$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2859ec2-312e-3155-83f0-593e6003e8e4.roa File: b2859ec2-312e-3155-83f0-593e6003e8e4.roa (raw, json) Hash identifier: HVMYLMpaCdWPQD4D28Ot8lJH3wKfKk0V5SvGznB+IbY= Subject key identifier: F4:40:AF:42:30:C8:7A:20:A2:52:3E:3C:55:01:E1:4A:7A:7B:32:AE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF49F0F72B9013FC76C0500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2859ec2-312e-3155-83f0-593e6003e8e4.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.212.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:9f:0f:72:b9:01:3f:c7:6c:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=f3203d6c-70bf-4bbe-96c7-40efa2e0f9ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:03:4d:3a:54:51:97:b8:cf:19:24:6d:b1:a3: e8:77:fe:c2:20:68:96:49:1b:d4:de:90:f9:f8:05: 30:5e:bf:61:92:d9:51:71:70:53:39:9e:ce:d3:be: 08:80:b4:c4:21:b2:8c:fe:ca:76:a2:1b:e8:37:f8: 88:e0:82:92:93:4f:0d:11:46:c0:c4:06:e9:19:aa: e8:f9:47:76:4f:72:f2:71:84:ee:ca:d5:f1:a1:8e: b9:ed:09:1c:81:b8:94:c5:49:d4:ec:31:66:38:f3: b8:c3:39:d1:46:34:c6:74:e7:c4:94:ef:a6:39:ba: 6d:25:53:6f:6b:31:e6:9b:d2:34:fb:de:f1:68:89: 5a:23:a2:e2:21:14:f0:f3:33:06:ad:f2:21:be:12: 33:f4:1c:ee:1f:d6:70:d7:43:01:56:de:be:a7:ee: 28:2e:7f:42:13:14:20:b3:2f:8b:31:c9:4d:29:5a: 37:5e:19:0b:a8:19:ff:1f:1a:57:36:d4:36:b1:44: 25:90:92:0e:9d:17:8e:65:fe:da:56:a8:a7:04:ac: b7:8c:90:dd:f2:64:5b:c5:9f:5c:ff:0c:0b:5b:28: 76:6e:2e:a4:72:da:ad:c5:d2:fe:96:90:a5:09:4f: 13:08:52:b2:1c:e5:2a:a6:ee:2d:e7:2f:1f:fd:d5: 81:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:40:AF:42:30:C8:7A:20:A2:52:3E:3C:55:01:E1:4A:7A:7B:32:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2859ec2-312e-3155-83f0-593e6003e8e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:88:c6:29:a0:91:58:0e:b6:8b:4f:f1:36:af:65:cd:09:8e: 19:b9:a8:4d:d9:6c:fb:69:db:de:59:8c:8e:d5:5d:d2:93:c0: b8:ef:62:b9:dd:a1:87:03:e7:d8:5c:f1:f8:e9:0b:d4:1c:a9: e7:fe:6e:58:18:5c:da:9a:f2:cc:61:df:45:92:6a:4c:e3:8c: d8:f4:24:1d:b3:65:a5:64:a9:6d:1c:0d:6f:4b:a4:15:c2:98: cc:9c:cb:f6:6c:48:fa:5b:6b:66:80:da:46:e9:c4:22:33:7d: 5d:64:37:a3:10:58:79:8a:b4:4e:aa:38:b3:4f:19:c0:d2:5b: 5f:e3:91:17:f2:62:a2:77:07:03:a6:91:f1:f7:7a:63:0e:79: 61:d5:ab:a2:a0:f4:e0:2c:71:00:a7:cf:8b:a9:8c:bb:c4:4e: 1e:a2:59:27:33:91:39:aa:e7:c6:20:ef:ce:8e:c1:b0:12:30: fb:6f:75:c7:2b:4b:4c:63:a4:c6:fa:6e:50:cf:45:a0:63:35: a8:af:fe:62:df:eb:02:0d:ab:68:11:7d:93:a4:6b:7f:36:38: bb:bc:cf:a2:95:af:1d:72:3e:b0:fa:ab:b0:f2:56:f8:30:86: 4c:81:76:28:24:7d:d7:2b:35:42:fc:01:bb:f8:7c:24:78:0a: f8:b4:f2:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9J8PcrkBP8dsBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZjMyMDNkNmMtNzBiZi00YmJlLTk2YzctNDBlZmEyZTBmOWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQNNOlRRl7jPGSRtsaPod/7CIGiWSRvU3pD5 +AUwXr9hktlRcXBTOZ7O074IgLTEIbKM/sp2ohvoN/iI4IKSk08NEUbAxAbpGaro +Ud2T3LycYTuytXxoY657QkcgbiUxUnU7DFmOPO4wznRRjTGdOfElO+mObptJVNv azHmm9I0+97xaIlaI6LiIRTw8zMGrfIhvhIz9BzuH9Zw10MBVt6+p+4oLn9CExQg sy+LMclNKVo3XhkLqBn/HxpXNtQ2sUQlkJIOnReOZf7aVqinBKy3jJDd8mRbxZ9c /wwLWyh2bi6kctqtxdL+lpClCU8TCFKyHOUqpu4t5y8f/dWB8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRAr0IwyHogolI+PFUB4Up6ezKuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjI4NTllYzItMzEyZS0z MTU1LTgzZjAtNTkzZTYwMDNlOGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9SQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6IximgkVgOtotP8TavZc0Jjhm5qE3ZbPtp295ZjI7VXdKTwLjvYrnd oYcD59hc8fjpC9Qcqef+blgYXNqa8sxh30WSakzjjNj0JB2zZaVkqW0cDW9LpBXC mMycy/ZsSPpba2aA2kbpxCIzfV1kN6MQWHmKtE6qOLNPGcDSW1/jkRfyYqJ3BwOm kfH3emMOeWHVq6Kg9OAscQCnz4upjLvETh6iWSczkTmq58Yg786OwbASMPtvdccr S0xjpMb6blDPRaBjNaiv/mLf6wINq2gRfZOka382OLu8z6KVrx1yPrD6q7DyVvgw hkyBdigkfdcrNUL8Abv4fCR4Cvi08r4= -----END CERTIFICATE-----Generated at Wed May 7 11:39:22 2025 by rpki-client