$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e218274-2647-375d-a10a-2f470f98df73.roa File: 2e218274-2647-375d-a10a-2f470f98df73.roa (raw, json) Hash identifier: dK5k9dHllxlUjPZXzR+SQPOZMyzOFgfmwwqLRe3uAQc= Subject key identifier: 91:61:23:96:13:A4:C1:8A:6B:58:44:AE:CF:53:35:20:25:C9:0D:57 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849A8E9EB4836435DF827EDAC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e218274-2647-375d-a10a-2f470f98df73.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 16625 IP address blocks: 23.219.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:eb:48:36:43:5d:f8:27:ed:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=84d1a58b-a00e-448f-ad0f-575b8819c3af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3d:8b:56:79:45:bc:ce:a8:50:c1:71:2a:88: d0:19:46:a0:4c:d0:7a:40:8f:53:af:26:08:75:cf: 44:a5:1b:78:d1:ea:4d:8c:91:cd:01:c1:9c:98:31: fe:f1:a8:46:e9:7f:e7:29:40:2e:03:d7:a8:e4:2b: e3:5a:d9:42:e4:52:a4:d5:8a:c8:9e:7c:f7:8f:fc: 2d:c0:d4:3a:55:f5:6c:85:43:b6:e5:56:e6:6c:eb: 45:bf:db:3b:d1:dd:78:18:02:bb:f7:bc:99:7c:0f: ad:ef:55:10:86:7f:e5:54:56:00:c3:74:db:cc:d0: 1e:b7:3f:b8:4d:62:61:f6:0b:aa:9d:fd:82:30:e8: 6d:9a:68:03:96:16:21:ef:54:aa:08:e3:bc:38:12: 98:66:ee:c4:6a:e9:4d:ba:ab:48:f5:98:e5:7a:61: 23:83:c0:8a:0f:d4:e6:5a:b9:8e:d3:59:df:c4:ff: 79:f8:e4:8e:82:25:a9:40:93:8f:4d:7d:01:da:9d: 51:76:6f:6b:82:ce:d4:9e:46:ce:66:52:90:e7:15: 45:ff:90:8c:ec:13:88:ec:8a:6b:14:bf:11:ae:67: 25:14:14:96:29:f8:d3:f4:62:59:be:70:6e:c2:a4: 1d:89:44:03:71:42:0d:c8:ac:06:8d:f3:b7:a1:e7: f7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:61:23:96:13:A4:C1:8A:6B:58:44:AE:CF:53:35:20:25:C9:0D:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e218274-2647-375d-a10a-2f470f98df73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:7f:17:b4:ca:17:7e:2f:6f:92:30:f3:3e:66:a1:9a:cc:32: 9a:9a:96:ea:7c:c2:23:2a:0f:ad:87:c3:3b:9b:42:8a:e7:58: 40:b6:1c:6f:66:87:d7:bf:86:79:d6:ad:00:bb:fb:a0:b1:6b: e2:d9:a8:35:39:7c:c8:a8:f0:b0:62:1f:8f:68:62:67:39:b3: 1d:a9:c0:35:02:d2:05:7e:76:06:3f:9e:28:c5:23:fa:5d:ed: 08:48:e5:53:df:25:8e:b5:f5:bf:9a:54:6e:e0:26:e7:54:9e: 20:11:81:81:12:70:b3:fa:9f:e5:34:b3:ee:93:aa:71:cc:e4: 59:88:d2:da:8d:96:22:d2:8c:d8:00:bd:d6:2b:7b:a1:9a:0b: b0:c6:64:7f:a3:5f:26:9c:35:e5:3e:85:f8:c8:69:98:20:cd: 79:a4:ec:b1:32:b3:ae:95:28:ab:fb:50:fa:07:2e:98:61:07: 3f:81:e7:20:1d:dd:62:4f:8d:23:c2:9f:42:f4:5c:a2:6e:2d: a1:af:55:67:18:f6:02:a6:65:14:44:bf:4f:ba:3a:20:50:94: 63:0c:b3:21:15:0b:cc:4f:c2:0d:60:b6:c0:61:93:5f:23:69: 2d:83:4f:ec:93:49:b4:66:ab:13:2d:6d:4e:a6:97:f3:4e:ee: a8:24:88:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6etINkNd+CftrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk ODRkMWE1OGItYTAwZS00NDhmLWFkMGYtNTc1Yjg4MTljM2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD2LVnlFvM6oUMFxKojQGUagTNB6QI9TryYI dc9EpRt40epNjJHNAcGcmDH+8ahG6X/nKUAuA9eo5CvjWtlC5FKk1YrInnz3j/wt wNQ6VfVshUO25VbmbOtFv9s70d14GAK797yZfA+t71UQhn/lVFYAw3TbzNAetz+4 TWJh9guqnf2CMOhtmmgDlhYh71SqCOO8OBKYZu7EaulNuqtI9ZjlemEjg8CKD9Tm WrmO01nfxP95+OSOgiWpQJOPTX0B2p1Rdm9rgs7UnkbOZlKQ5xVF/5CM7BOI7Ipr FL8RrmclFBSWKfjT9GJZvnBuwqQdiUQDcUINyKwGjfO3oef3ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFhI5YTpMGKa1hErs9TNSAlyQ1XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmUyMTgyNzQtMjY0Ny0z NzVkLWExMGEtMmY0NzBmOThkZjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9sgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9/F7TKF34vb5Iw8z5moZrMMpqalup8wiMqD62HwzubQornWEC2HG9m h9e/hnnWrQC7+6Cxa+LZqDU5fMio8LBiH49oYmc5sx2pwDUC0gV+dgY/nijFI/pd 7QhI5VPfJY619b+aVG7gJudUniARgYEScLP6n+U0s+6TqnHM5FmI0tqNliLSjNgA vdYre6GaC7DGZH+jXyacNeU+hfjIaZggzXmk7LEys66VKKv7UPoHLphhBz+B5yAd 3WJPjSPCn0L0XKJuLaGvVWcY9gKmZRREv0+6OiBQlGMMsyEVC8xPwg1gtsBhk18j aS2DT+yTSbRmqxMtbU6ml/NO7qgkiJA= -----END CERTIFICATE-----Generated at Thu May 8 07:39:22 2025 by rpki-client