$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fddc08b9-f80c-3325-b173-4d9f5ec0234a.roa File: fddc08b9-f80c-3325-b173-4d9f5ec0234a.roa (raw, json) Hash identifier: rURLMoHCW/ZLek+DHKA+vfifiwYByk1hNlnNSmsWfKM= Subject key identifier: 7D:7B:1F:FD:AA:9E:14:34:8C:F7:FC:CA:D9:22:8D:46:4F:4E:10:7C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829D7999F2FBBB593A01700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fddc08b9-f80c-3325-b173-4d9f5ec0234a.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 25019 IP address blocks: 23.204.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d7:99:9f:2f:bb:b5:93:a0:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=13438aeb-96ae-4a83-a6a2-771c5ed474a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6c:8b:fe:dd:99:88:4e:3a:fc:e0:be:a1:5e: 1d:9d:a9:a4:98:9e:8a:70:99:74:c1:06:6d:d6:98: 00:a7:5a:e3:ef:46:92:4d:15:b6:e5:c4:25:22:f6: 30:95:42:99:ba:b4:17:d9:52:0a:01:a2:1f:e1:34: fb:67:aa:77:4c:a6:d7:10:6a:b8:74:6c:a6:68:ff: a6:11:55:00:f0:b0:64:48:5d:90:e9:59:43:e1:0c: 25:ab:25:8f:ff:97:e2:b5:a9:5b:be:ab:71:3c:c7: 01:c9:84:d6:f2:1f:f2:dd:bc:7e:5c:a4:d9:50:59: d9:46:f8:66:a0:1b:8d:98:1a:36:05:7a:ba:bf:bf: e9:c5:5d:dc:b4:3a:02:ef:05:4f:f6:a5:ca:58:f9: f3:30:51:c7:41:2e:ee:5a:bf:8a:0a:8d:76:95:c8: e5:b8:98:47:43:16:83:29:c7:b6:b7:cc:c5:0d:62: 5d:0f:78:23:97:46:57:fc:92:c2:8f:ee:8e:1d:bf: 48:03:35:b1:7c:78:a7:86:22:b5:53:1d:60:11:c8: 49:2c:cb:45:4e:f5:14:9d:6d:a9:3b:6e:72:0b:f6: be:d2:d7:38:61:f7:f1:5c:11:bc:08:25:bb:7b:83: 64:80:a0:47:2b:db:bd:10:5f:59:08:60:9f:43:4b: 5f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7B:1F:FD:AA:9E:14:34:8C:F7:FC:CA:D9:22:8D:46:4F:4E:10:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fddc08b9-f80c-3325-b173-4d9f5ec0234a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:0c:49:55:57:0b:d1:09:28:94:17:07:c9:f4:73:21:7c:e1: d8:3b:18:29:79:75:c7:4b:61:be:f3:a3:13:fb:71:92:57:39: f7:37:f2:2d:cd:50:e4:40:99:28:e2:7c:0f:74:12:c4:cb:9e: 19:cc:ff:44:68:95:39:b4:50:c1:fc:87:96:99:7d:50:37:4f: e7:7c:0b:49:0c:81:bb:18:b9:bb:0f:29:c2:96:e8:84:87:c7: cc:81:a6:3b:d0:6b:d9:3d:82:9d:ee:91:86:fb:7b:c1:b2:ee: 8b:ec:ff:b4:7b:2d:ec:c8:33:82:eb:db:e8:2f:39:12:d3:e5: 73:1e:cb:88:6c:47:9f:d3:b5:8c:68:38:1c:1b:d9:e0:04:20: 1d:87:8c:75:14:d3:e3:51:97:60:8a:a0:50:af:ff:99:4e:99: ff:71:5d:c1:ac:80:1c:ef:35:ef:62:b0:1f:47:f3:e0:de:2a: 09:c2:5f:ea:0c:d2:3e:e7:30:5c:20:c2:82:4d:bb:8c:ce:d7: d1:a4:0b:42:29:fc:89:38:38:60:62:cc:e2:0b:6a:54:d8:d9: af:7f:3b:21:7a:de:ac:b0:da:8d:b9:08:4b:f9:8a:03:0a:92: 08:66:0a:57:d2:3d:65:de:99:d8:e4:d3:58:41:76:5d:a9:aa: 3e:98:fb:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdeZny+7tZOgFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MTM0MzhhZWItOTZhZS00YTgzLWE2YTItNzcxYzVlZDQ3NGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGyL/t2ZiE46/OC+oV4dnamkmJ6KcJl0wQZt 1pgAp1rj70aSTRW25cQlIvYwlUKZurQX2VIKAaIf4TT7Z6p3TKbXEGq4dGymaP+m EVUA8LBkSF2Q6VlD4QwlqyWP/5fitalbvqtxPMcByYTW8h/y3bx+XKTZUFnZRvhm oBuNmBo2BXq6v7/pxV3ctDoC7wVP9qXKWPnzMFHHQS7uWr+KCo12lcjluJhHQxaD Kce2t8zFDWJdD3gjl0ZX/JLCj+6OHb9IAzWxfHinhiK1Ux1gEchJLMtFTvUUnW2p O25yC/a+0tc4YffxXBG8CCW7e4NkgKBHK9u9EF9ZCGCfQ0tfXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH17H/2qnhQ0jPf8ytkijUZPThB8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmRkYzA4YjktZjgwYy0z MzI1LWIxNzMtNGQ5ZjVlYzAyMzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8xSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkMSVVXC9EJKJQXB8n0cyF84dg7GCl5dcdLYb7zoxP7cZJXOfc38i3N UORAmSjifA90EsTLnhnM/0RolTm0UMH8h5aZfVA3T+d8C0kMgbsYubsPKcKW6ISH x8yBpjvQa9k9gp3ukYb7e8Gy7ovs/7R7LezIM4Lr2+gvORLT5XMey4hsR5/TtYxo OBwb2eAEIB2HjHUU0+NRl2CKoFCv/5lOmf9xXcGsgBzvNe9isB9H8+DeKgnCX+oM 0j7nMFwgwoJNu4zO19GkC0Ip/Ik4OGBizOILalTY2a9/OyF63qyw2o25CEv5igMK kghmClfSPWXemdjk01hBdl2pqj6Y+04= -----END CERTIFICATE-----Generated at Mon Apr 28 12:32:29 2025 by rpki-client