$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/199388d5-89f8-39dd-b210-3f6c4f38c9a7.roa File: 199388d5-89f8-39dd-b210-3f6c4f38c9a7.roa (raw, json) Hash identifier: blKtF5MMpsg1TiHxpUv6odLc1AKihz+C3igKmU4XKhA= Subject key identifier: 0D:9C:D9:BF:15:6F:CA:52:EF:8B:99:FE:C6:DC:79:A7:3B:F3:B9:D7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BE8642511D771625E5D98300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/199388d5-89f8-39dd-b210-3f6c4f38c9a7.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.217.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:42:51:1d:77:16:25:e5:d9:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=73631c3d-6364-4a7f-8abb-3ef870a3c925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2b:86:80:04:13:18:4a:ca:9a:73:99:9d:4a: 89:07:96:db:32:b6:62:bf:11:2a:07:36:ef:c2:31: f4:38:71:b0:16:28:74:6b:10:af:28:32:64:03:d2: 03:de:a2:e1:93:ca:55:5f:74:ab:eb:34:1f:44:32: 60:9d:14:92:25:be:ac:4d:76:25:24:4f:68:3e:f6: 26:95:fa:8d:02:1a:bb:90:bc:37:f4:93:65:2b:5b: b2:59:70:ad:0f:35:11:41:1c:b6:db:30:a4:f1:30: 91:f0:ea:60:9a:af:fc:a8:c5:67:e7:42:4a:47:c8: 09:19:c3:e8:4d:c5:1d:aa:bd:57:a4:b3:c7:fa:db: ae:54:5f:90:d1:b0:4f:b2:ec:51:17:97:0e:ed:2c: 6f:99:eb:40:1b:cb:c5:43:70:08:fa:82:89:f1:39: 38:2b:7d:da:57:98:98:f5:ec:bc:53:46:c5:0f:da: 63:f8:5f:3b:98:41:ba:0c:39:5d:94:88:26:44:c6: 7f:06:4c:36:fc:39:d0:99:7a:83:1b:bd:95:bd:bd: 5d:a5:2c:47:3b:39:9f:17:73:a3:72:62:ba:69:07: 9c:3e:db:e4:64:82:b5:54:0f:39:2a:a0:be:26:c6: 86:14:cd:69:ea:82:7e:c8:45:65:3a:08:fe:11:21: c8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9C:D9:BF:15:6F:CA:52:EF:8B:99:FE:C6:DC:79:A7:3B:F3:B9:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/199388d5-89f8-39dd-b210-3f6c4f38c9a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:7f:08:dd:5c:c6:2d:aa:e9:22:fa:a9:c1:f6:38:8d:83:5b: 4c:e1:40:ca:a6:84:a3:f9:79:33:5e:c9:5f:c3:77:5b:2d:50: 35:b8:56:80:00:1c:79:ac:f1:18:c1:f0:0c:5d:3c:ce:d6:8a: 2c:a0:b0:ca:99:da:c9:d9:df:9b:c9:eb:a7:52:3e:3d:f6:79: 51:7b:cb:cf:f6:e6:d7:f5:27:f0:53:1b:87:a7:bc:ee:da:45: da:81:c4:2e:2b:68:a5:85:f2:78:18:a9:ea:b4:0a:2c:ca:7b: c3:3d:23:cb:d7:30:1e:19:f5:fd:ee:34:7d:48:da:85:6c:a1: 7b:b8:1f:fd:1b:be:1f:94:71:b4:fe:e8:b0:a0:eb:d1:78:22: 85:6f:b7:03:6b:8b:fa:b4:73:86:92:1b:74:32:92:20:df:5e: 92:7c:35:15:64:07:35:40:3c:27:a9:f3:28:c9:26:19:7e:2e: eb:8d:5a:0b:3f:6a:f3:e0:cf:03:31:86:62:23:83:fa:9d:cd: 64:51:c6:5a:2c:c9:a4:5e:12:4b:fa:c0:93:96:e6:7c:58:f3: ad:eb:0e:74:b3:68:00:8e:6b:29:c5:28:d8:cf:95:b8:19:da: 53:d4:ca:79:f7:16:f6:04:0e:42:62:30:26:07:7e:b0:ae:67: 21:fe:12:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hkJRHXcWJeXZgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk NzM2MzFjM2QtNjM2NC00YTdmLThhYmItM2VmODcwYTNjOTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyuGgAQTGErKmnOZnUqJB5bbMrZivxEqBzbv wjH0OHGwFih0axCvKDJkA9ID3qLhk8pVX3Sr6zQfRDJgnRSSJb6sTXYlJE9oPvYm lfqNAhq7kLw39JNlK1uyWXCtDzURQRy22zCk8TCR8Opgmq/8qMVn50JKR8gJGcPo TcUdqr1XpLPH+tuuVF+Q0bBPsuxRF5cO7SxvmetAG8vFQ3AI+oKJ8Tk4K33aV5iY 9ey8U0bFD9pj+F87mEG6DDldlIgmRMZ/Bkw2/DnQmXqDG72Vvb1dpSxHOzmfF3Oj cmK6aQecPtvkZIK1VA85KqC+JsaGFM1p6oJ+yEVlOgj+ESHIEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2c2b8Vb8pS74uZ/sbceac787nXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTk5Mzg4ZDUtODlmOC0z OWRkLWIyMTAtM2Y2YzRmMzhjOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ltMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9/CN1cxi2q6SL6qcH2OI2DW0zhQMqmhKP5eTNeyV/Dd1stUDW4VoAA HHms8RjB8AxdPM7WiiygsMqZ2snZ35vJ66dSPj32eVF7y8/25tf1J/BTG4envO7a RdqBxC4raKWF8ngYqeq0CizKe8M9I8vXMB4Z9f3uNH1I2oVsoXu4H/0bvh+UcbT+ 6LCg69F4IoVvtwNri/q0c4aSG3QykiDfXpJ8NRVkBzVAPCep8yjJJhl+LuuNWgs/ avPgzwMxhmIjg/qdzWRRxlosyaReEkv6wJOW5nxY863rDnSzaACOaynFKNjPlbgZ 2lPUynn3FvYEDkJiMCYHfrCuZyH+EtQ= -----END CERTIFICATE-----Generated at Sat Apr 5 12:27:46 2025 by rpki-client