$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71c56d06-a5b3-349a-bf6b-f9338bbde8f3.roa File: 71c56d06-a5b3-349a-bf6b-f9338bbde8f3.roa (raw, json) Hash identifier: /lizWpuyonFQzIubgSZbsWlWq4Kin46SIn4BbkVpRqA= Subject key identifier: 66:03:4A:A6:8D:14:F2:AC:60:AA:B5:EB:08:3B:E4:53:01:64:B4:5D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF4A1364136A76142F73100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71c56d06-a5b3-349a-bf6b-f9338bbde8f3.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.213.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:a1:36:41:36:a7:61:42:f7:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=2bc1cd4d-f784-4a9a-b5ab-51de1be03927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:17:4b:1e:8f:b3:62:95:01:fb:b9:84:54:76: e2:80:04:8d:d9:d3:8b:d7:3a:00:bc:63:1f:9f:91: f4:02:02:cb:89:7b:1d:f0:46:a9:67:d8:da:cc:87: 6d:2b:f6:7d:47:f0:f0:f8:23:ae:f1:20:56:6d:5f: 21:c6:c7:33:a0:61:8f:51:d6:cc:05:a0:38:c5:f7: 67:f5:e3:47:3c:d6:5e:00:b4:2f:c5:f0:b9:c4:c3: 9a:15:04:39:a1:02:8e:38:df:8d:4f:5c:0b:be:24: 3e:86:c3:af:cb:39:27:98:56:19:63:5f:c9:8e:65: f7:59:88:00:28:06:59:03:69:62:0f:0a:2f:69:c1: e5:6b:eb:19:9b:02:a3:6d:d6:70:b5:69:04:21:78: 0f:0f:7b:97:7e:a2:26:99:73:e3:03:83:9d:71:60: 0b:ba:63:30:88:59:22:ac:e3:02:d6:48:4e:ab:e6: 1f:d7:db:1b:73:3c:28:3e:f4:ea:61:76:81:40:cf: 83:11:d6:b0:50:c8:23:46:16:dd:c3:21:84:0f:7f: 24:f3:f9:69:97:d6:75:c6:9e:4e:ef:fd:58:68:ae: 03:d1:17:36:59:98:51:98:5a:82:66:81:69:34:3e: cb:38:3c:10:0e:7d:8e:e9:6a:4f:e8:47:2e:7c:3e: 49:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:03:4A:A6:8D:14:F2:AC:60:AA:B5:EB:08:3B:E4:53:01:64:B4:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71c56d06-a5b3-349a-bf6b-f9338bbde8f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:3c:d9:a6:53:90:a3:73:f0:42:b5:4d:c0:ae:0a:ba:b0:e1: f2:68:5c:6e:6f:88:61:a8:3d:e1:7a:b6:0e:aa:4b:46:bf:eb: c0:2e:71:25:99:c6:85:c8:f4:4e:b6:7d:60:ad:e0:bb:41:c5: 9b:c4:c8:e9:69:f9:09:f5:f9:ca:cb:a4:4f:b8:08:c0:da:de: 06:a8:10:f7:9d:a2:a2:8e:0d:03:39:d9:52:75:cc:8c:89:ab: ba:5f:dd:84:35:53:27:6f:d6:4e:e5:1c:bb:2d:3c:0a:e0:21: 13:0a:94:a2:ac:fb:ad:ac:ff:2c:78:b1:16:31:0c:69:a7:f8: 07:4e:e7:75:88:69:f1:d9:38:c4:85:29:fc:51:cf:6a:81:99: 52:75:32:d1:be:c8:c8:ee:47:bf:c7:6c:34:20:11:53:35:c9: d8:b1:2b:be:75:bc:e8:22:c3:f8:16:c1:45:f6:bb:4c:6c:8f: ac:61:4f:73:fe:8b:02:f2:42:af:57:e6:ba:1e:24:bb:49:0c: 05:60:8f:b6:b3:d6:39:6b:13:af:9b:8f:a6:d7:85:89:31:f8: 03:e1:ee:f0:31:3d:c1:d1:ef:4d:f5:74:4e:44:4b:85:d4:cf: 9b:38:94:23:81:a4:96:d3:aa:c7:39:dc:89:13:0c:51:a7:d9: ab:0e:c2:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9KE2QTanYUL3MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MmJjMWNkNGQtZjc4NC00YTlhLWI1YWItNTFkZTFiZTAzOTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRdLHo+zYpUB+7mEVHbigASN2dOL1zoAvGMf n5H0AgLLiXsd8EapZ9jazIdtK/Z9R/Dw+COu8SBWbV8hxsczoGGPUdbMBaA4xfdn 9eNHPNZeALQvxfC5xMOaFQQ5oQKOON+NT1wLviQ+hsOvyzknmFYZY1/JjmX3WYgA KAZZA2liDwovacHla+sZmwKjbdZwtWkEIXgPD3uXfqImmXPjA4OdcWALumMwiFki rOMC1khOq+Yf19sbczwoPvTqYXaBQM+DEdawUMgjRhbdwyGED38k8/lpl9Z1xp5O 7/1YaK4D0Rc2WZhRmFqCZoFpND7LODwQDn2O6WpP6EcufD5JRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYDSqaNFPKsYKq16wg75FMBZLRdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzFjNTZkMDYtYTViMy0z NDlhLWJmNmItZjkzMzhiYmRlOGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9W0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADs82aZTkKNz8EK1TcCuCrqw4fJoXG5viGGoPeF6tg6qS0a/68AucSWZ xoXI9E62fWCt4LtBxZvEyOlp+Qn1+crLpE+4CMDa3gaoEPedoqKODQM52VJ1zIyJ q7pf3YQ1Uydv1k7lHLstPArgIRMKlKKs+62s/yx4sRYxDGmn+AdO53WIafHZOMSF KfxRz2qBmVJ1MtG+yMjuR7/HbDQgEVM1ydixK751vOgiw/gWwUX2u0xsj6xhT3P+ iwLyQq9X5roeJLtJDAVgj7az1jlrE6+bj6bXhYkx+APh7vAxPcHR7031dE5ES4XU z5s4lCOBpJbTqsc53IkTDFGn2asOwn4= -----END CERTIFICATE-----Generated at Mon May 5 04:48:51 2025 by rpki-client