$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2ad9d8b-30f4-3140-9d76-ed2f41f6980e.roa File: c2ad9d8b-30f4-3140-9d76-ed2f41f6980e.roa (raw, json) Hash identifier: yjmMP2isc8FhtIoRFJ/pLzSXJpornlZKAwbqY6gVqYI= Subject key identifier: EE:B7:DD:D7:51:C6:0C:18:92:CA:B2:6F:6B:CD:4C:79:84:E9:45:75 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E60DF870373DC53A0CD0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2ad9d8b-30f4-3140-9d76-ed2f41f6980e.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.206.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e6:0d:f8:70:37:3d:c5:3a:0c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=5447f1c0-6212-46ee-97b1-154ba1e065fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:fb:18:19:c9:e2:a0:37:0e:d1:25:c7:54:ec: d1:79:6f:44:c0:25:04:23:fd:25:c5:55:d5:5a:08: 4f:df:4d:95:10:42:ac:e6:8e:b8:95:d3:5b:80:e5: c1:22:4c:cc:7d:47:2c:8d:af:6a:9a:6e:06:3f:03: 05:5f:6f:62:7c:10:17:26:54:6a:19:76:5e:53:3f: c4:ff:ea:74:64:81:15:1b:9f:0e:de:30:e0:c5:71: bc:f6:d5:d3:f6:5d:d2:51:03:42:9d:c1:dd:98:78: e4:53:b5:fd:0d:4b:34:55:7f:32:f9:64:17:55:ce: 45:fb:53:81:2a:4d:57:10:5b:88:47:7d:ea:22:0f: 99:41:59:82:8d:15:01:2a:5a:26:e1:74:4e:7a:42: c2:08:18:e3:99:30:0f:f2:fd:6a:d5:77:6f:8d:ed: e6:47:bf:9a:43:e3:93:22:63:19:ae:36:f9:22:39: 23:92:f7:54:93:50:35:1c:66:94:d5:3a:c0:45:3e: 1a:5c:08:b0:31:62:bf:5b:81:ec:cb:9b:a4:36:5a: cd:18:90:9a:bc:2c:46:12:6e:29:06:26:69:8c:62: aa:a2:49:6f:0e:c6:6f:16:87:52:ba:ec:95:22:a8: 7d:be:b0:79:31:88:93:69:cc:d3:25:bb:3f:8a:5a: bc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B7:DD:D7:51:C6:0C:18:92:CA:B2:6F:6B:CD:4C:79:84:E9:45:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2ad9d8b-30f4-3140-9d76-ed2f41f6980e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:9d:01:b4:3e:b4:7b:b3:38:ef:2a:41:bd:f0:ee:03:da:35: fc:95:b1:48:2f:7b:2a:a5:23:d5:66:02:4f:ae:74:79:56:33: 1a:a5:5d:87:ae:5e:ed:e2:85:b5:33:b4:5f:ed:d3:66:09:cc: a4:a6:d8:e3:f7:75:7d:7c:59:c2:da:49:d7:f2:bf:f2:46:d8: 99:b5:c9:d7:2d:c1:ce:e8:cd:b2:57:06:70:83:07:06:77:e8: b9:d4:24:2c:3d:4f:76:37:8a:86:84:03:b9:a0:3f:00:fe:e6: b3:58:f9:42:ed:4d:10:cc:89:33:c0:7b:fb:62:ec:db:11:65: f4:a4:90:10:4c:7d:2b:ef:4f:a4:9b:e6:a6:20:3a:47:4d:c3: d5:fd:79:cf:8a:6e:06:52:e6:c2:66:04:f0:fb:f6:ff:90:b2: 4d:d8:ce:da:58:9a:a1:97:05:04:8d:05:9e:00:af:f9:b3:19: 43:3f:b8:17:31:99:31:0f:13:c4:ef:0a:3d:7b:36:6f:e1:32: 50:2f:2a:f8:c8:60:1b:2f:b9:be:42:b1:ac:11:1e:41:58:e6: 93:e9:36:30:cf:cd:90:b1:7d:f1:07:82:47:a9:36:73:75:0d: 27:d4:d7:0d:e8:40:4d:80:e3:48:d6:7b:10:c6:ba:2e:b9:a1: e9:39:76:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKeYN+HA3PcU6DNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NTQ0N2YxYzAtNjIxMi00NmVlLTk3YjEtMTU0YmExZTA2NWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vsYGcnioDcO0SXHVOzReW9EwCUEI/0lxVXV WghP302VEEKs5o64ldNbgOXBIkzMfUcsja9qmm4GPwMFX29ifBAXJlRqGXZeUz/E /+p0ZIEVG58O3jDgxXG89tXT9l3SUQNCncHdmHjkU7X9DUs0VX8y+WQXVc5F+1OB Kk1XEFuIR33qIg+ZQVmCjRUBKlom4XROekLCCBjjmTAP8v1q1Xdvje3mR7+aQ+OT ImMZrjb5IjkjkvdUk1A1HGaU1TrART4aXAiwMWK/W4Hsy5ukNlrNGJCavCxGEm4p BiZpjGKqoklvDsZvFodSuuyVIqh9vrB5MYiTaczTJbs/ilq8IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO633ddRxgwYksqyb2vNTHmE6UV1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzJhZDlkOGItMzBmNC0z MTQwLTlkNzYtZWQyZjQxZjY5ODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF87WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqdAbQ+tHuzOO8qQb3w7gPaNfyVsUgveyqlI9VmAk+udHlWMxqlXYeu Xu3ihbUztF/t02YJzKSm2OP3dX18WcLaSdfyv/JG2Jm1ydctwc7ozbJXBnCDBwZ3 6LnUJCw9T3Y3ioaEA7mgPwD+5rNY+ULtTRDMiTPAe/ti7NsRZfSkkBBMfSvvT6Sb 5qYgOkdNw9X9ec+KbgZS5sJmBPD79v+Qsk3YztpYmqGXBQSNBZ4Ar/mzGUM/uBcx mTEPE8TvCj17Nm/hMlAvKvjIYBsvub5CsawRHkFY5pPpNjDPzZCxffEHgkepNnN1 DSfU1w3oQE2A40jWexDGui65oek5djE= -----END CERTIFICATE-----Generated at Mon May 5 22:31:20 2025 by rpki-client