$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5502977a-989d-317b-8dc8-3c5ae85e8834.roa File: 5502977a-989d-317b-8dc8-3c5ae85e8834.roa (raw, json) Hash identifier: klM4Y2DFkyAUMXUTtOxnGOpKiROlZ1Ed+p4phHY8ar8= Subject key identifier: 49:46:D2:B3:E8:1B:47:1D:A5:9A:1E:2B:9C:5B:0C:A7:B6:AD:2F:0C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849998F3F6A42A2133936BE7F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5502977a-989d-317b-8dc8-3c5ae85e8834.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 9498 IP address blocks: 23.208.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:3f:6a:42:a2:13:39:36:be:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=bf36cec7-21fd-4eda-a99a-128906a4cfd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0f:9c:f8:ac:94:1e:d3:91:8a:50:31:9e:75: 8e:92:c9:68:65:77:84:02:0f:f1:d7:a4:cd:f5:5e: 8b:1c:92:8c:ec:e2:87:5c:f7:64:cb:aa:66:f9:8d: 69:de:38:29:77:28:43:5a:94:c2:38:26:58:80:ee: cb:19:3b:a2:32:64:47:02:f6:4d:25:9b:2a:55:ab: d9:b2:45:15:8a:62:4e:59:41:df:ba:b6:93:b2:f9: 41:1f:63:fa:76:26:b2:79:06:c2:82:9b:5a:36:c3: de:eb:31:eb:78:ec:91:41:1a:43:d0:c6:e3:fa:4f: ee:24:20:b3:4b:ce:6d:64:db:88:c0:a3:14:f6:3e: 11:3b:6e:4e:97:c9:54:64:9f:1d:7d:ba:07:32:03: 80:bb:2d:05:db:5a:13:b4:bc:34:50:4f:b6:58:c3: 2d:3d:c2:4f:5b:22:48:c9:ce:69:57:f8:f0:41:57: ef:0e:18:6f:47:34:55:1a:17:08:77:75:62:d0:1f: 22:67:de:4a:11:36:b5:86:25:19:52:06:16:23:84: ff:4d:d4:c9:d2:a9:e6:7d:7d:1f:cb:de:c7:0c:de: 36:48:94:d3:c1:43:2c:8d:b8:ca:e8:29:e4:f4:98: 6a:eb:a9:bc:cc:02:2b:3d:42:4d:46:60:3d:bf:da: 45:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:46:D2:B3:E8:1B:47:1D:A5:9A:1E:2B:9C:5B:0C:A7:B6:AD:2F:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5502977a-989d-317b-8dc8-3c5ae85e8834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:95:01:2d:fd:1f:d2:85:97:6d:18:f4:f8:79:cc:7d:c7:d9: e8:8c:9c:af:fa:15:d8:56:b9:25:29:21:2f:70:f1:20:5e:3b: 41:15:fd:cd:4a:ab:df:f8:13:c8:a1:11:7c:ba:c4:4a:e7:6a: b4:04:03:3d:ee:69:37:13:a0:a4:69:8d:86:85:5c:ef:11:ff: 9f:0b:ee:72:53:78:12:ef:43:4b:09:da:40:65:e7:25:2a:8a: 85:9f:01:0a:69:33:25:33:43:f2:c5:23:c7:16:84:63:7c:49: e9:dc:5f:f7:7c:52:69:a8:0e:64:97:0a:e8:d5:1e:96:09:8e: 63:c0:57:c3:d6:0a:1a:96:41:f9:27:e9:f9:c4:6e:7d:56:0c: ac:4d:a8:7b:8f:f9:87:83:3b:29:de:02:77:ac:bf:5a:98:85: 5e:19:85:23:d9:49:1c:22:04:bb:e5:18:7c:4a:64:0c:8e:95: 11:6d:15:62:8b:00:e8:2f:75:63:e8:a4:f8:13:14:01:e9:72: 77:1a:bd:f1:0f:99:a5:4c:c2:ac:e0:7f:84:ed:3b:2d:89:eb: bc:3c:13:24:27:19:81:d0:99:c8:67:34:8c:63:ed:e7:12:d8: 0a:4b:c1:04:91:69:80:c2:5e:21:73:c3:f4:18:9c:27:17:4b: ff:67:76:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZjz9qQqITOTa+f4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk YmYzNmNlYzctMjFmZC00ZWRhLWE5OWEtMTI4OTA2YTRjZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA+c+KyUHtORilAxnnWOksloZXeEAg/x16TN 9V6LHJKM7OKHXPdky6pm+Y1p3jgpdyhDWpTCOCZYgO7LGTuiMmRHAvZNJZsqVavZ skUVimJOWUHfuraTsvlBH2P6diayeQbCgptaNsPe6zHreOyRQRpD0Mbj+k/uJCCz S85tZNuIwKMU9j4RO25Ol8lUZJ8dfboHMgOAuy0F21oTtLw0UE+2WMMtPcJPWyJI yc5pV/jwQVfvDhhvRzRVGhcId3Vi0B8iZ95KETa1hiUZUgYWI4T/TdTJ0qnmfX0f y97HDN42SJTTwUMsjbjK6Cnk9Jhq66m8zAIrPUJNRmA9v9pF+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElG0rPoG0cdpZoeK5xbDKe2rS8MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTUwMjk3N2EtOTg5ZC0z MTdiLThkYzgtM2M1YWU4NWU4ODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9BAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGVAS39H9KFl20Y9Ph5zH3H2eiMnK/6FdhWuSUpIS9w8SBeO0EV/c1K q9/4E8ihEXy6xErnarQEAz3uaTcToKRpjYaFXO8R/58L7nJTeBLvQ0sJ2kBl5yUq ioWfAQppMyUzQ/LFI8cWhGN8SencX/d8UmmoDmSXCujVHpYJjmPAV8PWChqWQfkn 6fnEbn1WDKxNqHuP+YeDOyneAnesv1qYhV4ZhSPZSRwiBLvlGHxKZAyOlRFtFWKL AOgvdWPopPgTFAHpcncavfEPmaVMwqzgf4TtOy2J67w8EyQnGYHQmchnNIxj7ecS 2ApLwQSRaYDCXiFzw/QYnCcXS/9ndjY= -----END CERTIFICATE-----Generated at Mon May 5 12:47:22 2025 by rpki-client