$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f30cffa2-743d-3789-b438-bd066e10994d.roa File: f30cffa2-743d-3789-b438-bd066e10994d.roa (raw, json) Hash identifier: 3e+9hk41DiE7vIJAzbJ26Zbc6PZ4hIJwwz9mYAlSHAE= Subject key identifier: 37:C4:90:6B:7C:19:C4:F3:20:4A:F6:CF:E9:08:8A:EB:CE:EA:A2:76 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF4A0EB69171185496B4480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f30cffa2-743d-3789-b438-bd066e10994d.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.213.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:a0:eb:69:17:11:85:49:6b:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=7bf273d9-6a64-433e-8430-98d0fee6ee44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:98:84:7c:44:40:45:7c:9f:48:d0:c8:2f:b2: 51:2e:25:50:2f:77:c9:c8:3a:20:8d:8f:30:e9:b4: 49:78:ca:75:e0:e1:47:aa:3f:40:c1:af:09:68:3f: 80:d2:e1:d3:27:ed:1d:ee:c1:0e:55:98:2c:0b:1d: ad:ab:96:1e:9d:50:fb:22:8c:f4:8b:e9:49:dc:03: ce:8f:dd:28:74:61:78:0b:57:35:5a:82:18:26:52: 07:67:2e:b0:93:ef:fd:bd:5f:26:d8:65:06:58:48: 82:24:92:9d:40:c7:49:7b:b9:c2:b3:d7:51:ba:96: e2:42:1d:8e:f7:8c:00:e4:26:b5:f2:33:68:59:17: 04:fe:7c:bc:99:60:8c:53:94:30:8e:46:95:a0:94: d6:c5:b9:1b:5a:11:39:1f:e2:74:5b:90:4a:f0:b3: fe:a6:1f:ee:35:b3:05:55:09:8e:82:fe:2b:5e:d9: 55:03:a4:94:db:27:6f:1e:d3:9e:a9:35:d8:d7:94: fa:24:50:f7:85:36:ea:6d:cf:95:e4:41:99:0b:a5: 42:8f:f9:2e:ed:5e:60:9c:da:19:a2:e3:39:b6:c0: fb:83:93:dc:a0:d8:3e:ce:46:22:cb:d8:37:25:79: 08:42:43:87:a0:71:dc:44:00:87:65:92:ec:f6:ea: a9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C4:90:6B:7C:19:C4:F3:20:4A:F6:CF:E9:08:8A:EB:CE:EA:A2:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f30cffa2-743d-3789-b438-bd066e10994d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:40:c6:59:e3:1a:fb:86:b7:ab:e2:a5:34:8f:c2:fa:ee:33: 83:bf:21:3d:c1:e0:ad:4b:02:d5:5b:97:f2:4a:23:44:9b:ff: 43:03:1d:52:87:83:20:7c:0d:18:5e:9e:91:c8:d6:0e:57:ea: 62:73:41:48:d9:ef:4e:26:c3:ea:25:fc:f8:88:e3:5e:c9:4b: 4a:35:30:ea:f2:b1:3a:4f:35:05:79:b4:bd:26:9a:27:e5:48: 2b:98:d4:de:a7:36:30:20:59:ce:c5:08:d0:e5:0a:aa:83:e3: 6a:b0:f2:0b:f2:89:82:e7:4f:e6:6e:20:36:b7:a6:91:44:f0: a3:be:d0:f8:78:ef:9e:37:af:ee:62:24:4d:bb:fc:a7:7d:52: 60:90:7a:f7:8f:4c:2f:5a:37:d5:f6:0a:34:0c:3a:b5:51:98: f9:3a:61:ed:b6:30:bb:dd:56:de:65:1c:9b:ae:90:bc:ee:96: 79:9d:f2:90:e8:c8:46:a4:26:4a:de:07:c9:b8:10:14:c0:06: 87:71:50:f1:58:79:94:1a:7f:5d:65:b4:60:ec:ae:dc:0f:65: ef:78:e0:74:e2:16:dc:cf:45:76:6f:eb:17:79:61:97:a3:1a: d1:ad:41:c8:7a:86:76:69:d3:25:5e:5b:87:6d:6b:e7:6c:44: 42:89:ab:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9KDraRcRhUlrRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk N2JmMjczZDktNmE2NC00MzNlLTg0MzAtOThkMGZlZTZlZTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJiEfERARXyfSNDIL7JRLiVQL3fJyDogjY8w 6bRJeMp14OFHqj9Awa8JaD+A0uHTJ+0d7sEOVZgsCx2tq5YenVD7Ioz0i+lJ3APO j90odGF4C1c1WoIYJlIHZy6wk+/9vV8m2GUGWEiCJJKdQMdJe7nCs9dRupbiQh2O 94wA5Ca18jNoWRcE/ny8mWCMU5QwjkaVoJTWxbkbWhE5H+J0W5BK8LP+ph/uNbMF VQmOgv4rXtlVA6SU2ydvHtOeqTXY15T6JFD3hTbqbc+V5EGZC6VCj/ku7V5gnNoZ ouM5tsD7g5PcoNg+zkYiy9g3JXkIQkOHoHHcRACHZZLs9uqpowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfEkGt8GcTzIEr2z+kIiuvO6qJ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjMwY2ZmYTItNzQzZC0z Nzg5LWI0MzgtYmQwNjZlMTA5OTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9WQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdAxlnjGvuGt6vipTSPwvruM4O/IT3B4K1LAtVbl/JKI0Sb/0MDHVKH gyB8DRhenpHI1g5X6mJzQUjZ704mw+ol/PiI417JS0o1MOrysTpPNQV5tL0mmifl SCuY1N6nNjAgWc7FCNDlCqqD42qw8gvyiYLnT+ZuIDa3ppFE8KO+0Ph47543r+5i JE27/Kd9UmCQevePTC9aN9X2CjQMOrVRmPk6Ye22MLvdVt5lHJuukLzulnmd8pDo yEakJkreB8m4EBTABodxUPFYeZQaf11ltGDsrtwPZe944HTiFtzPRXZv6xd5YZej GtGtQch6hnZp0yVeW4dta+dsREKJqww= -----END CERTIFICATE-----Generated at Sun Apr 27 00:11:21 2025 by rpki-client