$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9a333dd-c2f0-3913-9fd1-23d2e9d37b4d.roa File: f9a333dd-c2f0-3913-9fd1-23d2e9d37b4d.roa (raw, json) Hash identifier: +YIMDdhAsQ8y2H7kQLtUFpxGH3UvVgSK8A2YMgi4t3c= Subject key identifier: 6C:DF:69:81:B6:31:B5:DB:3A:01:3F:6A:3E:18:97:F0:AF:35:14:74 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849998F42C94B4950DD003F3000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9a333dd-c2f0-3913-9fd1-23d2e9d37b4d.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 16625 IP address blocks: 23.208.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:42:c9:4b:49:50:dd:00:3f:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=1de8c2e5-3b9d-4887-ad2c-cbe3dc44e128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bc:55:5f:22:fa:2e:c3:9d:67:c8:e9:0b:3f: bb:4f:5d:9e:67:f0:6a:99:15:2b:63:9d:23:16:aa: 43:12:16:ff:73:45:e9:a1:2c:4b:14:c4:45:3f:cb: 01:3c:ef:c2:68:18:9f:db:fc:f8:23:3d:2b:0c:e1: ed:9a:99:20:e5:d9:56:61:fc:96:b3:16:71:d7:39: 1e:fe:8b:17:52:ca:c5:59:f4:23:cd:11:42:eb:21: f0:55:ed:ea:66:ab:f6:a6:45:43:b1:48:0b:ed:11: 3c:ee:28:3b:e1:6c:b8:aa:cc:58:7f:96:03:d8:e8: 92:e3:79:6c:0e:5c:df:0a:77:81:10:ee:74:1f:0f: 63:c6:fb:a7:a2:16:a9:d0:7f:12:fc:d6:36:87:61: b7:87:9f:93:c3:4f:85:2a:3a:6d:21:db:6d:c1:e1: e9:2e:ab:65:4c:92:e4:37:45:dd:91:67:79:e4:a8: 04:bb:4a:19:3e:54:02:46:67:46:c8:c6:8e:ef:f1: fc:dc:8f:0b:33:95:21:6d:57:09:a8:31:e4:ab:d4: 37:98:ab:36:f6:b2:d0:d6:ae:c1:f0:02:65:d3:7d: be:01:e0:4b:7f:1c:38:5f:65:15:95:63:49:7b:35: 2a:dc:ff:a4:2e:7b:cc:7f:ea:50:b3:c2:1e:54:c0: be:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DF:69:81:B6:31:B5:DB:3A:01:3F:6A:3E:18:97:F0:AF:35:14:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9a333dd-c2f0-3913-9fd1-23d2e9d37b4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:81:1c:1c:a4:e5:7b:74:1f:1a:b3:ff:d4:07:59:6d:38:3f: 77:e0:d4:b7:6b:2c:76:9c:a5:76:2a:5f:52:41:32:27:7e:2b: 4c:f6:05:3e:2b:09:0c:86:14:a2:97:69:19:3c:0c:d2:50:41: 36:8c:66:54:be:74:90:b0:53:25:b5:f8:0d:e0:df:d5:ca:66: 25:02:79:83:86:33:58:01:7b:cc:9c:91:29:6d:b1:eb:ec:ff: 6c:b0:d0:4a:b4:27:98:ec:eb:5d:9c:0a:04:81:d7:ae:63:b1: b5:3e:62:7e:87:e1:13:48:10:36:9e:97:dd:38:2b:b7:0e:ef: 77:39:f9:81:7c:0f:05:b0:c2:5f:91:55:3f:d8:5d:4c:ed:f1: 5a:d3:dd:cf:e4:eb:51:45:69:16:ab:f0:0f:b4:80:4d:b9:f2: e8:00:e9:5d:fd:2a:fe:c4:6e:36:8e:f2:74:9d:3e:e7:37:97: 67:9f:11:1c:26:c6:6e:d1:ec:4c:3b:5c:67:b1:5c:48:26:8c: 2c:93:1a:17:44:f0:bd:1c:87:a4:70:00:52:da:48:75:e8:47: 17:af:3f:5b:04:63:fe:8b:8f:e8:88:0a:6a:51:a7:23:d2:2e: c6:8d:e2:ea:52:61:58:f2:15:94:bb:12:fc:04:a2:0a:9f:e1: 89:6e:c3:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZj0LJS0lQ3QA/MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk MWRlOGMyZTUtM2I5ZC00ODg3LWFkMmMtY2JlM2RjNDRlMTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorxVXyL6LsOdZ8jpCz+7T12eZ/BqmRUrY50j FqpDEhb/c0XpoSxLFMRFP8sBPO/CaBif2/z4Iz0rDOHtmpkg5dlWYfyWsxZx1zke /osXUsrFWfQjzRFC6yHwVe3qZqv2pkVDsUgL7RE87ig74Wy4qsxYf5YD2OiS43ls DlzfCneBEO50Hw9jxvunohap0H8S/NY2h2G3h5+Tw0+FKjptIdttweHpLqtlTJLk N0XdkWd55KgEu0oZPlQCRmdGyMaO7/H83I8LM5UhbVcJqDHkq9Q3mKs29rLQ1q7B 8AJl032+AeBLfxw4X2UVlWNJezUq3P+kLnvMf+pQs8IeVMC+nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzfaYG2MbXbOgE/aj4Yl/CvNRR0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjlhMzMzZGQtYzJmMC0z OTEzLTlmZDEtMjNkMmU5ZDM3YjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9BoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOBHByk5Xt0Hxqz/9QHWW04P3fg1LdrLHacpXYqX1JBMid+K0z2BT4r CQyGFKKXaRk8DNJQQTaMZlS+dJCwUyW1+A3g39XKZiUCeYOGM1gBe8yckSltsevs /2yw0Eq0J5js612cCgSB165jsbU+Yn6H4RNIEDael904K7cO73c5+YF8DwWwwl+R VT/YXUzt8VrT3c/k61FFaRar8A+0gE258ugA6V39Kv7EbjaO8nSdPuc3l2efERwm xm7R7Ew7XGexXEgmjCyTGhdE8L0ch6RwAFLaSHXoRxevP1sEY/6Lj+iICmpRpyPS LsaN4upSYVjyFZS7EvwEogqf4Yluw0o= -----END CERTIFICATE-----Generated at Sun Apr 27 09:15:53 2025 by rpki-client