$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9d9fc0c-dd8a-3711-bba0-f53282d78942.roa File: f9d9fc0c-dd8a-3711-bba0-f53282d78942.roa (raw, json) Hash identifier: U7uBPC7RuLTaXw1F7lwovZ+gHJ/H6VKkGPAH0eH7ZtM= Subject key identifier: AB:28:1F:1A:E7:A6:26:69:82:AE:9B:47:46:45:94:B0:FD:BF:E7:30 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849A8E9EA9071CEADC723F78E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9d9fc0c-dd8a-3711-bba0-f53282d78942.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.218.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:ea:90:71:ce:ad:c7:23:f7:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=61bf89b1-e21c-4bb5-b894-bbbe4cbfd1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:73:d2:33:bd:0a:20:f7:f4:1b:8d:43:54:ed: 3a:12:f5:35:a1:9f:1a:88:67:9e:9f:95:3d:53:d6: 56:b9:88:0f:10:a2:b4:1a:dc:12:eb:db:1c:9c:0e: 21:4c:31:0c:cb:b2:fb:ec:ec:34:9a:22:04:36:0a: c0:67:db:5b:2b:81:40:a4:c8:95:44:ea:48:c1:9d: 66:b1:d1:b3:fc:a1:8b:6f:02:20:45:d1:37:bc:fe: b8:e4:a0:a1:83:e3:a6:17:d0:dc:f7:0f:b5:57:7e: f7:a4:e0:ed:e7:05:d6:ac:5e:23:f3:53:58:5c:28: 87:3c:1b:20:74:c6:54:a2:75:91:7f:39:5e:31:98: 3b:52:59:e1:e4:8f:cd:c5:79:fe:91:5f:55:39:db: 16:82:86:c7:03:00:55:da:ed:55:a5:4d:8a:0a:eb: 97:09:84:6d:62:48:de:bf:1d:1c:f0:18:52:bf:f5: cb:94:a7:4b:50:ec:ae:c7:01:d6:1a:c3:78:87:90: a7:5f:45:5c:15:27:0e:02:64:cd:99:39:d4:9a:ae: 56:63:16:e7:64:41:12:6d:1c:da:54:eb:2c:1d:47: f8:eb:55:d9:e3:19:92:ae:2d:2c:80:79:a7:7a:42: e6:da:1d:10:5c:d4:1c:ab:71:25:ae:a2:d4:94:9c: f2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:28:1F:1A:E7:A6:26:69:82:AE:9B:47:46:45:94:B0:FD:BF:E7:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9d9fc0c-dd8a-3711-bba0-f53282d78942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:e5:2d:68:e3:4d:7b:d2:30:a2:63:59:2a:5a:d7:03:56:41: 9f:40:2f:4b:8f:92:c3:96:a2:08:36:e6:b7:a1:4d:de:5f:34: cf:4d:a9:36:46:2f:79:1f:28:a0:70:a4:c9:cf:d8:e7:25:8e: a6:97:a2:e3:5c:c4:cf:1e:ee:40:aa:33:16:d5:5c:71:21:44: e1:b9:eb:8b:53:3b:41:b8:3e:6f:ee:0a:55:48:d8:ca:db:53: 20:b3:ae:04:76:2c:5c:ea:07:b2:18:e9:de:c3:43:f2:45:b6: 42:00:e1:dc:ea:f0:aa:6c:58:f7:df:1b:0f:c5:44:2a:41:90: d6:de:ce:47:59:f8:2c:52:a7:7a:c2:bb:ed:82:73:fc:46:4c: cd:4c:95:04:62:b3:07:7f:f3:f4:ea:75:17:d6:d2:6a:6e:54: 1a:2f:2f:20:6d:0c:1e:b6:02:9e:6a:0d:03:92:ed:95:91:95: 45:1d:74:df:5a:ea:f3:99:14:7a:9b:ff:01:fd:0e:d1:20:2b: 7d:58:e9:45:14:fa:e1:91:73:47:05:c4:52:83:3b:08:d9:1a: 65:7f:21:27:42:25:f7:84:56:26:93:a6:25:93:62:e2:1b:14: ea:f0:e2:40:9b:a8:ef:7f:d4:95:50:a8:a6:42:d1:89:c3:36: d2:91:26:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6eqQcc6txyP3joAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk NjFiZjg5YjEtZTIxYy00YmI1LWI4OTQtYmJiZTRjYmZkMWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3PSM70KIPf0G41DVO06EvU1oZ8aiGeen5U9 U9ZWuYgPEKK0GtwS69scnA4hTDEMy7L77Ow0miIENgrAZ9tbK4FApMiVROpIwZ1m sdGz/KGLbwIgRdE3vP645KChg+OmF9Dc9w+1V373pODt5wXWrF4j81NYXCiHPBsg dMZUonWRfzleMZg7Ulnh5I/NxXn+kV9VOdsWgobHAwBV2u1VpU2KCuuXCYRtYkje vx0c8BhSv/XLlKdLUOyuxwHWGsN4h5CnX0VcFScOAmTNmTnUmq5WYxbnZEESbRza VOssHUf461XZ4xmSri0sgHmnekLm2h0QXNQcq3ElrqLUlJzywQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsoHxrnpiZpgq6bR0ZFlLD9v+cwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjlkOWZjMGMtZGQ4YS0z NzExLWJiYTAtZjUzMjgyZDc4OTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9rbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLlLWjjTXvSMKJjWSpa1wNWQZ9AL0uPksOWogg25rehTd5fNM9NqTZG L3kfKKBwpMnP2OcljqaXouNcxM8e7kCqMxbVXHEhROG564tTO0G4Pm/uClVI2Mrb UyCzrgR2LFzqB7IY6d7DQ/JFtkIA4dzq8KpsWPffGw/FRCpBkNbezkdZ+CxSp3rC u+2Cc/xGTM1MlQRiswd/8/TqdRfW0mpuVBovLyBtDB62Ap5qDQOS7ZWRlUUddN9a 6vOZFHqb/wH9DtEgK31Y6UUU+uGRc0cFxFKDOwjZGmV/ISdCJfeEViaTpiWTYuIb FOrw4kCbqO9/1JVQqKZC0YnDNtKRJvA= -----END CERTIFICATE-----Generated at Mon May 5 09:56:46 2025 by rpki-client