76:cf:58:de:9a:c2:5f:ea:0b:7f:50:42:02:51: a3:18:55:34:9d:1a:7d:1a:83:cb:91:63:40:ef:e2:32:99:b2: df:69:8e:ea:15:43:bd:a2:bc:9f:e0:34:dc:ac:49:0a:94:6f: 62:90:5f:b3:4f:78:c5:0d:e5:a5:5f:fb:39:e0:c8:d1:22:78: 6e:9b:d8:d7:53:53:c4:e9:20:88:23:07:ee:ea:85:a6:1e:a9: b5:d4:8d:9a:61:de:ec:f8:6c:af:e0:45:07:50:c0:e4:04:ee: 3d:3e:b3:a8:e2:e1:1b:4e:00:64:6f:b9:1c:43:c6:f0:bf:c6: c9:45:3c:cc:49:22:a3:da:7a:4e:f9:a3:88:9c:13:5d:44:d9: d7:b6:e0:43:a9:e4:8c:b5:76:e4:c3:e3:f2:42:7c:2e:40:f9: 62:e8:8c:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdv80fnGLtarq5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NDMxOWI0OTAtZGUwZS00ZTMzLThmODMtNDJiM2VlZjZlOGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWlVfOIph3NHQrViKRzePJg1AD21nJ+CB7iM 8C0uii5J6xlzDiG56Zj0lGh0s7LrYKlnpmvqcTrxJhx4JnNEsg2RV0fGraJO96ew pW54LcQcnrVSThIdkaYrSuXIIQ+YxKnaEu+u4vJXCNlj0s6BCs0Pl6ZpAna/apJd MbTuaDJWXJPaQkKYmnB6jdJxOKNw/K6/47t5llaWb/0Ts9rBBGOwNfaEbcQdYovn 8HFUEv3x5lzS/4kJU7gbsxGMiVl8tdsn4CaGjBmNS+nOaCmAPl7oNXrvyXVGwBYJ EQyNUDMhBxnmZkxfvweyprAzZ1X0lOOh0+Bjfx0/jtEmy8hFvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOCK/13lEw1dFj26CrpvJNXhbmPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGVlY2Y1OTgtNGExYy0z NDZjLTg1YWUtOWU4MzlkMzk2NjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF86qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGO+FpoP+CL6PeTrr07zSzLfCXcC5y5rA8L82HtfCeIBgVixZ46sQON7 uxqk8GL0vGBg1da/CdzKFNMAakbs94C83XqMmkCdwUuRbELcU4DZPkXmiWamwJPC GUpy2a92z1jemsJf6gt/UEICUaMYVTSdGn0ag8uRY0Dv4jKZst9pjuoVQ72ivJ/g NNysSQqUb2KQX7NPeMUN5aVf+zngyNEieG6b2NdTU8TpIIgjB+7qhaYeqbXUjZph 3uz4bK/gRQdQwOQE7j0+s6ji4RtOAGRvuRxDxvC/xslFPMxJIqPaek75o4icE11E 2de24EOp5Iy1duTD4/JCfC5A+WLojDs= -----END CERTIFICATE-----Generated at Sat Apr 26 15:57:47 2025 by rpki-client