$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2317c35-fa1c-3b65-8477-cd45ee4eb61a.roa File: c2317c35-fa1c-3b65-8477-cd45ee4eb61a.roa (raw, json) Hash identifier: HyBHTysg5+WFepofV0yJISKZ5m4hBME23lS4cBZNy1o= Subject key identifier: 0C:FB:6A:0F:56:40:21:09:1B:C8:93:23:94:D9:81:D7:CC:B7:12:DD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF49DB2DE3289151FE00EC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2317c35-fa1c-3b65-8477-cd45ee4eb61a.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.211.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:9d:b2:de:32:89:15:1f:e0:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=cc6c7ad6-d634-4155-8875-0a1e375cd993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d1:af:49:63:4d:93:de:d3:ab:af:96:d1:50: 60:6d:cc:da:69:3c:62:e6:94:dd:fb:aa:d1:b9:79: 53:29:95:7b:d3:f7:ba:10:66:9c:f5:1d:eb:a9:66: cb:b7:04:92:e7:32:3f:00:d6:92:1a:b4:aa:97:13: 61:09:a4:0c:2d:27:f1:76:f8:84:a9:72:a3:48:e8: 84:ad:ee:05:88:ee:cf:f0:70:66:19:68:f6:06:03: 3c:80:82:77:c7:e6:90:65:9b:9c:a0:dd:f4:e8:4b: 58:b2:b4:3b:e9:34:70:b1:3a:98:0e:8c:77:b1:7a: 12:b4:1d:eb:10:e7:28:2d:e4:ea:03:1c:87:e0:89: 44:5d:94:15:c0:f5:f4:90:b5:82:0d:cf:15:56:c6: 46:c0:15:2d:0e:55:03:15:76:0d:37:3d:3a:d8:ce: 6e:4f:cd:cc:b4:25:db:a1:41:31:62:58:64:65:3a: 27:1c:e4:f3:d8:3a:cb:74:cb:b7:a5:76:ae:48:98: 19:3b:c5:19:4d:e4:a4:8b:c9:79:a4:c8:6e:f0:5e: 39:01:a3:5b:a8:00:0c:9f:e3:f5:37:35:15:46:f4: ce:93:36:21:17:43:1d:3d:6c:41:7f:f1:8a:83:94: b3:28:3e:77:df:69:a0:f1:a7:71:92:9f:75:92:54: a9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FB:6A:0F:56:40:21:09:1B:C8:93:23:94:D9:81:D7:CC:B7:12:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2317c35-fa1c-3b65-8477-cd45ee4eb61a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:fd:fd:a8:8a:df:67:94:fa:f3:eb:0b:2a:22:92:93:65:ad: 80:77:c0:33:a2:56:2f:92:a7:30:20:c1:e5:48:0f:6a:10:9c: 65:b7:ed:10:32:45:b0:00:89:42:96:d2:35:92:1e:23:35:66: fa:b6:eb:c9:89:bb:8e:36:67:96:b1:84:d0:d6:cf:0d:98:98: 7f:6d:ec:44:75:ed:23:9c:76:c9:98:f5:32:ae:c8:c8:b9:ff: fd:9e:0d:6a:61:74:4e:ea:5f:60:f6:e6:d7:ed:ab:45:5a:a6: f0:7f:48:77:b5:29:d0:48:43:8e:b2:a8:3c:43:f7:27:55:b0: c2:70:61:3a:c1:eb:5d:91:a1:74:ac:14:40:2f:d5:ca:97:e4: e6:bd:9b:0d:8c:e7:4e:24:5f:2d:be:0e:a0:d8:0d:7b:7f:7e: e3:2d:72:80:38:66:86:6b:7c:99:74:40:56:29:3c:26:b3:07: 0c:c0:3e:33:20:f3:79:c7:2f:66:ff:93:f3:b7:32:ad:12:82: 27:7b:12:38:07:12:7e:d9:e5:b9:00:86:5e:b8:a9:07:db:ad: 44:0d:87:5d:74:9b:11:b4:77:2d:32:eb:e0:0f:58:44:d8:99: 56:0e:6c:75:78:67:05:19:c8:9a:19:54:9b:b5:ac:a5:73:90: e7:7e:6a:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9J2y3jKJFR/gDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk Y2M2YzdhZDYtZDYzNC00MTU1LTg4NzUtMGExZTM3NWNkOTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9GvSWNNk97Tq6+W0VBgbczaaTxi5pTd+6rR uXlTKZV70/e6EGac9R3rqWbLtwSS5zI/ANaSGrSqlxNhCaQMLSfxdviEqXKjSOiE re4FiO7P8HBmGWj2BgM8gIJ3x+aQZZucoN306EtYsrQ76TRwsTqYDox3sXoStB3r EOcoLeTqAxyH4IlEXZQVwPX0kLWCDc8VVsZGwBUtDlUDFXYNNz062M5uT83MtCXb oUExYlhkZTonHOTz2DrLdMu3pXauSJgZO8UZTeSki8l5pMhu8F45AaNbqAAMn+P1 NzUVRvTOkzYhF0MdPWxBf/GKg5SzKD5332mg8adxkp91klSprwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAz7ag9WQCEJG8iTI5TZgdfMtxLdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzIzMTdjMzUtZmExYy0z YjY1LTg0NzctY2Q0NWVlNGViNjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9OgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIP9/aiK32eU+vPrCyoikpNlrYB3wDOiVi+SpzAgweVID2oQnGW37RAy RbAAiUKW0jWSHiM1Zvq268mJu442Z5axhNDWzw2YmH9t7ER17SOcdsmY9TKuyMi5 //2eDWphdE7qX2D25tftq0VapvB/SHe1KdBIQ46yqDxD9ydVsMJwYTrB612RoXSs FEAv1cqX5Oa9mw2M504kXy2+DqDYDXt/fuMtcoA4ZoZrfJl0QFYpPCazBwzAPjMg 83nHL2b/k/O3Mq0Sgid7EjgHEn7Z5bkAhl64qQfbrUQNh110mxG0dy0y6+APWETY mVYObHV4ZwUZyJoZVJu1rKVzkOd+ag0= -----END CERTIFICATE-----Generated at Mon May 5 11:31:16 2025 by rpki-client