$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c1631b2-8192-3aa6-a0c5-7fe18a0ef5b2.roa File: 3c1631b2-8192-3aa6-a0c5-7fe18a0ef5b2.roa (raw, json) Hash identifier: UWTkKfNCIoMVvX+0b24237amX19AjdPYPOlxtJLN7k8= Subject key identifier: 27:6A:94:40:18:04:C6:70:0A:FE:ED:14:2E:8C:E7:5A:4E:45:06:C2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF436A55A308800D0D5F60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c1631b2-8192-3aa6-a0c5-7fe18a0ef5b2.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 16625 IP address blocks: 23.217.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:43:6a:55:a3:08:80:0d:0d:5f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=a78ea373-c1e5-4c5a-a44d-219db939c66d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:58:f8:3f:57:86:62:24:12:68:11:a6:aa:ff: 1d:a3:be:f2:b9:0e:e9:ae:30:34:9c:8f:30:e5:9f: e0:af:e2:ac:6f:71:a6:27:ed:32:e0:e2:c8:e2:0a: 54:32:4c:58:89:92:e9:34:27:10:fd:f2:53:a0:3d: 2f:0a:8c:28:50:8e:0d:c7:43:1a:ae:91:09:2a:fc: 68:51:9b:b5:bc:bb:5e:ae:97:b4:36:bf:e4:9b:ed: c6:b8:e1:2c:93:fc:32:57:89:75:4f:97:62:7f:4b: c8:b5:2d:01:bf:c8:12:75:d5:75:ba:51:10:0e:36: e1:cb:4b:43:7f:49:ca:7e:cf:ca:59:0a:62:16:1b: 3b:fe:0f:03:45:0f:7f:c7:bf:2c:d6:97:de:11:de: e3:99:83:84:51:aa:a2:63:18:9b:c8:8c:09:0e:72: 4e:84:9c:27:8f:cc:0f:cd:dd:1d:10:49:bb:8b:d8: cc:b9:73:ad:75:83:32:eb:14:75:f8:5e:14:4c:08: 72:1b:95:3c:83:c0:7b:8f:fa:de:fb:51:c1:4c:97: 64:97:63:9a:bc:c0:c6:fc:59:bf:df:9c:a0:44:4e: ab:21:73:94:3e:e4:a2:44:4a:6a:9c:04:bf:8c:7a: 7b:8b:aa:54:75:e0:44:9a:e6:d2:04:72:67:57:8e: 3e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6A:94:40:18:04:C6:70:0A:FE:ED:14:2E:8C:E7:5A:4E:45:06:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c1631b2-8192-3aa6-a0c5-7fe18a0ef5b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:23:a4:37:b7:25:de:f6:1c:67:fc:0b:60:6a:0c:2f:70:ff: a7:d1:40:56:d1:3b:63:9b:a6:82:22:d4:94:e8:40:ec:b6:36: 62:b6:22:50:9e:08:c0:57:68:97:58:85:1d:e6:e0:d0:63:74: fb:f1:53:7b:7b:b2:c4:cc:62:c7:0c:b3:48:6f:94:79:fc:fd: 87:5c:01:0a:9c:fd:68:12:62:a6:28:13:ae:2c:a6:65:c6:42: c5:06:fc:9c:37:9b:fc:0f:fe:6d:d8:33:8c:e0:a1:a3:ec:e5: 02:36:41:4d:7e:b5:75:63:1b:c9:93:6a:8a:b9:74:ac:73:72: 80:b9:7d:6d:43:2c:1a:68:58:73:eb:70:2f:06:4b:ed:57:2d: 63:ca:53:02:b9:48:98:ab:ba:91:2d:f4:43:f7:88:fa:f5:d1: 97:87:a8:71:68:b7:f6:72:45:37:12:09:d0:15:c2:98:77:f0: 9b:10:4b:64:08:0f:36:9c:78:04:b1:8e:e5:8a:76:1a:6a:23: c6:1e:99:d1:c7:d8:6a:be:30:14:8b:af:79:3b:2b:0a:c6:50: 91:21:9c:54:47:0a:14:2d:82:6a:48:9b:61:2b:19:b7:d8:44: 22:a3:c5:dd:28:ee:bb:da:67:f2:8b:8b:b1:5c:5c:ad:0f:d4: 9e:d5:6f:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0NqVaMIgA0NX2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk YTc4ZWEzNzMtYzFlNS00YzVhLWE0NGQtMjE5ZGI5MzljNjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Vj4P1eGYiQSaBGmqv8do77yuQ7prjA0nI8w 5Z/gr+Ksb3GmJ+0y4OLI4gpUMkxYiZLpNCcQ/fJToD0vCowoUI4Nx0MarpEJKvxo UZu1vLterpe0Nr/km+3GuOEsk/wyV4l1T5dif0vItS0Bv8gSddV1ulEQDjbhy0tD f0nKfs/KWQpiFhs7/g8DRQ9/x78s1pfeEd7jmYOEUaqiYxibyIwJDnJOhJwnj8wP zd0dEEm7i9jMuXOtdYMy6xR1+F4UTAhyG5U8g8B7j/re+1HBTJdkl2OavMDG/Fm/ 35ygRE6rIXOUPuSiREpqnAS/jHp7i6pUdeBEmubSBHJnV44+xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdqlEAYBMZwCv7tFC6M51pORQbCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2MxNjMxYjItODE5Mi0z YWE2LWEwYzUtN2ZlMThhMGVmNWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9nEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIjpDe3Jd72HGf8C2BqDC9w/6fRQFbRO2ObpoIi1JToQOy2NmK2IlCe CMBXaJdYhR3m4NBjdPvxU3t7ssTMYscMs0hvlHn8/YdcAQqc/WgSYqYoE64spmXG QsUG/Jw3m/wP/m3YM4zgoaPs5QI2QU1+tXVjG8mTaoq5dKxzcoC5fW1DLBpoWHPr cC8GS+1XLWPKUwK5SJirupEt9EP3iPr10ZeHqHFot/ZyRTcSCdAVwph38JsQS2QI DzaceASxjuWKdhpqI8YemdHH2Gq+MBSLr3k7KwrGUJEhnFRHChQtgmpIm2ErGbfY RCKjxd0o7rvaZ/KLi7FcXK0P1J7Vb3g= -----END CERTIFICATE-----Generated at Mon May 5 12:00:46 2025 by rpki-client