$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/114992f9-18ba-3de0-88ed-3d23f7e95654.roa File: 114992f9-18ba-3de0-88ed-3d23f7e95654.roa (raw, json) Hash identifier: sQ+UEt50vQ2K1eBLgVCf47jRdajpoqpMZ7G5uP9dv+Q= Subject key identifier: 4E:B2:74:BB:51:05:BE:2D:11:E0:EC:D3:3A:72:1C:1F:E2:CB:05:93 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BBBB95FA7F4A2C8B8213CA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/114992f9-18ba-3de0-88ed-3d23f7e95654.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.211.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:95:fa:7f:4a:2c:8b:82:13:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=3175c79b-f443-46f6-b8dc-9dcb600d53c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d9:49:d2:f6:e4:7a:4b:ce:8a:8f:b9:01:9c: 31:6d:e6:75:fd:54:16:d7:cf:cf:30:56:1e:c7:42: dd:4a:8f:74:bf:c6:f5:8d:c9:50:8e:83:cc:c6:ab: 2e:80:47:c8:2a:c9:fb:67:b9:e6:7a:6e:6c:81:a6: d3:d4:2f:3b:f4:c9:ec:e8:12:35:c7:04:6d:04:39: 16:7f:3f:86:11:34:84:a0:06:f3:0d:30:4d:c5:2e: 98:d8:a2:91:8e:b1:07:41:39:4c:7a:d3:f4:31:1c: 7a:54:cb:3b:71:9f:ef:95:a6:3c:9d:4e:ba:04:20: b4:41:55:23:11:b7:6e:cf:69:4d:1e:84:70:75:49: dd:f1:9c:a2:78:a3:7e:f5:dd:02:90:04:d9:8e:b6: 0b:1b:2b:34:a2:d0:9c:c1:67:46:24:39:68:1f:aa: 61:9b:4c:2b:b8:9c:e6:b0:e7:42:c2:44:93:3d:3b: 02:09:38:f9:77:ce:fa:f0:b0:e0:50:3d:6d:f0:d1: a8:ec:72:51:a5:96:4f:2d:a8:55:0d:87:dc:34:80: b2:11:c7:85:6c:2b:da:7a:6b:0e:30:8a:22:bc:8d: 69:66:47:91:45:84:d3:8f:b9:3b:45:9a:f7:45:22: 20:c2:c9:73:77:8c:e1:4c:e9:64:79:f4:d3:0d:a5: 89:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B2:74:BB:51:05:BE:2D:11:E0:EC:D3:3A:72:1C:1F:E2:CB:05:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/114992f9-18ba-3de0-88ed-3d23f7e95654.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:c1:02:49:3a:e9:27:76:bb:06:89:41:76:ba:1e:5b:c3:48: 3e:c4:6a:9d:b8:99:60:fa:f3:7d:79:0b:a6:14:d4:14:1d:ce: 21:27:31:24:6f:9a:d3:ba:2d:b5:53:d2:b9:a5:45:ac:1b:ad: cf:8c:83:c5:a9:ed:bc:0a:3a:1a:ac:95:98:9b:13:97:5c:8f: cd:9d:f9:e6:2d:28:08:18:e0:79:5b:b9:87:9b:08:9b:4f:eb: 58:39:47:53:91:77:64:75:3a:75:ce:4d:98:f4:d2:cc:6e:ab: be:a9:f2:fe:ac:b2:1b:a5:79:fb:8f:88:6b:e4:ac:86:e9:66: b9:64:14:e8:b5:58:2c:3f:39:8f:08:5c:f6:55:37:d5:49:33: 4e:e1:69:23:14:7d:95:67:12:c3:74:fd:47:f0:cb:4e:cc:eb: 79:3d:30:a7:b1:c1:86:e6:85:ed:33:58:60:84:c6:42:c6:0c: 6d:07:a9:fc:29:fa:fa:00:f3:71:d8:95:6e:d6:12:7d:af:b7: cc:9b:69:6c:a7:d6:9d:b0:98:36:fb:b4:b5:a4:9d:43:b9:d8: 88:2c:a7:e0:bd:82:1a:76:af:21:ad:1c:f1:fe:bf:7d:ac:79: 3a:e8:df:bb:2b:3a:b5:f6:ce:d5:53:27:45:f6:73:4a:a6:19: 53:ad:37:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u5X6f0osi4ITyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk MzE3NWM3OWItZjQ0My00NmY2LWI4ZGMtOWRjYjYwMGQ1M2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dlJ0vbkekvOio+5AZwxbeZ1/VQW18/PMFYe x0LdSo90v8b1jclQjoPMxqsugEfIKsn7Z7nmem5sgabT1C879Mns6BI1xwRtBDkW fz+GETSEoAbzDTBNxS6Y2KKRjrEHQTlMetP0MRx6VMs7cZ/vlaY8nU66BCC0QVUj Ebduz2lNHoRwdUnd8ZyieKN+9d0CkATZjrYLGys0otCcwWdGJDloH6phm0wruJzm sOdCwkSTPTsCCTj5d8768LDgUD1t8NGo7HJRpZZPLahVDYfcNICyEceFbCvaemsO MIoivI1pZkeRRYTTj7k7RZr3RSIgwslzd4zhTOlkefTTDaWJTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6ydLtRBb4tEeDs0zpyHB/iywWTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTE0OTkyZjktMThiYS0z ZGUwLTg4ZWQtM2QyM2Y3ZTk1NjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9OMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPBAkk66Sd2uwaJQXa6HlvDSD7Eap24mWD68315C6YU1BQdziEnMSRv mtO6LbVT0rmlRawbrc+Mg8Wp7bwKOhqslZibE5dcj82d+eYtKAgY4HlbuYebCJtP 61g5R1ORd2R1OnXOTZj00sxuq76p8v6sshulefuPiGvkrIbpZrlkFOi1WCw/OY8I XPZVN9VJM07haSMUfZVnEsN0/Ufwy07M63k9MKexwYbmhe0zWGCExkLGDG0Hqfwp +voA83HYlW7WEn2vt8ybaWyn1p2wmDb7tLWknUO52Igsp+C9ghp2ryGtHPH+v32s eTro37srOrX2ztVTJ0X2c0qmGVOtN44= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:42 2025 by rpki-client