$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/632c2ffe-d0ed-3d02-a1d0-b9dae0d713ee.roa File: 632c2ffe-d0ed-3d02-a1d0-b9dae0d713ee.roa (raw, json) Hash identifier: OFLRz1vs+UlU6lhvBIcsO3eKjCtn32o/3enufOSSfS4= Subject key identifier: 9D:7E:7C:81:0F:86:4D:44:D7:8C:32:B7:29:68:B0:E6:10:73:FD:E4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849A8E9ED6E6AC94CA8407A4C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/632c2ffe-d0ed-3d02-a1d0-b9dae0d713ee.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 16625 IP address blocks: 23.219.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:ed:6e:6a:c9:4c:a8:40:7a:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=a6f667f4-7c1d-47c2-992d-81970fe31bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:91:54:6f:bf:39:95:c7:5f:84:4a:00:9f:0b: 64:76:20:c7:29:5e:fb:9e:5b:59:f5:aa:9d:b8:7d: 72:f4:f1:22:4d:3c:ca:88:4a:ce:3b:34:ef:2c:01: c2:7a:b5:72:f0:f2:79:c6:32:91:a4:13:6d:26:f9: 4c:00:a2:ab:38:fd:0e:e2:e7:53:87:94:cb:35:01: a2:dc:82:99:03:65:3e:1f:4e:c4:f6:9c:5c:47:32: 4b:a0:63:2e:15:c6:db:91:c9:f0:00:d2:a2:e4:5e: 68:7d:fb:a8:03:52:5f:67:86:84:ac:94:94:47:05: 7b:28:1b:7d:c1:f9:28:7b:98:e6:e0:13:5a:2d:03: 01:69:f1:58:0f:5e:82:91:be:3e:02:29:28:7f:07: 6a:00:2c:1b:d0:d0:de:7b:9e:9c:05:6b:16:26:2e: 07:c6:39:69:42:55:f0:be:8e:e5:b5:e6:ef:1c:94: ac:70:9d:eb:ad:0e:c0:51:fd:60:95:9a:de:ee:a6: 27:50:fd:69:5c:48:c1:45:42:90:7f:c9:30:0e:31: ea:ea:72:1e:4e:59:07:82:bb:cf:eb:b8:f9:b4:75: e4:3a:d7:f4:4a:35:2b:61:9a:9b:5f:af:aa:dc:2d: 73:9e:67:a8:c1:3c:85:95:1f:15:ca:ee:0b:1a:64: b6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:7E:7C:81:0F:86:4D:44:D7:8C:32:B7:29:68:B0:E6:10:73:FD:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/632c2ffe-d0ed-3d02-a1d0-b9dae0d713ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:41:f3:d7:5d:72:62:1a:7d:4d:5c:f2:69:d6:43:45:53:74: 5c:b7:b2:d1:d4:80:cc:35:c7:5f:c5:44:24:93:c5:43:35:b1: 63:3a:04:45:83:6e:a8:83:47:24:4d:18:e6:8b:62:2c:96:b4: 94:07:d6:95:56:47:58:71:66:72:d4:88:05:96:9e:fa:2b:13: f4:b2:76:3e:7a:2e:02:18:fe:60:f6:f6:ee:13:77:b1:d7:53: af:b1:bd:07:e9:59:1c:29:22:64:de:32:89:cb:d8:30:03:04: e5:87:65:d4:b8:fc:01:51:0d:4f:f8:dd:9f:11:02:b7:c0:cb: f8:31:0e:cf:e7:41:f3:8b:29:ce:fb:77:03:26:0a:db:12:72: d0:0f:a9:fd:78:bc:43:d2:65:96:b7:67:2f:03:78:dc:47:97: 2a:b2:3f:54:3f:3b:3f:bd:67:2f:2b:d1:2b:8f:9c:67:2f:60: e6:d5:2f:ea:60:d0:3b:9c:c4:37:ef:e8:9f:8f:32:0e:e0:13: 08:89:ee:72:f0:7f:e7:86:e4:dd:50:56:63:19:3e:f1:da:c2: 59:7f:3a:49:d4:94:b0:ac:0d:d3:86:b8:94:0c:99:f1:61:75: 09:b8:25:fe:31:d4:3f:80:90:fe:be:f1:e3:01:b9:d3:b3:f7: c5:59:f8:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6e1uaslMqEB6TAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk YTZmNjY3ZjQtN2MxZC00N2MyLTk5MmQtODE5NzBmZTMxYmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15FUb785lcdfhEoAnwtkdiDHKV77nltZ9aqd uH1y9PEiTTzKiErOOzTvLAHCerVy8PJ5xjKRpBNtJvlMAKKrOP0O4udTh5TLNQGi 3IKZA2U+H07E9pxcRzJLoGMuFcbbkcnwANKi5F5offuoA1JfZ4aErJSURwV7KBt9 wfkoe5jm4BNaLQMBafFYD16Ckb4+AikofwdqACwb0NDee56cBWsWJi4HxjlpQlXw vo7ltebvHJSscJ3rrQ7AUf1glZre7qYnUP1pXEjBRUKQf8kwDjHq6nIeTlkHgrvP 67j5tHXkOtf0SjUrYZqbX6+q3C1znmeowTyFlR8Vyu4LGmS2IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1+fIEPhk1E14wytylosOYQc/3kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjMyYzJmZmUtZDBlZC0z ZDAyLWExZDAtYjlkYWUwZDcxM2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9vQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENB89ddcmIafU1c8mnWQ0VTdFy3stHUgMw1x1/FRCSTxUM1sWM6BEWD bqiDRyRNGOaLYiyWtJQH1pVWR1hxZnLUiAWWnvorE/Sydj56LgIY/mD29u4Td7HX U6+xvQfpWRwpImTeMonL2DADBOWHZdS4/AFRDU/43Z8RArfAy/gxDs/nQfOLKc77 dwMmCtsSctAPqf14vEPSZZa3Zy8DeNxHlyqyP1Q/Oz+9Zy8r0SuPnGcvYObVL+pg 0DucxDfv6J+PMg7gEwiJ7nLwf+eG5N1QVmMZPvHawll/OknUlLCsDdOGuJQMmfFh dQm4Jf4x1D+AkP6+8eMBudOz98VZ+Fk= -----END CERTIFICATE-----Generated at Mon May 5 11:40:17 2025 by rpki-client