$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c33046e9-966a-3a2f-911d-1a8213500247.roa File: c33046e9-966a-3a2f-911d-1a8213500247.roa (raw, json) Hash identifier: bEPMcMlieAWW4COwxbCLaxREsxB5zBhmTCdtg4/IGOo= Subject key identifier: CD:AF:AB:26:28:3D:07:45:94:72:9B:46:3C:8D:9E:D1:58:52:01:57 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849A8E9E99D093A4A12CD191800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c33046e9-966a-3a2f-911d-1a8213500247.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.218.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:e9:9d:09:3a:4a:12:cd:19:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=7e65e5bc-d357-4db4-af55-c5aad73460df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3f:3e:6b:9e:aa:b4:86:1d:de:d6:88:ae:d3: 7b:aa:40:1a:9d:fc:01:dc:16:e8:aa:37:94:8c:6e: 34:da:40:00:79:17:9c:7a:6e:c3:ae:4a:bf:6c:06: 53:f6:08:a9:81:78:a7:89:68:d0:5c:f1:98:4d:61: 35:4f:3e:95:f2:0c:0f:77:e1:ef:e7:0c:7f:76:a1: bf:0c:f3:25:2c:28:6e:cc:d3:5b:49:3d:58:fa:9f: 77:e7:8b:28:4a:bf:a9:dd:16:bf:aa:c9:f7:60:60: 2a:a2:f1:45:2e:3a:72:d4:4f:14:b2:3d:29:43:59: 0b:34:da:4f:dc:27:bc:c7:a7:58:ba:52:b4:4f:81: b1:3d:05:a7:45:ec:42:1e:5a:7b:36:dd:1f:49:72: b6:6c:dc:03:7d:fe:6e:b9:05:15:be:1f:18:5e:90: 23:25:8b:63:29:57:5f:17:f7:70:68:8e:06:5a:9a: 52:36:17:b8:03:d8:af:91:d4:7e:37:27:c6:7d:aa: 51:ab:5e:3e:a3:97:e2:b2:fe:37:0f:93:ff:cf:3c: 4d:19:4d:b3:91:7c:d7:77:ee:5a:38:7b:44:03:ea: ca:72:25:57:62:59:b6:f4:58:a8:5b:c2:85:a9:2b: ae:49:5a:9b:ce:36:57:81:17:43:37:a3:ee:db:49: 8e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AF:AB:26:28:3D:07:45:94:72:9B:46:3C:8D:9E:D1:58:52:01:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c33046e9-966a-3a2f-911d-1a8213500247.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:74:09:83:39:e8:54:c6:e8:d3:e7:e4:b1:7b:ff:af:6d:36: d4:4d:18:b8:6a:4d:cb:14:ed:c8:68:ac:7b:96:01:07:cf:58: 4b:6b:46:da:93:e8:db:c2:e5:0a:36:ed:e8:12:00:16:aa:47: 57:a1:38:c1:04:3e:af:af:c1:03:f1:4e:0a:f5:68:8a:99:5e: af:ef:f0:26:11:0a:1d:35:7b:ef:2a:ea:8f:0a:d4:4c:c8:70: be:49:8e:7d:7b:be:0c:4b:87:eb:69:91:9b:ab:b3:6b:92:f6: 88:f8:c4:90:d0:88:17:ba:cd:0e:b5:3d:3b:f1:42:f7:be:ea: 78:22:dd:f4:47:06:c7:46:a8:64:53:09:8e:29:64:d4:10:9d: 83:be:bd:2e:1b:26:db:5d:37:88:2e:61:1a:d3:2f:6c:5a:d4: 6a:01:5d:4b:04:ea:fd:74:81:aa:99:97:22:60:cd:2c:85:7d: 64:38:2d:c3:fc:62:6d:a4:c3:26:bb:11:9c:fe:ab:08:c9:74: bd:6f:4a:2f:1d:24:63:09:02:55:0f:2f:a0:20:7f:82:69:dc: 1f:7b:08:3c:2c:f7:ec:b0:c0:23:29:2b:85:b3:55:9d:9a:1e: 9c:1d:28:47:4f:c3:8c:68:3a:60:dc:01:a7:9b:99:06:95:06: 71:ee:33:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6emdCTpKEs0ZGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk N2U2NWU1YmMtZDM1Ny00ZGI0LWFmNTUtYzVhYWQ3MzQ2MGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj8+a56qtIYd3taIrtN7qkAanfwB3BboqjeU jG402kAAeRecem7Drkq/bAZT9gipgXiniWjQXPGYTWE1Tz6V8gwPd+Hv5wx/dqG/ DPMlLChuzNNbST1Y+p9354soSr+p3Ra/qsn3YGAqovFFLjpy1E8Usj0pQ1kLNNpP 3Ce8x6dYulK0T4GxPQWnRexCHlp7Nt0fSXK2bNwDff5uuQUVvh8YXpAjJYtjKVdf F/dwaI4GWppSNhe4A9ivkdR+NyfGfapRq14+o5fisv43D5P/zzxNGU2zkXzXd+5a OHtEA+rKciVXYlm29FioW8KFqSuuSVqbzjZXgRdDN6Pu20mOAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2vqyYoPQdFlHKbRjyNntFYUgFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzMzMDQ2ZTktOTY2YS0z YTJmLTkxMWQtMWE4MjEzNTAwMjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9pfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB0CYM56FTG6NPn5LF7/69tNtRNGLhqTcsU7chorHuWAQfPWEtrRtqT 6NvC5Qo27egSABaqR1ehOMEEPq+vwQPxTgr1aIqZXq/v8CYRCh01e+8q6o8K1EzI cL5Jjn17vgxLh+tpkZurs2uS9oj4xJDQiBe6zQ61PTvxQve+6ngi3fRHBsdGqGRT CY4pZNQQnYO+vS4bJttdN4guYRrTL2xa1GoBXUsE6v10gaqZlyJgzSyFfWQ4LcP8 Ym2kwya7EZz+qwjJdL1vSi8dJGMJAlUPL6Agf4Jp3B97CDws9+ywwCMpK4WzVZ2a HpwdKEdPw4xoOmDcAaebmQaVBnHuM2I= -----END CERTIFICATE-----Generated at Tue May 6 04:04:11 2025 by rpki-client