$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9181fa2-a63c-38c2-8997-42c8689ddcb7.roa File: d9181fa2-a63c-38c2-8997-42c8689ddcb7.roa (raw, json) Hash identifier: 5WLlOx4Rey1Xxf0AgMbaI+3kFaA6LzX9Re9arp1jyDM= Subject key identifier: A6:F8:EE:B6:53:D5:A0:D1:14:54:6E:5F:57:F8:52:BD:FF:F2:EB:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF47E9C22327C61882E800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9181fa2-a63c-38c2-8997-42c8689ddcb7.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.216.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:47:e9:c2:23:27:c6:18:82:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=7b1599fb-5e78-49a0-8e7d-ef095e908454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7d:51:ae:ad:62:92:3f:5f:ef:08:3d:89:1f: 81:b2:8c:ec:88:35:62:fc:bc:4f:7c:b8:a4:68:ee: 62:ad:00:e9:4f:8f:f5:1a:f4:22:1c:57:4a:2e:1f: 92:97:cc:47:48:b9:31:50:a2:7a:14:f8:28:42:c7: 57:4d:13:50:45:b5:67:3e:6d:65:3f:c3:77:7b:e3: ae:13:0a:87:a2:56:8f:52:c1:73:ea:1c:28:28:fe: e3:67:09:66:99:7d:9d:62:0c:e6:5c:3c:c7:d1:6b: 41:af:c1:f4:bf:ac:b9:78:6a:c5:c2:38:d0:b8:ec: 6b:1b:52:c3:5a:11:50:c5:ba:3b:6c:0c:13:12:87: ea:3d:ce:7f:da:a0:50:b2:69:58:88:44:10:88:fe: 60:34:97:e0:d7:5e:d9:c9:e0:9d:fc:f7:f9:d7:e4: 02:e3:c3:42:b3:d0:1d:a6:62:16:06:81:3b:d5:7d: 05:20:72:50:62:82:8a:54:7f:12:47:2c:33:d7:b6: 35:02:ab:d4:2c:17:47:9b:2c:d4:e0:2d:fc:c0:6c: 56:fc:85:d4:64:54:af:26:91:2d:98:80:26:a8:e7: 6b:a2:07:56:89:0e:df:4f:a1:b8:fb:29:b2:3b:04: ea:8a:e2:da:aa:09:2b:cf:7a:95:f5:a2:73:cb:ac: ac:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F8:EE:B6:53:D5:A0:D1:14:54:6E:5F:57:F8:52:BD:FF:F2:EB:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9181fa2-a63c-38c2-8997-42c8689ddcb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:a6:d2:c6:62:6c:86:bd:66:a1:2b:cb:cf:eb:d3:d3:dc:7b: ff:72:21:59:4a:dd:b9:b3:98:50:2c:c0:0c:d4:64:68:2a:0f: 36:7b:87:42:f2:54:8b:30:87:f5:b6:d3:6d:23:2f:1a:5f:73: 44:4a:6f:8a:a3:00:60:65:d5:5a:0a:31:51:c0:23:ae:6d:ff: e0:60:da:00:67:e4:08:97:57:ee:9f:7a:5d:7c:ee:4c:fb:8f: 25:cd:5f:fa:ff:2e:6a:4a:ec:57:22:ae:72:2d:e1:5d:91:57: 01:b1:cb:a0:db:1e:d8:1a:01:f3:f1:39:2d:99:c2:2d:3b:fb: fd:90:e5:30:ce:fd:97:43:49:9a:2a:92:22:bb:33:01:fa:c2: ab:c1:df:e8:96:63:f8:09:f2:58:a6:3d:b2:31:c0:78:3c:a6: 45:ab:d6:18:a6:f1:c1:c5:ab:71:6f:34:50:a7:6a:f4:a1:10: ac:64:a3:54:28:f5:1e:76:65:c7:1d:02:a3:98:85:20:90:e8: c6:0d:6b:46:82:7e:6c:e2:01:49:bd:bb:44:ae:72:ed:34:80: 34:38:b8:ea:b5:85:48:a0:9f:2d:f0:af:9b:fc:c6:0e:1e:70: 35:02:cc:81:f0:a5:cb:2a:11:35:2c:94:79:dc:d4:71:29:a4: ab:49:8e:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0fpwiMnxhiC6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk N2IxNTk5ZmItNWU3OC00OWEwLThlN2QtZWYwOTVlOTA4NDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun1Rrq1ikj9f7wg9iR+BsozsiDVi/LxPfLik aO5irQDpT4/1GvQiHFdKLh+Sl8xHSLkxUKJ6FPgoQsdXTRNQRbVnPm1lP8N3e+Ou EwqHolaPUsFz6hwoKP7jZwlmmX2dYgzmXDzH0WtBr8H0v6y5eGrFwjjQuOxrG1LD WhFQxbo7bAwTEofqPc5/2qBQsmlYiEQQiP5gNJfg117ZyeCd/Pf51+QC48NCs9Ad pmIWBoE71X0FIHJQYoKKVH8SRywz17Y1AqvULBdHmyzU4C38wGxW/IXUZFSvJpEt mIAmqOdrogdWiQ7fT6G4+ymyOwTqiuLaqgkrz3qV9aJzy6ysUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKb47rZT1aDRFFRuX1f4Ur3/8usRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDkxODFmYTItYTYzYy0z OGMyLTg5OTctNDJjODY4OWRkY2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9iRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACym0sZibIa9ZqEry8/r09Pce/9yIVlK3bmzmFAswAzUZGgqDzZ7h0Ly VIswh/W2020jLxpfc0RKb4qjAGBl1VoKMVHAI65t/+Bg2gBn5AiXV+6fel187kz7 jyXNX/r/LmpK7FcirnIt4V2RVwGxy6DbHtgaAfPxOS2Zwi07+/2Q5TDO/ZdDSZoq kiK7MwH6wqvB3+iWY/gJ8limPbIxwHg8pkWr1him8cHFq3FvNFCnavShEKxko1Qo 9R52ZccdAqOYhSCQ6MYNa0aCfmziAUm9u0Sucu00gDQ4uOq1hUigny3wr5v8xg4e cDUCzIHwpcsqETUslHnc1HEppKtJjm8= -----END CERTIFICATE-----Generated at Mon May 5 09:14:53 2025 by rpki-client