$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/498b5a46-da2b-3a16-9afa-9470e250eb44.roa File: 498b5a46-da2b-3a16-9afa-9470e250eb44.roa (raw, json) Hash identifier: UNFpxKyDrmkTwEySxa0vFbiNZlqT9rtD57f7qt58Ajk= Subject key identifier: 5A:82:06:60:E4:B8:CE:F5:25:FC:F3:0D:4C:8C:10:3C:8F:A6:CE:3B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849AD19FEAA1A3D95AD1F02BF60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/498b5a46-da2b-3a16-9afa-9470e250eb44.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 18403 IP address blocks: 23.208.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:19:fe:aa:1a:3d:95:ad:1f:02:bf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=0f1e8d5f-56ba-4312-a99f-240594865761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ac:1f:f3:0f:7b:ce:e2:1f:b6:31:58:cf:09: 87:b9:16:0a:ed:5e:f8:4a:a4:89:66:95:21:1e:02: b5:b9:ab:b4:cd:7a:9e:36:02:a3:fc:77:fe:7f:0e: 4b:9d:e5:a1:5b:fc:2a:29:e5:9e:77:ac:65:cf:9e: b8:68:62:81:f6:a8:9c:4c:d8:2d:eb:01:47:4e:32: 2c:63:83:c0:f0:ac:94:fb:a1:00:df:4f:8a:ed:bb: 0e:12:f4:a5:c5:ce:36:39:49:a5:9a:f7:cc:8f:2c: cb:25:cc:2c:2d:c4:d8:e8:96:bf:53:3a:df:23:68: 0b:a7:30:4a:56:07:3d:f7:8f:e9:4c:98:49:1b:32: ae:40:31:92:da:ee:c4:2b:de:96:11:f9:11:5e:e3: 8c:a0:d2:6b:e7:8f:d6:a1:9c:a6:94:5b:c0:2b:2f: dc:68:f4:4d:0b:44:6c:dd:6d:af:bb:a3:7c:bf:4d: a9:fd:e6:83:ca:6e:f2:87:1e:10:11:d9:be:87:82: e5:d8:e6:2d:4d:c1:30:65:27:66:a6:b1:70:b1:8f: 24:05:46:65:66:12:6a:a3:26:9b:65:ad:12:2e:77: 05:23:ba:56:36:3f:03:08:83:a1:84:e7:16:57:47: de:ad:98:7e:86:0b:d3:df:a8:69:4d:f4:8c:f2:95: 60:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:82:06:60:E4:B8:CE:F5:25:FC:F3:0D:4C:8C:10:3C:8F:A6:CE:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/498b5a46-da2b-3a16-9afa-9470e250eb44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:85:60:7a:91:58:5e:94:dd:b3:94:27:40:ae:49:12:2d:2e: 35:5e:34:07:77:14:25:66:4b:30:91:36:c3:54:38:1c:f1:c5: f6:53:fe:be:b4:e7:0c:f2:e1:b8:11:76:94:8a:90:13:e8:8b: 27:13:8b:79:a1:ff:e7:a7:50:59:4c:e7:61:80:3a:c5:af:01: aa:b3:24:1e:1f:32:5d:4b:3f:1d:53:1c:a9:bc:ea:8d:b0:3a: 24:a9:ba:7b:a4:fb:70:65:4d:c0:23:bc:ed:b8:d1:d0:5b:03: 1f:ca:80:ef:ae:1d:9d:98:05:45:bf:40:52:07:7e:89:26:8d: cf:7b:c1:c5:c7:5a:7c:0d:64:da:0f:51:4f:e2:28:2d:58:45: e6:31:36:09:4d:be:a9:6c:28:9d:2d:66:5f:f9:19:50:ab:51: b0:25:bf:21:4e:43:16:36:5a:e3:77:29:06:37:4c:61:1c:07: c2:b8:fb:3f:ae:bf:35:42:42:07:d4:4e:6f:02:95:57:61:fd: 95:43:e3:ce:17:1d:07:47:f7:1e:ce:2e:d3:35:b6:22:02:f6: c9:f8:b6:8b:86:e9:25:11:99:d9:65:95:c1:ed:77:65:81:8b: 0c:ee:bf:7d:78:96:87:bb:8f:ee:b6:94:c1:bb:51:cc:ca:d0: 00:84:5d:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGf6qGj2VrR8Cv2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MGYxZThkNWYtNTZiYS00MzEyLWE5OWYtMjQwNTk0ODY1NzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Kwf8w97zuIftjFYzwmHuRYK7V74SqSJZpUh HgK1uau0zXqeNgKj/Hf+fw5LneWhW/wqKeWed6xlz564aGKB9qicTNgt6wFHTjIs Y4PA8KyU+6EA30+K7bsOEvSlxc42OUmlmvfMjyzLJcwsLcTY6Ja/UzrfI2gLpzBK Vgc994/pTJhJGzKuQDGS2u7EK96WEfkRXuOMoNJr54/WoZymlFvAKy/caPRNC0Rs 3W2vu6N8v02p/eaDym7yhx4QEdm+h4Ll2OYtTcEwZSdmprFwsY8kBUZlZhJqoyab Za0SLncFI7pWNj8DCIOhhOcWV0ferZh+hgvT36hpTfSM8pVgmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqCBmDkuM71JfzzDUyMEDyPps47MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDk4YjVhNDYtZGEyYi0z YTE2LTlhZmEtOTQ3MGUyNTBlYjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9CgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyFYHqRWF6U3bOUJ0CuSRItLjVeNAd3FCVmSzCRNsNUOBzxxfZT/r60 5wzy4bgRdpSKkBPoiycTi3mh/+enUFlM52GAOsWvAaqzJB4fMl1LPx1THKm86o2w OiSpunuk+3BlTcAjvO240dBbAx/KgO+uHZ2YBUW/QFIHfokmjc97wcXHWnwNZNoP UU/iKC1YReYxNglNvqlsKJ0tZl/5GVCrUbAlvyFOQxY2WuN3KQY3TGEcB8K4+z+u vzVCQgfUTm8ClVdh/ZVD484XHQdH9x7OLtM1tiIC9sn4touG6SURmdlllcHtd2WB iwzuv314loe7j+62lMG7UczK0ACEXfs= -----END CERTIFICATE-----Generated at Sat May 10 16:39:20 2025 by rpki-client