$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ebdddf1-beef-3369-b8f1-91143ce1fabd.roa File: 3ebdddf1-beef-3369-b8f1-91143ce1fabd.roa (raw, json) Hash identifier: kDhUNYpfHWGehJQSaD8SpRHRbMzO70bOKnx2PGUmboY= Subject key identifier: F7:82:C8:95:29:37:26:72:AE:7E:DC:F1:84:B2:C6:9A:CF:BE:AB:53 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E6B5852AB2181ACC6980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ebdddf1-beef-3369-b8f1-91143ce1fabd.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.207.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e6:b5:85:2a:b2:18:1a:cc:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=a8d918df-7866-4d12-9269-6061a7cd8651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7c:8b:39:cf:ce:77:61:5b:1f:11:0c:1e:b9: 7c:1d:c3:ae:6a:7a:08:14:23:d8:0b:5f:fd:ab:e7: 98:a2:1d:3a:14:fe:f0:9a:3b:35:99:cc:0b:04:59: 34:e6:a9:27:aa:21:df:cf:43:b6:a6:5e:63:57:55: a6:92:bf:dd:d9:2e:22:12:36:a2:af:ae:ec:64:6e: 4f:a4:30:f4:d8:8b:d0:6d:dc:92:70:a4:a2:ee:01: ea:79:f0:49:e9:50:3b:c6:fb:9e:a0:dc:e5:a4:8c: 16:cf:37:68:4f:f3:a6:61:4c:5f:4f:aa:7e:8a:e4: dd:4e:15:d4:f0:4c:a4:c3:02:cd:6a:db:41:96:e8: d9:95:58:0c:9f:0e:60:1c:17:bb:2c:45:6b:2e:a6: 6d:09:04:11:b8:8e:22:92:a7:a1:4b:eb:bd:2a:13: e3:09:25:72:14:a8:9d:0d:28:70:83:37:ee:34:84: cf:16:6b:04:a2:22:3f:42:be:ca:87:d9:b4:68:ba: 92:0c:2e:c1:1a:5a:3b:8a:d1:d1:d6:c4:77:dd:2d: 49:92:6d:12:32:c2:6e:36:33:5c:23:f4:79:a7:d4: 05:df:b0:2e:53:7c:33:89:a9:0f:82:f2:01:ac:e2: 8b:f6:0b:d9:66:2f:f6:2f:93:92:f2:c9:2b:2e:52: ef:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:82:C8:95:29:37:26:72:AE:7E:DC:F1:84:B2:C6:9A:CF:BE:AB:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ebdddf1-beef-3369-b8f1-91143ce1fabd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:b6:df:0b:63:fc:1a:64:5f:dc:cb:6b:39:b4:07:11:c0:d3: 54:65:27:65:79:0b:ce:6c:cd:df:78:1b:b1:64:e8:32:e2:fb: 8a:ef:c5:17:c7:cc:83:a4:54:44:ad:8a:c9:8c:06:52:1a:9e: 12:6b:e4:57:82:d5:7c:be:5d:b1:bd:68:6d:75:9b:da:9d:76: 67:42:71:0e:5b:4a:6e:19:73:9d:5f:f9:58:a9:47:cd:60:be: b2:7a:99:1e:0a:3c:90:04:a8:45:14:73:40:75:c4:18:f9:84: d5:12:97:05:9d:58:26:4f:da:13:15:41:bc:ec:4a:b4:40:ed: 4a:2f:b6:29:de:fd:7a:47:e6:aa:2a:3a:15:f9:03:e0:01:7a: b2:73:21:0d:e3:f3:f6:31:a9:f3:c6:84:0c:5a:11:a8:c6:98: a7:2c:c2:cd:84:b5:8c:2d:f9:1c:44:21:24:48:a4:20:15:e8: 19:2d:eb:a3:56:dd:5a:1a:f3:11:2c:86:fb:21:5f:6e:5d:06: 8a:1c:d3:86:e4:4d:e1:4e:88:60:2b:82:7a:79:c2:b7:30:0e: a9:54:88:50:67:e0:4f:cd:49:d2:7f:bd:3c:fc:8b:79:41:37: 59:7c:43:9d:b7:e9:c7:a7:6d:4b:ad:ba:64:03:5e:9f:38:2d: d4:73:a3:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKea1hSqyGBrMaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YThkOTE4ZGYtNzg2Ni00ZDEyLTkyNjktNjA2MWE3Y2Q4NjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3yLOc/Od2FbHxEMHrl8HcOuanoIFCPYC1/9 q+eYoh06FP7wmjs1mcwLBFk05qknqiHfz0O2pl5jV1Wmkr/d2S4iEjair67sZG5P pDD02IvQbdyScKSi7gHqefBJ6VA7xvueoNzlpIwWzzdoT/OmYUxfT6p+iuTdThXU 8EykwwLNattBlujZlVgMnw5gHBe7LEVrLqZtCQQRuI4ikqehS+u9KhPjCSVyFKid DShwgzfuNITPFmsEoiI/Qr7Kh9m0aLqSDC7BGlo7itHR1sR33S1Jkm0SMsJuNjNc I/R5p9QF37AuU3wziakPgvIBrOKL9gvZZi/2L5OS8skrLlLvzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeCyJUpNyZyrn7c8YSyxprPvqtTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2ViZGRkZjEtYmVlZi0z MzY5LWI4ZjEtOTExNDNjZTFmYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF88QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC623wtj/BpkX9zLazm0BxHA01RlJ2V5C85szd94G7Fk6DLi+4rvxRfH zIOkVEStismMBlIanhJr5FeC1Xy+XbG9aG11m9qddmdCcQ5bSm4Zc51f+VipR81g vrJ6mR4KPJAEqEUUc0B1xBj5hNUSlwWdWCZP2hMVQbzsSrRA7Uovtine/XpH5qoq OhX5A+ABerJzIQ3j8/YxqfPGhAxaEajGmKcsws2EtYwt+RxEISRIpCAV6Bkt66NW 3Voa8xEshvshX25dBooc04bkTeFOiGArgnp5wrcwDqlUiFBn4E/NSdJ/vTz8i3lB N1l8Q5236cenbUutumQDXp84LdRzo2M= -----END CERTIFICATE-----Generated at Mon May 5 20:50:27 2025 by rpki-client