$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37447f63-94cb-34ab-9932-2cfd5669ea5b.roa File: 37447f63-94cb-34ab-9932-2cfd5669ea5b.roa (raw, json) Hash identifier: 70EhBW/gqxGvTcE/xUZMnvx048auLMjXWpsQ/1Toyw0= Subject key identifier: 54:8A:5B:8E:13:F8:D9:A8:E2:69:62:31:7A:1D:30:56:F1:DF:4E:AE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF4A144E24E4480F68B7F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37447f63-94cb-34ab-9932-2cfd5669ea5b.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.213.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:a1:44:e2:4e:44:80:f6:8b:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=85ac91cc-6895-40de-bf2f-384829fab7cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:72:51:b2:6e:e5:37:7c:0d:22:70:cd:19:52: 71:cd:28:07:10:b6:08:5e:16:5c:bc:5a:57:a1:c7: 6e:b5:07:26:a4:f6:5f:94:fe:09:a0:2c:f1:bf:bc: f9:08:54:2a:0d:43:6c:e7:e9:54:e9:51:3d:16:c1: d6:8a:52:16:20:a7:b3:dc:e6:5e:8e:fc:12:5e:bc: fc:f1:79:19:2b:96:86:a5:4b:74:41:4f:19:36:5f: aa:ab:dc:93:b7:58:d9:1f:5e:4f:d5:d2:51:3b:30: 4d:ba:80:bc:5a:27:fd:cd:fa:d3:b4:dd:ef:d6:d6: c5:c1:4a:53:0e:8f:fd:d7:4c:13:69:1a:4c:ea:8d: 8a:0d:8f:48:95:7f:0d:fa:32:75:bb:65:1a:b4:67: a4:31:37:bf:7c:8b:9f:0b:fa:99:75:94:5d:96:30: f5:9b:03:75:16:e5:c5:46:c8:e0:30:91:0e:4e:43: 79:38:55:f7:65:81:05:16:e7:92:bd:ab:92:15:a1: 47:51:94:1f:78:b4:4a:63:dd:b4:50:7a:9d:bf:4c: 25:f5:21:56:dc:da:8a:6e:f8:22:9a:82:ea:7d:75: 59:8e:50:05:4e:08:06:48:df:2a:71:5a:27:0d:0d: 9a:eb:16:c6:ee:3e:a3:15:bd:2c:73:42:41:99:c0: e6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:8A:5B:8E:13:F8:D9:A8:E2:69:62:31:7A:1D:30:56:F1:DF:4E:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37447f63-94cb-34ab-9932-2cfd5669ea5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ff:5a:51:5f:4b:e3:8f:7b:a8:29:f5:57:fa:02:ba:6e:50: f4:ed:ff:8a:0a:ba:d7:12:b3:95:ed:13:b0:94:45:9a:23:b0: a7:75:d0:7b:9b:84:8d:f1:a3:0f:01:80:6d:99:8d:05:51:69: d5:65:79:b0:c4:6a:77:4a:ed:b8:c5:db:cd:48:77:32:c0:84: 07:61:c3:e2:27:76:e0:4f:e0:29:11:bd:4b:56:9e:ab:9a:90: da:ce:1d:87:7a:f9:33:ab:4f:e4:c1:66:6a:ea:f0:ed:43:75: de:37:da:b1:e2:83:9a:9b:3a:14:3d:84:46:ff:ee:7b:ce:3a: 6b:34:4f:47:15:3e:56:5d:aa:c1:5f:de:4d:d3:5f:59:8d:0f: 06:ae:d2:93:0b:e8:55:64:4f:eb:bd:bb:04:ea:dc:94:d0:5d: 8b:c0:73:30:be:41:22:b7:18:02:20:c2:ca:bf:5e:85:18:4c: ae:26:9e:e0:4a:cf:f0:ac:56:ad:b9:82:6c:b8:24:42:13:63: 18:21:de:74:fa:c6:50:0c:c2:e5:c6:ac:de:95:61:25:45:46: 0b:28:d3:d4:27:64:89:dc:fd:3c:01:0a:5c:dc:9e:90:05:f7: ec:28:20:d9:41:0b:b1:89:b3:b5:36:8f:7b:6a:c6:f5:dc:69: 29:36:2d:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9KFE4k5EgPaLfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ODVhYzkxY2MtNjg5NS00MGRlLWJmMmYtMzg0ODI5ZmFiN2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnJRsm7lN3wNInDNGVJxzSgHELYIXhZcvFpX ocdutQcmpPZflP4JoCzxv7z5CFQqDUNs5+lU6VE9FsHWilIWIKez3OZejvwSXrz8 8XkZK5aGpUt0QU8ZNl+qq9yTt1jZH15P1dJROzBNuoC8Wif9zfrTtN3v1tbFwUpT Do/910wTaRpM6o2KDY9IlX8N+jJ1u2UatGekMTe/fIufC/qZdZRdljD1mwN1FuXF RsjgMJEOTkN5OFX3ZYEFFueSvauSFaFHUZQfeLRKY920UHqdv0wl9SFW3NqKbvgi moLqfXVZjlAFTggGSN8qcVonDQ2a6xbG7j6jFb0sc0JBmcDmJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSKW44T+Nmo4mliMXodMFbx306uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzc0NDdmNjMtOTRjYi0z NGFiLTk5MzItMmNmZDU2NjllYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9XAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEn/WlFfS+OPe6gp9Vf6ArpuUPTt/4oKutcSs5XtE7CURZojsKd10Hub hI3xow8BgG2ZjQVRadVlebDEandK7bjF281IdzLAhAdhw+InduBP4CkRvUtWnqua kNrOHYd6+TOrT+TBZmrq8O1Ddd432rHig5qbOhQ9hEb/7nvOOms0T0cVPlZdqsFf 3k3TX1mNDwau0pML6FVkT+u9uwTq3JTQXYvAczC+QSK3GAIgwsq/XoUYTK4mnuBK z/CsVq25gmy4JEITYxgh3nT6xlAMwuXGrN6VYSVFRgso09QnZInc/TwBClzcnpAF 9+woINlBC7GJs7U2j3tqxvXcaSk2LQU= -----END CERTIFICATE-----Generated at Sat May 10 01:36:08 2025 by rpki-client