$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a0f2c93-4723-31c2-a45e-8f8eb8e52058.roa File: 8a0f2c93-4723-31c2-a45e-8f8eb8e52058.roa (raw, json) Hash identifier: bfQBnT4zsk23EuWdBvQp7HfbbNN/8MJ/k+nz+SmhyzQ= Subject key identifier: CF:37:0E:7E:15:0E:F0:4E:5A:7C:AE:EB:5D:44:5B:65:73:B8:E5:DA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849C36F80762742C727FAA4FC60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a0f2c93-4723-31c2-a45e-8f8eb8e52058.roa Signing time: Tue 06 May 2025 13:01:01 +0000 ROA not before: Tue 06 May 2025 13:01:01 +0000 ROA not after: Mon 04 Aug 2025 13:01:01 +0000 asID: 16625 IP address blocks: 23.211.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:6f:80:76:27:42:c7:27:fa:a4:fc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 6 13:01:01 2025 GMT Not After : Aug 4 13:01:01 2025 GMT Subject: CN=ca31cdca-1c70-4461-a3ae-740286152e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0a:6c:41:d4:87:fa:5b:fe:26:91:78:9c:a7: dd:81:69:80:53:ca:1f:5a:cb:29:0a:63:54:96:fc: a7:2b:79:7d:8e:95:48:89:3b:3d:aa:e4:ed:ca:2c: e8:0f:f5:ae:ee:8d:7b:f7:f6:cf:40:0c:da:61:0a: 66:08:1a:36:64:1d:0b:7b:6a:dc:e9:fb:82:56:94: e0:c8:fe:70:36:b2:2a:6d:64:04:b4:f8:03:cc:5a: b8:34:64:07:36:5e:32:c1:ec:16:8a:3f:a6:54:8b: 38:26:86:50:ef:2a:4a:6f:00:d0:ca:4a:e7:3d:cd: e7:f6:d7:dc:48:f7:4b:7f:2f:21:a2:d9:e5:50:ee: a7:34:a5:d2:68:d6:93:49:5a:8f:b6:ee:c6:3c:f2: 21:cc:10:5a:1f:b3:af:43:97:62:72:d3:cd:07:33: 0f:80:6a:eb:66:6e:f3:2b:d3:33:33:ce:94:df:eb: b7:12:d5:17:99:a1:eb:27:f2:ac:84:c1:ff:e0:6d: b9:13:55:04:c3:5f:85:f9:54:ad:f0:99:59:c4:71: b7:64:01:35:7e:3a:35:8a:0a:ac:1c:3e:47:32:22: 3e:a1:18:cc:da:1b:57:6d:e7:43:74:d1:05:a6:2f: 3d:2b:f4:31:49:68:63:47:a0:69:f0:0e:5e:d7:2e: db:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:37:0E:7E:15:0E:F0:4E:5A:7C:AE:EB:5D:44:5B:65:73:B8:E5:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a0f2c93-4723-31c2-a45e-8f8eb8e52058.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:32:ca:5d:b0:20:72:89:7f:a5:55:7d:59:a5:e8:68:e7:1f: f7:5f:b1:24:16:aa:e0:8b:41:5a:33:4e:72:b3:5f:e0:5e:b1: d0:5b:a1:44:5d:f2:20:e8:45:ca:40:85:05:4e:bd:65:d2:98: d6:e1:38:51:e3:f3:57:ae:61:28:a8:57:61:17:36:c9:0e:88: 69:bf:3d:65:af:77:ff:79:a2:54:df:34:e5:38:58:aa:70:36: 11:69:f1:f7:56:ef:3b:e8:83:ff:ac:3f:7f:3f:94:40:ad:d9: 98:5e:9f:84:5a:fc:97:43:11:89:6d:2e:15:be:71:41:a6:ca: 35:6b:f6:5b:39:b4:34:e8:65:fe:51:63:0c:eb:08:6b:25:09: 38:c5:3a:cc:d3:ba:88:78:f1:c9:ad:aa:2b:14:e0:a5:98:6e: f3:b0:9a:38:c3:66:c0:bb:8e:72:6f:a0:32:7c:33:fe:4a:c8: cd:f3:38:a1:4c:69:69:af:91:10:82:e0:2a:fa:20:c9:c0:d5: 3c:5c:b5:7c:d0:0b:20:4a:f3:df:0b:ac:7d:6c:7f:09:ca:98: ad:c9:79:0f:45:3f:c3:f4:d4:04:7c:6f:e4:12:68:db:a4:5f: e3:81:9c:43:2f:56:df:04:70:c6:a2:df:43:8e:6d:22:64:1c: 4d:dd:51:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnDb4B2J0LHJ/qk/GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNjEzMDEwMVoXDTI1MDgwNDEzMDEwMVowLzEtMCsGA1UEAxMk Y2EzMWNkY2EtMWM3MC00NDYxLWEzYWUtNzQwMjg2MTUyZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQpsQdSH+lv+JpF4nKfdgWmAU8ofWsspCmNU lvynK3l9jpVIiTs9quTtyizoD/Wu7o179/bPQAzaYQpmCBo2ZB0Le2rc6fuCVpTg yP5wNrIqbWQEtPgDzFq4NGQHNl4ywewWij+mVIs4JoZQ7ypKbwDQykrnPc3n9tfc SPdLfy8hotnlUO6nNKXSaNaTSVqPtu7GPPIhzBBaH7OvQ5dictPNBzMPgGrrZm7z K9MzM86U3+u3EtUXmaHrJ/KshMH/4G25E1UEw1+F+VSt8JlZxHG3ZAE1fjo1igqs HD5HMiI+oRjM2htXbedDdNEFpi89K/QxSWhjR6Bp8A5e1y7byQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM83Dn4VDvBOWnyu611EW2VzuOXaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGEwZjJjOTMtNDcyMy0z MWMyLWE0NWUtOGY4ZWI4ZTUyMDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9PEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAyyl2wIHKJf6VVfVml6GjnH/dfsSQWquCLQVozTnKzX+BesdBboURd 8iDoRcpAhQVOvWXSmNbhOFHj81euYSioV2EXNskOiGm/PWWvd/95olTfNOU4WKpw NhFp8fdW7zvog/+sP38/lECt2Zhen4Ra/JdDEYltLhW+cUGmyjVr9ls5tDToZf5R YwzrCGslCTjFOszTuoh48cmtqisU4KWYbvOwmjjDZsC7jnJvoDJ8M/5KyM3zOKFM aWmvkRCC4Cr6IMnA1TxctXzQCyBK898LrH1sfwnKmK3JeQ9FP8P01AR8b+QSaNuk X+OBnEMvVt8EcMai30OObSJkHE3dUSw= -----END CERTIFICATE-----Generated at Wed May 7 14:05:00 2025 by rpki-client