$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f61e21cc-7889-3df1-a7c2-dda770336f0e.roa File: f61e21cc-7889-3df1-a7c2-dda770336f0e.roa (raw, json) Hash identifier: j+DAYf/TFXvNdhiy1/SI7OHmrNP2FLUyDyJ8xAiQv9I= Subject key identifier: 5A:AA:2F:AD:C4:6C:B8:30:71:32:DA:2E:31:63:6C:A1:C2:03:02:F6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829DE3C01058922A706DA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f61e21cc-7889-3df1-a7c2-dda770336f0e.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.207.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:de:3c:01:05:89:22:a7:06:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=508b33fe-7be1-4f9a-a163-23db1d9b84ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3f:57:2f:7b:b6:59:dd:8c:e9:31:56:97:45: 5d:87:79:9c:06:fc:5e:2f:90:db:92:91:29:48:37: 0d:69:53:6f:fe:75:5d:cf:7d:af:65:83:e0:2f:7e: 14:69:f3:07:d6:5f:d7:59:c8:52:0a:8d:a4:64:b1: 76:1a:ef:e4:e5:31:58:be:07:ed:89:36:42:ad:c3: 72:df:90:25:13:ef:40:ce:3a:c0:58:9a:69:13:bb: 74:de:29:e2:49:e5:91:40:63:7a:76:58:2c:c2:9d: b4:67:f0:8a:0e:b7:3e:2c:88:be:70:6a:8a:50:56: ad:76:9f:5c:57:4d:a8:72:52:14:44:ce:50:41:2d: ef:c4:4f:f1:d2:ae:6c:57:fe:86:f4:b6:3c:48:d5: f2:9f:bc:a9:4d:d5:1c:1a:74:0a:4e:99:12:9e:89: 3a:c4:0d:84:de:7a:19:53:bb:8f:91:2c:b3:4d:22: 67:3f:43:56:81:dd:fb:17:a9:63:dc:f1:9f:6e:5b: 02:dd:7b:74:96:7a:a9:d0:8e:67:b0:ba:97:97:c9: a3:99:aa:d1:15:62:ac:b3:74:cd:78:e1:52:c1:d7: 83:41:c3:22:6a:0d:19:9f:c9:44:8d:f0:e3:02:cf: fc:33:f9:cf:d0:f3:5d:c0:78:e8:13:ca:33:06:ca: fa:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AA:2F:AD:C4:6C:B8:30:71:32:DA:2E:31:63:6C:A1:C2:03:02:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f61e21cc-7889-3df1-a7c2-dda770336f0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:29:33:d6:03:d2:32:85:9c:79:a0:98:a6:3a:e5:dc:ef:71: b8:07:15:16:d5:f6:95:65:da:42:02:1f:07:ab:15:c2:25:78: 22:f5:73:50:ba:57:78:48:89:83:17:72:42:3e:2b:c3:71:5c: 96:eb:55:32:c1:df:9f:e0:f7:6f:9a:c9:f2:43:c5:39:99:5e: 21:24:fb:82:79:a6:b7:74:03:92:5c:87:96:67:07:f2:8d:89: 95:37:f8:fb:ce:91:b9:44:ad:b2:25:a8:06:f2:74:49:29:e4: e7:e2:da:9d:30:43:c7:76:3f:ed:67:6d:bb:17:36:77:f5:3f: e7:b6:c5:cc:85:c2:c9:e4:10:9a:89:41:e8:d4:44:1b:ce:f8: fa:b6:93:38:ed:1f:16:96:ba:d5:15:32:13:9c:43:f8:68:2f: ed:35:f5:89:87:71:7f:b0:d0:57:c0:ab:a4:d6:89:f1:19:78: c7:72:72:f1:72:db:11:93:f8:3b:42:cf:e1:38:4f:bd:f8:63: c9:53:9d:b5:ba:be:ad:db:d6:00:ef:11:77:24:9d:36:36:56: ee:77:60:f7:b7:8a:b9:05:68:56:16:28:1f:f4:0d:2e:f1:ec: ba:c3:4b:ef:7c:e0:31:34:b6:bd:79:19:d5:76:50:a5:0e:81: b0:c2:b8:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKd48AQWJIqcG2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NTA4YjMzZmUtN2JlMS00ZjlhLWExNjMtMjNkYjFkOWI4NGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz9XL3u2Wd2M6TFWl0Vdh3mcBvxeL5DbkpEp SDcNaVNv/nVdz32vZYPgL34UafMH1l/XWchSCo2kZLF2Gu/k5TFYvgftiTZCrcNy 35AlE+9AzjrAWJppE7t03iniSeWRQGN6dlgswp20Z/CKDrc+LIi+cGqKUFatdp9c V02oclIURM5QQS3vxE/x0q5sV/6G9LY8SNXyn7ypTdUcGnQKTpkSnok6xA2E3noZ U7uPkSyzTSJnP0NWgd37F6lj3PGfblsC3Xt0lnqp0I5nsLqXl8mjmarRFWKss3TN eOFSwdeDQcMiag0Zn8lEjfDjAs/8M/nP0PNdwHjoE8ozBsr6tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqqL63EbLgwcTLaLjFjbKHCAwL2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjYxZTIxY2MtNzg4OS0z ZGYxLWE3YzItZGRhNzcwMzM2ZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMpM9YD0jKFnHmgmKY65dzvcbgHFRbV9pVl2kICHwerFcIleCL1c1C6 V3hIiYMXckI+K8NxXJbrVTLB35/g92+ayfJDxTmZXiEk+4J5prd0A5Jch5ZnB/KN iZU3+PvOkblErbIlqAbydEkp5Ofi2p0wQ8d2P+1nbbsXNnf1P+e2xcyFwsnkEJqJ QejURBvO+Pq2kzjtHxaWutUVMhOcQ/hoL+019YmHcX+w0FfAq6TWifEZeMdycvFy 2xGT+DtCz+E4T734Y8lTnbW6vq3b1gDvEXcknTY2Vu53YPe3irkFaFYWKB/0DS7x 7LrDS+984DE0tr15GdV2UKUOgbDCuEg= -----END CERTIFICATE-----Generated at Sat Apr 26 18:37:18 2025 by rpki-client