$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e44e4d8c-d4c9-359f-9855-eda82406cd90.roa File: e44e4d8c-d4c9-359f-9855-eda82406cd90.roa (raw, json) Hash identifier: hx1tJHulW4/MpI9Bow5m3aizsFVuODYIqEshskee5No= Subject key identifier: 42:B6:28:65:BD:D7:5B:97:20:80:C4:2D:88:EF:ED:E6:F4:29:59:3F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF4954CE6E486C0E73CF300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e44e4d8c-d4c9-359f-9855-eda82406cd90.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.212.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:95:4c:e6:e4:86:c0:e7:3c:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=5a8681b0-c9fa-49d1-aa25-96afb9efc910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f6:e4:20:ee:cb:63:80:66:8f:ed:87:a2:c0: 99:e4:07:b0:2f:cf:c1:8a:d0:2d:dc:64:44:3f:d9: cc:b3:a7:ca:a4:ae:35:18:71:09:84:c6:ff:e8:71: 94:0f:88:37:92:a2:f3:1b:63:51:a8:e2:e7:c7:57: d4:88:75:ad:7c:cd:b3:41:09:92:8d:af:5e:b2:2d: 5b:5f:4b:32:09:13:19:40:2f:78:c1:64:bf:14:5e: ab:4a:84:90:57:15:43:91:c5:0a:23:ec:db:63:d1: 99:ca:39:e1:ae:7e:19:f9:78:0f:85:e9:cc:a6:a4: 7f:61:6b:47:7d:ed:21:92:b8:ac:0e:fa:38:e0:00: d7:10:7e:1a:44:79:ad:ec:cd:23:24:52:05:40:79: 93:bd:3f:ac:c1:8f:56:6c:89:26:a2:af:06:42:80: 4e:43:5e:94:34:53:67:83:06:dc:d5:51:17:b1:55: f2:4e:3e:a4:6f:55:fc:21:74:c3:62:d9:78:d0:a3: 09:1e:df:24:81:11:9c:85:d3:b0:1d:7e:2e:26:84: e9:b1:95:a4:b9:ad:39:6d:1e:c5:b3:e3:9f:3c:07: 53:15:5e:c8:dd:70:3f:13:93:10:f8:27:41:07:52: c7:ee:58:77:d1:9f:e0:52:ac:67:57:91:41:2e:31: 91:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B6:28:65:BD:D7:5B:97:20:80:C4:2D:88:EF:ED:E6:F4:29:59:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e44e4d8c-d4c9-359f-9855-eda82406cd90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:40:3c:28:37:0e:8c:f1:1b:97:2c:39:c2:54:4b:b3:2b:c7: b5:be:35:5b:c5:1a:df:fe:d3:10:15:1c:cc:ed:31:4c:5a:a8: eb:3c:19:fe:ba:ec:36:c5:0d:61:49:5d:d8:16:64:06:e4:74: 2d:e3:5e:c3:57:b3:62:d7:cd:e9:be:fd:4d:be:f5:63:10:2f: 5f:b8:04:61:fe:e4:ca:c7:51:2f:1c:f2:cf:71:64:18:15:3e: 02:fb:0c:59:36:e1:e8:aa:84:c3:7b:e8:a0:9e:29:d7:7a:a6: 00:34:37:3b:21:06:3c:b9:84:76:b5:82:b9:a2:4a:75:0d:05: 68:df:da:8c:6d:8f:59:ae:51:c6:6f:7e:c0:5f:fb:34:fc:bb: 04:05:6a:5c:9e:8c:4d:dd:7f:f1:78:ad:4d:54:52:91:89:85: 67:d8:bb:b4:81:32:92:a2:be:84:29:09:90:f7:72:2a:28:ca: f9:01:e6:17:d0:ad:bb:ea:82:e7:f1:2a:95:6b:da:db:9a:50: 56:ab:5a:7c:72:2e:5f:bb:80:19:e0:20:de:5c:9c:b4:f4:5e: 2b:33:2d:17:6d:c2:68:e2:d3:bf:33:92:78:b3:8a:2d:be:21: b0:98:05:f9:07:df:cf:68:b0:b4:1f:c9:dc:d1:f4:31:4d:f7: 44:de:b2:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JVM5uSGwOc88wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NWE4NjgxYjAtYzlmYS00OWQxLWFhMjUtOTZhZmI5ZWZjOTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PbkIO7LY4Bmj+2HosCZ5AewL8/BitAt3GRE P9nMs6fKpK41GHEJhMb/6HGUD4g3kqLzG2NRqOLnx1fUiHWtfM2zQQmSja9esi1b X0syCRMZQC94wWS/FF6rSoSQVxVDkcUKI+zbY9GZyjnhrn4Z+XgPhenMpqR/YWtH fe0hkrisDvo44ADXEH4aRHmt7M0jJFIFQHmTvT+swY9WbIkmoq8GQoBOQ16UNFNn gwbc1VEXsVXyTj6kb1X8IXTDYtl40KMJHt8kgRGchdOwHX4uJoTpsZWkua05bR7F s+OfPAdTFV7I3XA/E5MQ+CdBB1LH7lh30Z/gUqxnV5FBLjGREwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEK2KGW911uXIIDELYjv7eb0KVk/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTQ0ZTRkOGMtZDRjOS0z NTlmLTk4NTUtZWRhODI0MDZjZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9SUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxAPCg3DozxG5csOcJUS7Mrx7W+NVvFGt/+0xAVHMztMUxaqOs8Gf66 7DbFDWFJXdgWZAbkdC3jXsNXs2LXzem+/U2+9WMQL1+4BGH+5MrHUS8c8s9xZBgV PgL7DFk24eiqhMN76KCeKdd6pgA0NzshBjy5hHa1grmiSnUNBWjf2oxtj1muUcZv fsBf+zT8uwQFalyejE3df/F4rU1UUpGJhWfYu7SBMpKivoQpCZD3ciooyvkB5hfQ rbvqgufxKpVr2tuaUFarWnxyLl+7gBngIN5cnLT0XiszLRdtwmji078zknizii2+ IbCYBfkH389osLQfydzR9DFN90Tesu0= -----END CERTIFICATE-----Generated at Mon May 5 14:32:53 2025 by rpki-client