$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1415253-e0a1-328d-a6f4-133efdcafedc.roa File: d1415253-e0a1-328d-a6f4-133efdcafedc.roa (raw, json) Hash identifier: xdKq2RR/2r96aswRcbJp2U9tzGOQadw3gCpRsZCtjpI= Subject key identifier: 63:FD:75:7D:87:71:33:4D:A9:4A:52:12:9B:ED:9A:82:B9:E9:0A:79 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849A8E9EA485941B91073022500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1415253-e0a1-328d-a6f4-133efdcafedc.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 16625 IP address blocks: 23.218.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:ea:48:59:41:b9:10:73:02:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=0a177c3f-aa40-4254-a7e8-85c66ac56924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1b:89:47:ca:9f:46:85:a7:eb:06:7f:ee:ea: 30:46:f0:40:7a:6d:71:d0:65:79:28:24:17:37:bf: f7:c8:77:e9:64:b7:78:ec:44:97:b9:88:87:6f:1d: ac:be:97:bd:c3:aa:63:04:dd:25:e0:a0:9d:9a:f9: 55:53:0a:98:8d:a5:f4:7a:81:ea:17:f0:61:52:39: 94:3f:5c:94:f6:df:59:1c:97:a5:5c:b6:7d:47:fd: 0e:9b:ef:27:e4:74:f3:a6:8b:b9:ab:06:5e:ac:de: 72:0f:c4:0c:da:d8:a7:06:6b:0e:40:91:ea:08:f6: db:9c:f1:cf:a0:42:a4:e4:de:35:7e:40:78:03:2e: 0f:2b:d9:f7:58:65:5b:a0:fb:89:cd:c9:33:49:bb: 81:6f:78:5f:f0:71:27:59:d5:0e:6b:f9:53:23:50: eb:d5:47:20:e0:85:c1:a1:45:d6:6e:e2:76:f1:4b: 8d:73:be:78:3f:82:20:2c:be:43:d0:78:05:ba:c0: 52:c0:7e:d3:51:e5:c0:cb:76:86:a7:00:34:1e:9c: 6f:d5:fe:95:0b:2e:77:ef:45:74:72:57:bd:3a:44: 09:ef:71:00:dc:3c:e2:c0:0f:5c:db:a3:9f:a3:4e: ee:39:d2:c4:60:d9:bb:4d:8f:bc:4b:3c:cb:96:e3: 0c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FD:75:7D:87:71:33:4D:A9:4A:52:12:9B:ED:9A:82:B9:E9:0A:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1415253-e0a1-328d-a6f4-133efdcafedc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:69:38:23:9f:3f:9f:b7:e3:1f:21:f8:33:2c:42:5f:07:8c: 27:37:7c:0c:06:4a:62:4d:67:8b:9a:c6:a6:4d:68:d8:7b:07: ea:82:c5:69:19:1b:a8:77:6f:02:fc:da:d4:45:6c:a0:b6:35: fe:bb:77:f7:2e:7c:d6:dd:a8:a7:34:0c:f8:ab:d7:0d:98:aa: 33:15:e2:11:ed:7a:d2:70:0b:0c:c8:ee:ba:33:58:e3:af:c9: f1:64:e7:1a:bc:a6:d3:95:5e:16:58:28:96:48:00:08:4d:50: d8:3a:a0:75:b3:73:77:6e:96:db:b9:f6:ab:eb:e4:dd:ef:d0: 16:0f:be:90:56:aa:56:db:de:b4:78:ad:6e:24:76:83:ed:69: c3:0d:f7:27:88:f5:e6:8b:f7:05:70:f9:35:f3:4d:58:26:dd: 11:72:c7:5c:78:e0:00:d5:a1:00:f8:31:fb:0a:d9:58:ae:ae: a4:db:88:97:9d:53:dd:2c:ab:2b:1f:e3:51:79:33:59:8f:6a: 55:26:c6:44:f9:9f:8b:ef:5d:8e:08:f8:a0:86:5e:1d:9a:67: bf:37:0f:ff:78:cb:8c:d8:bb:42:84:a7:2e:5d:8b:7c:a7:6b: d2:c0:2b:b0:a7:c4:62:e1:c1:fa:8a:d6:c3:7b:56:2f:d1:fb: 1c:e1:5d:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6epIWUG5EHMCJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk MGExNzdjM2YtYWE0MC00MjU0LWE3ZTgtODVjNjZhYzU2OTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthuJR8qfRoWn6wZ/7uowRvBAem1x0GV5KCQX N7/3yHfpZLd47ESXuYiHbx2svpe9w6pjBN0l4KCdmvlVUwqYjaX0eoHqF/BhUjmU P1yU9t9ZHJelXLZ9R/0Om+8n5HTzpou5qwZerN5yD8QM2tinBmsOQJHqCPbbnPHP oEKk5N41fkB4Ay4PK9n3WGVboPuJzckzSbuBb3hf8HEnWdUOa/lTI1Dr1Ucg4IXB oUXWbuJ28UuNc754P4IgLL5D0HgFusBSwH7TUeXAy3aGpwA0Hpxv1f6VCy5370V0 cle9OkQJ73EA3DziwA9c26Ofo07uOdLEYNm7TY+8SzzLluMMIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGP9dX2HcTNNqUpSEpvtmoK56Qp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDE0MTUyNTMtZTBhMS0z MjhkLWE2ZjQtMTMzZWZkY2FmZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9rMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlpOCOfP5+34x8h+DMsQl8HjCc3fAwGSmJNZ4uaxqZNaNh7B+qCxWkZ G6h3bwL82tRFbKC2Nf67d/cufNbdqKc0DPir1w2YqjMV4hHtetJwCwzI7rozWOOv yfFk5xq8ptOVXhZYKJZIAAhNUNg6oHWzc3dultu59qvr5N3v0BYPvpBWqlbb3rR4 rW4kdoPtacMN9yeI9eaL9wVw+TXzTVgm3RFyx1x44ADVoQD4MfsK2ViurqTbiJed U90sqysf41F5M1mPalUmxkT5n4vvXY4I+KCGXh2aZ783D/94y4zYu0KEpy5di3yn a9LAK7CnxGLhwfqK1sN7Vi/R+xzhXaM= -----END CERTIFICATE-----Generated at Wed May 7 22:00:04 2025 by rpki-client