$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb5dde3a-d701-384b-b852-f43ec8f600d3.roa File: cb5dde3a-d701-384b-b852-f43ec8f600d3.roa (raw, json) Hash identifier: 1BQqFXcYvj9WjxZDrSQnQWE1KhZkVaTrMGXCbNvrX4s= Subject key identifier: BB:70:01:A0:ED:B0:48:14:0D:96:02:69:63:3D:D6:5D:BF:15:AA:89 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849A8E9EB8D05343ED65DFBA670 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb5dde3a-d701-384b-b852-f43ec8f600d3.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.219.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:eb:8d:05:34:3e:d6:5d:fb:a6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=8d5bdf9d-6fef-418f-b390-887ffd787b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:af:dd:0b:86:a7:9e:e7:08:03:bb:48:29:bb: 12:55:4a:f2:5a:57:1b:1d:9a:b7:3a:c8:d9:39:78: 5b:8e:96:95:a9:d3:f8:c0:1b:3b:25:ed:1d:b4:71: 59:f0:ae:dc:c6:78:e6:f2:0b:1d:7a:14:2e:8a:d2: 66:c4:37:e6:73:b8:ea:f8:25:3e:5a:cf:3d:e5:02: 49:8e:bc:05:5f:c2:64:0f:e0:08:3f:ca:bf:74:c1: da:12:b9:b1:65:18:22:e2:87:75:0e:d0:8e:39:78: 7b:77:b6:fe:19:6a:cd:c4:99:cd:bc:f8:53:b4:eb: 4a:4d:03:57:e6:e1:aa:c1:d8:9e:aa:19:44:6e:a5: 41:7d:83:91:09:3d:7a:90:42:69:59:3e:cd:3e:b5: b9:9c:56:6d:41:a0:a8:b3:fe:97:c8:97:1e:b8:07: 5c:4a:ab:fe:17:01:cf:4f:ca:d9:5c:d5:ae:7f:47: ea:59:5b:1e:61:95:6c:52:7d:31:0f:4f:f8:19:8b: 2a:c1:a5:07:8a:69:10:96:82:4c:d4:ac:7e:95:9e: c3:3e:d7:12:b4:61:51:4e:9f:b1:5e:c8:18:f0:45: 37:dc:c0:da:68:09:91:87:2d:8b:07:ad:d6:73:a2: 05:1a:6f:d7:8a:ba:8f:01:54:78:c4:48:2a:00:8c: ea:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:70:01:A0:ED:B0:48:14:0D:96:02:69:63:3D:D6:5D:BF:15:AA:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb5dde3a-d701-384b-b852-f43ec8f600d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:d2:95:85:85:2d:44:4f:09:db:e8:0e:a1:54:41:35:31:04: 59:11:b2:0d:f5:18:98:89:56:fd:ff:e1:88:6e:87:f1:e9:ef: 06:f2:84:fc:1b:95:e5:21:d6:3f:6e:0c:39:61:7f:2f:c0:fb: ff:9b:21:02:c0:bf:d6:45:59:90:ae:0c:82:86:db:4e:fd:ea: 65:60:39:15:70:f3:e2:e1:d9:f3:26:97:dd:94:64:da:74:45: 24:de:dd:48:35:06:6d:d7:32:d8:e6:86:74:c9:1a:4c:f5:0f: 9e:21:5f:9c:ba:9e:43:2a:b8:eb:57:50:7e:3a:d3:d6:0f:d6: 48:c3:3b:56:af:2d:a3:4b:1d:84:25:a4:5e:4f:cb:f8:a1:87: ee:e7:10:f5:ed:69:29:f4:ff:d4:46:3c:e0:41:9c:1c:aa:43: ee:e4:c7:24:4f:39:58:f3:bf:5e:74:41:4f:43:d4:12:a6:71: b2:06:73:52:62:f5:8d:1c:e1:ac:e7:70:ff:5d:a9:9e:59:0b: 5e:81:3f:22:0b:85:c3:1d:91:a7:fd:5f:fb:52:39:7e:55:e7: 01:26:ba:fe:08:39:32:76:07:cc:bb:f6:ac:bb:85:a5:33:8c: 32:56:ea:28:a8:54:47:af:07:1e:1d:af:21:3c:f4:49:9a:89: 33:1b:13:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6euNBTQ+1l37pnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk OGQ1YmRmOWQtNmZlZi00MThmLWIzOTAtODg3ZmZkNzg3Yjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja/dC4annucIA7tIKbsSVUryWlcbHZq3OsjZ OXhbjpaVqdP4wBs7Je0dtHFZ8K7cxnjm8gsdehQuitJmxDfmc7jq+CU+Ws895QJJ jrwFX8JkD+AIP8q/dMHaErmxZRgi4od1DtCOOXh7d7b+GWrNxJnNvPhTtOtKTQNX 5uGqwdieqhlEbqVBfYORCT16kEJpWT7NPrW5nFZtQaCos/6XyJceuAdcSqv+FwHP T8rZXNWuf0fqWVseYZVsUn0xD0/4GYsqwaUHimkQloJM1Kx+lZ7DPtcStGFRTp+x XsgY8EU33MDaaAmRhy2LB63Wc6IFGm/XirqPAVR4xEgqAIzq+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtwAaDtsEgUDZYCaWM91l2/FaqJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2I1ZGRlM2EtZDcwMS0z ODRiLWI4NTItZjQzZWM4ZjYwMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9tAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvSlYWFLURPCdvoDqFUQTUxBFkRsg31GJiJVv3/4Yhuh/Hp7wbyhPwb leUh1j9uDDlhfy/A+/+bIQLAv9ZFWZCuDIKG20796mVgORVw8+Lh2fMml92UZNp0 RSTe3Ug1Bm3XMtjmhnTJGkz1D54hX5y6nkMquOtXUH4609YP1kjDO1avLaNLHYQl pF5Py/ihh+7nEPXtaSn0/9RGPOBBnByqQ+7kxyRPOVjzv150QU9D1BKmcbIGc1Ji 9Y0c4azncP9dqZ5ZC16BPyILhcMdkaf9X/tSOX5V5wEmuv4IOTJ2B8y79qy7haUz jDJW6iioVEevBx4dryE89EmaiTMbE1U= -----END CERTIFICATE-----Generated at Mon May 5 15:37:28 2025 by rpki-client