$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65bb3b8a-4926-346b-8e43-a608b73a7f36.roa File: 65bb3b8a-4926-346b-8e43-a608b73a7f36.roa (raw, json) Hash identifier: rLP63UXekSJtzrvOBOEHtUh/xHLxSdIndTyhBGHi74I= Subject key identifier: 43:49:60:E2:34:BA:3B:01:44:22:A7:A0:A8:E8:11:FE:BB:62:B2:03 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E6DE24E91A52484BF120 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65bb3b8a-4926-346b-8e43-a608b73a7f36.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.207.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e6:de:24:e9:1a:52:48:4b:f1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=b2228438-2805-4ccc-a3b1-762ab7fcb091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:90:c9:11:29:72:3a:48:93:bf:11:e9:c4:23: 05:df:40:31:b1:36:d0:2b:55:c5:31:d9:fa:ce:80: 22:5f:77:83:05:ab:84:18:3f:03:85:e8:b3:c6:c9: e5:44:33:93:19:21:30:bf:a6:9e:32:14:ac:34:bb: dd:5e:15:e9:21:a0:e0:9f:f1:e6:16:da:cd:58:74: 3f:91:76:49:d7:9f:91:1f:cc:5b:c7:40:18:d9:f2: db:72:40:27:99:97:84:54:f6:0d:50:12:b6:fb:f4: be:f2:92:fe:ce:6e:49:a2:ef:1d:16:ac:07:ab:9c: c7:e8:bf:6b:a9:bd:d9:74:88:14:24:8f:1c:51:df: 2d:d0:dd:7a:47:5d:3f:7a:3b:a7:1b:df:0d:1a:df: 5e:1e:23:02:ee:b3:e0:87:b2:f4:c6:a2:3d:97:47: 9e:ad:ed:81:73:b9:e3:06:47:b0:7f:d3:ea:b5:b4: 5b:72:9e:09:9d:eb:1a:68:cf:cd:2d:e1:65:71:78: 61:a0:b9:52:2b:1d:b3:22:9c:5e:85:34:93:4a:d4: 3a:25:c3:af:81:55:57:86:26:d1:3a:74:0b:f0:29: b3:f9:9b:0b:e7:8c:4e:e7:f9:f9:a1:09:a5:5b:dc: 06:cf:0f:9b:21:ed:2f:f4:00:53:fd:49:47:fe:56: 8f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:49:60:E2:34:BA:3B:01:44:22:A7:A0:A8:E8:11:FE:BB:62:B2:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65bb3b8a-4926-346b-8e43-a608b73a7f36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:26:ae:2a:20:9c:25:85:8c:b4:56:aa:71:04:ae:a3:3e:7d: ae:9e:80:a0:0d:2f:82:72:2e:d5:36:0f:25:f1:1a:25:56:d6: c8:ac:66:31:31:18:dc:89:6f:68:1f:73:d7:66:0b:ca:62:9c: 8d:50:34:ef:a5:c7:26:7e:5c:98:e7:2c:dd:87:f0:09:59:8c: 3a:c7:ad:20:fb:e5:34:a6:22:40:c3:32:84:e6:f1:7a:b1:1f: 6f:3d:fc:25:51:fc:c7:bf:59:0f:bf:ac:39:c3:8a:6b:36:da: 22:5f:69:7a:5d:4f:39:47:ac:d7:07:04:d7:b3:0c:4a:40:6c: 1e:7e:b4:b6:6c:cb:34:d5:48:86:bc:d3:06:0b:2f:65:3e:fe: f4:44:db:15:72:72:28:15:64:d3:b0:bb:36:38:50:0c:ab:9b: fe:07:76:4a:b1:99:7f:d2:e4:a8:f2:23:c0:34:b5:1d:cc:0e: 56:48:cb:c5:20:37:f5:3b:a7:9c:71:5d:a6:14:5c:4b:29:3a: e3:84:31:1e:75:10:4b:72:20:55:5e:98:6e:98:63:bb:bd:b5: e4:e2:2f:c3:c8:25:cb:25:ed:e3:06:f3:cf:71:82:d0:5f:e4: 95:b3:76:d6:7d:37:d0:99:74:b9:42:f0:18:09:39:9a:1a:29: 7b:f4:2b:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKebeJOkaUkhL8SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YjIyMjg0MzgtMjgwNS00Y2NjLWEzYjEtNzYyYWI3ZmNiMDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJDJESlyOkiTvxHpxCMF30AxsTbQK1XFMdn6 zoAiX3eDBauEGD8DheizxsnlRDOTGSEwv6aeMhSsNLvdXhXpIaDgn/HmFtrNWHQ/ kXZJ15+RH8xbx0AY2fLbckAnmZeEVPYNUBK2+/S+8pL+zm5Jou8dFqwHq5zH6L9r qb3ZdIgUJI8cUd8t0N16R10/ejunG98NGt9eHiMC7rPgh7L0xqI9l0eere2Bc7nj Bkewf9PqtbRbcp4JnesaaM/NLeFlcXhhoLlSKx2zIpxehTSTStQ6JcOvgVVXhibR OnQL8Cmz+ZsL54xO5/n5oQmlW9wGzw+bIe0v9ABT/UlH/laPcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENJYOI0ujsBRCKnoKjoEf67YrIDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjViYjNiOGEtNDkyNi0z NDZiLThlNDMtYTYwOGI3M2E3ZjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF89gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwmriognCWFjLRWqnEErqM+fa6egKANL4JyLtU2DyXxGiVW1sisZjEx GNyJb2gfc9dmC8pinI1QNO+lxyZ+XJjnLN2H8AlZjDrHrSD75TSmIkDDMoTm8Xqx H289/CVR/Me/WQ+/rDnDims22iJfaXpdTzlHrNcHBNezDEpAbB5+tLZsyzTVSIa8 0wYLL2U+/vRE2xVycigVZNOwuzY4UAyrm/4HdkqxmX/S5KjyI8A0tR3MDlZIy8Ug N/U7p5xxXaYUXEspOuOEMR51EEtyIFVemG6YY7u9teTiL8PIJcsl7eMG889xgtBf 5JWzdtZ9N9CZdLlC8BgJOZoaKXv0K+g= -----END CERTIFICATE-----Generated at Mon May 5 10:17:08 2025 by rpki-client