$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb98baa-2682-37a7-bfc4-9b7540f961e2.roa File: dfb98baa-2682-37a7-bfc4-9b7540f961e2.roa (raw, json) Hash identifier: HeLw3//u6UiFJrVPlvQgNVLYlGU8y0TynK8jazt2CYo= Subject key identifier: D7:3C:D0:24:23:FB:C8:7F:01:A2:71:8A:B7:CB:9A:CB:64:24:6F:4F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF49B13BCA771E521317760 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb98baa-2682-37a7-bfc4-9b7540f961e2.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.209.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:9b:13:bc:a7:71:e5:21:31:77:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=b0ec4f10-69b8-4bf4-9588-5f920576afdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:02:f7:ad:34:25:56:ba:46:fa:92:61:0d:aa: 5e:1c:a0:61:ca:1c:4f:e3:93:14:4f:36:31:b9:d7: 9b:70:a6:0f:ac:21:b9:33:a1:7d:4c:48:6d:29:d2: df:11:c7:bb:e4:f6:4d:8f:9b:d8:02:cf:ae:7d:d0: 12:b1:a0:4a:88:49:a9:63:02:1d:f9:98:d4:ce:f2: f8:c3:52:a5:58:f3:70:2f:ed:1a:0f:d5:75:b6:37: e2:4b:a0:0d:c7:11:19:68:b6:bd:f6:84:43:42:7c: 51:df:9e:b7:11:6d:33:34:4b:e7:02:5e:f3:5f:5b: 43:19:f4:b2:1a:bc:ef:2f:ec:8f:45:91:40:0c:5f: ce:74:a4:ca:2d:0f:69:bd:c1:4a:4b:d7:3a:d6:56: 57:44:ae:0a:ad:15:ea:d9:c9:29:ab:ce:8a:79:6f: b0:e7:64:ac:7a:1e:9c:1e:69:36:8a:a8:63:2e:c9: 8a:d9:fe:97:e5:29:5c:2e:31:7f:25:b1:d0:71:ef: 90:2b:60:ad:58:37:ee:a4:4e:e5:63:8c:de:5e:c3: 1e:b2:4a:77:b8:6f:44:31:c4:a9:c8:66:18:2b:00: 77:75:e1:d9:6a:f9:19:8b:e6:17:7c:9b:2b:ee:e3: 32:26:a9:c3:46:47:e6:62:ff:43:bc:01:9b:38:08: cd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3C:D0:24:23:FB:C8:7F:01:A2:71:8A:B7:CB:9A:CB:64:24:6F:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb98baa-2682-37a7-bfc4-9b7540f961e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:99:36:8e:bc:62:05:31:3d:19:07:bc:e7:04:bc:cd:c3:24: 3f:75:2b:3b:b5:ab:3f:70:01:e0:c7:63:f9:08:92:f6:43:e2: 08:6c:1a:b0:a8:ce:4e:58:ce:b3:ec:a2:4b:e1:87:6e:4b:33: f1:20:9e:89:2b:63:12:d9:de:da:bb:a5:ac:09:9f:59:88:9d: 59:5a:a8:2c:59:1e:9a:c2:16:de:04:cc:bb:42:c0:d1:f9:7b: 4f:a5:1e:24:2a:f8:d5:db:25:d4:77:90:88:b7:52:5b:62:cf: 73:ce:31:f6:18:49:d1:f0:0c:e8:9f:e8:4e:03:46:c3:65:c4: 4b:ca:90:a6:a9:42:93:d1:18:9f:ed:02:b1:e4:9b:ed:5c:b4: 1b:9b:75:41:dd:03:c9:ed:f8:e6:bf:77:53:5c:63:76:22:56: 51:47:c9:b7:06:08:fa:7c:59:38:4a:20:67:8b:2c:a1:1e:7b: 24:97:6e:35:6a:c2:71:4f:be:c9:e2:68:88:05:d8:d7:e8:02: ee:ed:23:09:99:4f:ea:c0:01:46:79:72:f1:b1:4a:e6:c2:6c: f0:88:3d:58:8a:7b:f7:8b:71:9d:cd:f7:65:3e:25:d0:4e:70: 84:a6:1c:14:00:62:de:8c:c9:08:ed:15:8e:a1:a4:1e:27:ca: 7e:a9:c9:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JsTvKdx5SExd2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk YjBlYzRmMTAtNjliOC00YmY0LTk1ODgtNWY5MjA1NzZhZmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQL3rTQlVrpG+pJhDapeHKBhyhxP45MUTzYx udebcKYPrCG5M6F9TEhtKdLfEce75PZNj5vYAs+ufdASsaBKiEmpYwId+ZjUzvL4 w1KlWPNwL+0aD9V1tjfiS6ANxxEZaLa99oRDQnxR3563EW0zNEvnAl7zX1tDGfSy GrzvL+yPRZFADF/OdKTKLQ9pvcFKS9c61lZXRK4KrRXq2ckpq86KeW+w52Sseh6c Hmk2iqhjLsmK2f6X5SlcLjF/JbHQce+QK2CtWDfupE7lY4zeXsMeskp3uG9EMcSp yGYYKwB3deHZavkZi+YXfJsr7uMyJqnDRkfmYv9DvAGbOAjN+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNc80CQj+8h/AaJxirfLmstkJG9PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGZiOThiYWEtMjY4Mi0z N2E3LWJmYzQtOWI3NTQwZjk2MWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9G0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqZNo68YgUxPRkHvOcEvM3DJD91Kzu1qz9wAeDHY/kIkvZD4ghsGrCo zk5YzrPsokvhh25LM/EgnokrYxLZ3tq7pawJn1mInVlaqCxZHprCFt4EzLtCwNH5 e0+lHiQq+NXbJdR3kIi3Ultiz3POMfYYSdHwDOif6E4DRsNlxEvKkKapQpPRGJ/t ArHkm+1ctBubdUHdA8nt+Oa/d1NcY3YiVlFHybcGCPp8WThKIGeLLKEeeySXbjVq wnFPvsniaIgF2NfoAu7tIwmZT+rAAUZ5cvGxSubCbPCIPViKe/eLcZ3N92U+JdBO cISmHBQAYt6MyQjtFY6hpB4nyn6pyRI= -----END CERTIFICATE-----Generated at Sat Apr 26 18:02:03 2025 by rpki-client