$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8afbceab-86d6-36b5-83f2-9d31bb4c6d5c.roa File: 8afbceab-86d6-36b5-83f2-9d31bb4c6d5c.roa (raw, json) Hash identifier: Pu8bUyAeM/5yfCgiQKM12dqHavveCmUb/mK2mHfUXgg= Subject key identifier: 05:65:5D:17:10:AF:AC:96:81:29:C8:66:51:A1:9F:E0:A9:9F:C7:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858497279C4098C0C48599F310680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8afbceab-86d6-36b5-83f2-9d31bb4c6d5c.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.214.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:c4:09:8c:0c:48:59:9f:31:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=34e944e6-1a80-45ba-82d6-2877482308b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b9:f5:a6:ac:d4:2e:33:6a:df:16:59:f9:da: 0f:53:f7:3d:87:29:78:74:84:2f:e7:3e:1d:9f:31: 09:15:df:5f:99:79:69:d1:7c:fd:a4:bf:84:85:7e: a7:09:10:cb:54:f7:13:17:62:bd:ba:07:f8:a1:a3: cd:57:84:9f:c4:b1:f6:3d:35:68:69:c3:e4:aa:50: f5:4a:3a:ee:15:bb:2a:45:1d:f4:2e:9d:4a:4e:c3: e9:64:8c:62:41:b3:3e:9a:57:67:33:36:66:26:4b: d1:33:db:cf:d4:11:fe:2a:6a:29:83:3f:7b:56:81: c0:b6:d8:01:6d:1a:c0:ff:52:8c:67:49:51:98:0b: a0:4b:9f:3c:31:e2:cc:cb:61:9a:8b:e2:f7:61:24: 62:c2:89:50:ae:6e:d2:b5:ba:26:af:40:10:36:20: 5f:4a:d4:93:51:63:59:f6:ea:9f:ee:a1:03:eb:f1: 53:a9:19:80:27:a9:f3:1d:b4:ce:04:b1:32:ff:c3: 29:68:4c:7b:46:f9:ee:29:38:e2:c9:a1:32:7d:b0: b2:2d:fc:d2:f6:3d:9f:73:1e:fc:87:80:19:b3:bf: 26:49:36:1e:ad:df:31:4d:a8:bf:bf:d0:6d:75:70: 8d:cd:ac:ec:f9:e6:ba:f8:ed:cd:4c:a7:63:ed:3c: cb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:65:5D:17:10:AF:AC:96:81:29:C8:66:51:A1:9F:E0:A9:9F:C7:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8afbceab-86d6-36b5-83f2-9d31bb4c6d5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:1f:83:23:e0:63:32:8d:7a:50:e1:1b:d6:9b:7b:44:5d:68: 50:65:3d:9e:8f:78:74:15:cf:c5:d0:ac:9e:17:86:22:31:94: 43:88:5d:e5:7c:fa:26:0b:b4:b5:65:37:75:19:05:f2:44:14: 7f:4c:c4:2b:48:73:6e:c7:15:e8:b2:f6:c0:51:33:86:fa:a6: ac:c6:55:bc:ea:54:3b:3d:37:c5:29:5f:c5:60:9a:7e:3c:a1: c8:88:31:03:2f:3e:66:29:cc:60:bb:89:bb:14:3b:4a:69:f5: 27:23:f3:d3:85:3a:94:5c:5a:ad:84:ea:d9:67:15:ea:e2:77: 4f:cf:75:54:5f:ff:09:35:04:65:36:57:23:38:65:e3:96:2a: 8d:8d:b6:ff:8e:63:89:77:69:0d:26:87:f0:fe:71:58:e7:d8: 81:1d:88:3d:fb:d7:ed:11:a1:fa:5c:73:48:82:5c:ad:48:2c: 4b:08:38:ce:d0:87:e4:03:2e:e0:be:84:c8:30:33:ed:e9:56: 63:b8:a7:a0:f9:32:7a:2b:98:f9:de:44:0d:4d:53:4e:58:00: 28:50:4a:55:91:b2:bb:0e:05:62:ab:8e:4e:54:63:18:2c:36: bb:f7:45:b0:26:bd:79:a4:59:1d:46:ce:09:d2:13:13:fc:94: ae:53:a7:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyecQJjAxIWZ8xBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk MzRlOTQ0ZTYtMWE4MC00NWJhLTgyZDYtMjg3NzQ4MjMwOGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7n1pqzULjNq3xZZ+doPU/c9hyl4dIQv5z4d nzEJFd9fmXlp0Xz9pL+EhX6nCRDLVPcTF2K9ugf4oaPNV4SfxLH2PTVoacPkqlD1 SjruFbsqRR30Lp1KTsPpZIxiQbM+mldnMzZmJkvRM9vP1BH+Kmopgz97VoHAttgB bRrA/1KMZ0lRmAugS588MeLMy2Gai+L3YSRiwolQrm7Stbomr0AQNiBfStSTUWNZ 9uqf7qED6/FTqRmAJ6nzHbTOBLEy/8MpaEx7RvnuKTjiyaEyfbCyLfzS9j2fcx78 h4AZs78mSTYerd8xTai/v9BtdXCNzazs+ea6+O3NTKdj7TzLOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVlXRcQr6yWgSnIZlGhn+Cpn8d3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGFmYmNlYWItODZkNi0z NmI1LTgzZjItOWQzMWJiNGM2ZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9arMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUfgyPgYzKNelDhG9abe0RdaFBlPZ6PeHQVz8XQrJ4XhiIxlEOIXeV8 +iYLtLVlN3UZBfJEFH9MxCtIc27HFeiy9sBRM4b6pqzGVbzqVDs9N8UpX8Vgmn48 ociIMQMvPmYpzGC7ibsUO0pp9Scj89OFOpRcWq2E6tlnFerid0/PdVRf/wk1BGU2 VyM4ZeOWKo2Ntv+OY4l3aQ0mh/D+cVjn2IEdiD371+0Rofpcc0iCXK1ILEsIOM7Q h+QDLuC+hMgwM+3pVmO4p6D5MnormPneRA1NU05YAChQSlWRsrsOBWKrjk5UYxgs Nrv3RbAmvXmkWR1GzgnSExP8lK5Tp1I= -----END CERTIFICATE-----Generated at Tue May 6 20:56:02 2025 by rpki-client