$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fbc8496d-a844-382a-b322-5f1e1ca4f315.roa File: fbc8496d-a844-382a-b322-5f1e1ca4f315.roa (raw, json) Hash identifier: w5HujCy/svWfeVjEZ9Dr+oeiOiuHsOz+dA8uDdJcayE= Subject key identifier: DD:D9:DB:BA:F7:00:2B:F8:08:7D:A0:D9:CE:69:A0:DC:30:B7:9F:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF49CAD0E23BF6611679780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fbc8496d-a844-382a-b322-5f1e1ca4f315.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.211.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:9c:ad:0e:23:bf:66:11:67:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=08c86fff-7122-4c57-843c-3d9d766745ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:62:5d:09:bd:9c:1a:4f:c4:33:a1:c1:d3:7a: a1:27:7e:2d:30:c8:8f:07:27:ed:24:18:4c:c3:5a: 76:30:c8:78:9b:a2:60:90:ef:0b:5f:78:5b:d7:60: 91:f5:54:eb:c9:b2:36:e8:95:63:a2:c9:4f:0a:a1: 60:c3:94:07:d4:57:3d:79:f5:f3:34:5d:ff:55:65: 12:75:a6:3f:77:9f:f2:04:2f:45:e2:c7:b2:f4:fb: 5a:97:3b:f5:bb:93:c0:ce:74:75:ce:3d:c1:6c:1a: af:40:62:06:37:1d:ca:13:73:a7:22:7f:e3:9d:f5: 41:b0:f3:d5:9d:44:b0:c1:2e:cc:90:a0:96:0c:48: eb:83:0d:77:49:32:c3:10:f1:99:6c:dd:37:b1:ac: 36:4c:cb:ab:c4:1b:dc:75:a4:03:90:db:36:f2:7e: 5a:1a:28:1d:58:e6:46:cb:80:52:d9:a4:f3:a3:17: 45:4c:f0:db:6e:09:14:a6:91:f4:67:d7:1c:96:33: 52:66:93:99:b4:b2:48:a4:45:5e:11:4e:73:c4:10: be:c4:60:18:f0:9a:11:48:32:7d:85:5d:fe:c6:8c: 9c:c3:77:84:ab:d0:26:0a:d8:56:81:b8:cc:4c:2b: 5a:d7:92:27:ba:42:6e:bb:99:1f:a0:4d:1e:26:36: d8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D9:DB:BA:F7:00:2B:F8:08:7D:A0:D9:CE:69:A0:DC:30:B7:9F:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fbc8496d-a844-382a-b322-5f1e1ca4f315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:a2:71:28:60:73:bf:4c:0c:35:92:05:87:82:e0:04:a2:66: af:b8:20:f9:bf:2a:9d:d5:90:2f:e0:00:74:6a:03:ac:a6:61: fa:72:9f:90:24:7b:3e:87:c1:cb:03:19:1a:f7:ea:3e:68:42: 5a:4a:4e:c1:7f:bc:b3:fd:4b:92:2c:5b:71:fc:20:e6:9b:6a: e8:9e:f9:ee:1e:97:af:00:85:f2:9a:83:3e:2c:15:b4:b8:2d: cd:99:3a:32:28:5f:50:97:8c:25:6b:d1:84:53:0c:7f:75:58: b2:ed:a0:37:40:a3:da:a2:06:5d:c0:5e:31:df:88:bf:0d:d8: 42:45:14:8f:12:31:4b:e1:03:8a:87:d3:fc:44:8f:a7:e7:4a: 4c:a7:90:5b:48:44:ed:69:20:82:06:e4:c8:21:a9:a8:5d:a0: 16:e8:13:bb:b3:90:29:bb:29:c4:9a:2f:f6:45:78:88:12:48: ca:be:35:c3:f3:21:8c:fb:f3:bc:ca:0d:24:d8:ac:04:e3:37: a7:98:0c:54:41:5a:c3:c5:0c:e5:bc:28:35:f9:4f:36:8b:a2: 0e:91:89:bb:cb:4a:2a:f9:7d:15:1b:6d:7e:4a:78:f0:54:34: 70:6a:af:a2:57:1c:a2:e9:48:83:90:6f:46:95:d8:c7:97:ef: ff:89:6a:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JytDiO/ZhFnl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MDhjODZmZmYtNzEyMi00YzU3LTg0M2MtM2Q5ZDc2Njc0NWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWJdCb2cGk/EM6HB03qhJ34tMMiPByftJBhM w1p2MMh4m6JgkO8LX3hb12CR9VTrybI26JVjoslPCqFgw5QH1Fc9efXzNF3/VWUS daY/d5/yBC9F4sey9Ptalzv1u5PAznR1zj3BbBqvQGIGNx3KE3OnIn/jnfVBsPPV nUSwwS7MkKCWDEjrgw13STLDEPGZbN03saw2TMurxBvcdaQDkNs28n5aGigdWOZG y4BS2aTzoxdFTPDbbgkUppH0Z9ccljNSZpOZtLJIpEVeEU5zxBC+xGAY8JoRSDJ9 hV3+xoycw3eEq9AmCthWgbjMTCta15InukJuu5kfoE0eJjbYAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3Z27r3ACv4CH2g2c5poNwwt58zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmJjODQ5NmQtYTg0NC0z ODJhLWIzMjItNWYxZTFjYTRmMzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9M8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWicShgc79MDDWSBYeC4ASiZq+4IPm/Kp3VkC/gAHRqA6ymYfpyn5Ak ez6HwcsDGRr36j5oQlpKTsF/vLP9S5IsW3H8IOabauie+e4el68AhfKagz4sFbS4 Lc2ZOjIoX1CXjCVr0YRTDH91WLLtoDdAo9qiBl3AXjHfiL8N2EJFFI8SMUvhA4qH 0/xEj6fnSkynkFtIRO1pIIIG5MghqahdoBboE7uzkCm7KcSaL/ZFeIgSSMq+NcPz IYz787zKDSTYrATjN6eYDFRBWsPFDOW8KDX5TzaLog6RibvLSir5fRUbbX5KePBU NHBqr6JXHKLpSIOQb0aV2MeX7/+Jao8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:13:45 2025 by rpki-client