$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/208b7436-fa1c-30a0-89fe-1474f763f4af.roa File: 208b7436-fa1c-30a0-89fe-1474f763f4af.roa (raw, json) Hash identifier: sEjSlQffePKFCtXv/juab1idijHd7cbVqdGyISJl9rw= Subject key identifier: AA:09:2E:23:38:67:5B:14:B6:79:FD:D0:07:AE:F4:66:E1:BF:91:F0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584910E1878903D11655B2BF1680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/208b7436-fa1c-30a0-89fe-1474f763f4af.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 20940 IP address blocks: 23.220.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:87:89:03:d1:16:55:b2:bf:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=fff95103-3ebb-4a69-bb6e-0e3b4d7902b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2c:58:ce:90:a5:78:02:67:1a:cb:3b:26:1a: e9:d1:55:29:d4:8a:62:56:3e:8b:91:31:91:5e:d0: 78:78:ae:ca:25:03:1e:70:04:6c:02:1b:80:af:61: 76:35:48:3f:04:8b:01:07:fa:37:29:00:93:a2:19: 97:65:98:1a:17:f9:e9:4d:e6:a8:40:9b:23:db:8a: 59:af:97:ad:ab:c0:37:92:9d:67:73:50:2b:4d:02: 77:09:8e:e6:d9:6a:1d:bc:ab:db:63:71:cb:9b:58: 5c:c6:17:3c:21:52:7b:b7:35:86:41:f6:4c:0a:5a: 97:e4:b4:9c:61:cf:4b:ea:dd:6f:51:c4:2e:00:a0: 52:1f:e0:0c:db:f1:1b:29:6e:c6:ef:cc:44:21:d7: df:89:5e:8d:50:99:bf:e7:0e:ba:fa:16:4d:1c:3c: 20:8d:6d:93:ea:3d:43:1c:57:1b:93:34:fe:b3:58: a3:a7:e0:9c:40:f1:cd:cf:c2:2d:c2:97:df:d9:f3: cf:ae:64:15:e7:c2:37:20:aa:7f:80:5b:94:96:34: 61:0f:a8:57:67:c8:8d:3c:bb:67:39:50:84:53:2e: 1b:f1:fa:39:6a:2a:75:35:13:91:23:69:a2:3b:5e: ba:1d:e2:c6:1a:33:06:2f:b5:5b:36:53:b0:cf:42: 6b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:09:2E:23:38:67:5B:14:B6:79:FD:D0:07:AE:F4:66:E1:BF:91:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/208b7436-fa1c-30a0-89fe-1474f763f4af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:de:9a:fe:8e:db:54:b3:64:8a:e4:05:95:6f:ee:a8:f6:2c: 45:f5:a9:f2:a3:2d:0a:f0:be:2c:63:60:e1:f1:2a:7f:ae:31: 9f:cc:f6:7a:3d:09:a2:0c:f1:2c:93:4a:44:8e:4b:77:5d:88: 61:10:e6:7b:2a:b4:f7:6f:f6:ca:a8:21:45:5c:57:65:5b:c5: 27:1b:94:74:a6:28:29:a2:76:0f:55:55:95:82:28:b0:5b:37: e1:35:9e:6c:79:e9:2c:33:f4:2b:04:ac:6a:17:b2:b4:ed:e1: 48:6d:72:d7:6b:b8:23:9a:45:c8:7e:12:99:da:9a:85:46:54: f7:77:fe:f5:9d:0d:62:11:05:0f:d3:c9:29:36:de:53:06:df: ce:72:4f:60:65:36:b8:fa:16:fd:aa:69:6b:94:2a:46:62:6d: 41:e0:91:ed:e6:8a:c0:39:dd:23:b5:d6:08:0d:76:7a:19:51: fe:3e:f3:a1:bd:97:5c:34:7a:90:c0:79:54:1c:40:ff:e2:7d: 3c:bb:27:ed:e5:9f:c1:68:a4:41:ea:90:b7:a6:28:12:2e:72: 0b:bb:f7:8a:80:17:37:7e:eb:2a:a1:9b:fa:42:af:ab:be:9f: c1:2a:e1:42:32:95:ea:24:a5:85:88:06:df:fc:ea:a2:c5:a9: bc:02:fb:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4YeJA9EWVbK/FoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk ZmZmOTUxMDMtM2ViYi00YTY5LWJiNmUtMGUzYjRkNzkwMmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSxYzpCleAJnGss7Jhrp0VUp1IpiVj6LkTGR XtB4eK7KJQMecARsAhuAr2F2NUg/BIsBB/o3KQCTohmXZZgaF/npTeaoQJsj24pZ r5etq8A3kp1nc1ArTQJ3CY7m2WodvKvbY3HLm1hcxhc8IVJ7tzWGQfZMClqX5LSc Yc9L6t1vUcQuAKBSH+AM2/EbKW7G78xEIdffiV6NUJm/5w66+hZNHDwgjW2T6j1D HFcbkzT+s1ijp+CcQPHNz8Itwpff2fPPrmQV58I3IKp/gFuUljRhD6hXZ8iNPLtn OVCEUy4b8fo5aip1NRORI2miO166HeLGGjMGL7VbNlOwz0JrrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoJLiM4Z1sUtnn90Aeu9Gbhv5HwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjA4Yjc0MzYtZmExYy0z MGEwLTg5ZmUtMTQ3NGY3NjNmNGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9yVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTemv6O21SzZIrkBZVv7qj2LEX1qfKjLQrwvixjYOHxKn+uMZ/M9no9 CaIM8SyTSkSOS3ddiGEQ5nsqtPdv9sqoIUVcV2VbxScblHSmKCmidg9VVZWCKLBb N+E1nmx56Swz9CsErGoXsrTt4UhtctdruCOaRch+EpnamoVGVPd3/vWdDWIRBQ/T ySk23lMG385yT2BlNrj6Fv2qaWuUKkZibUHgke3misA53SO11ggNdnoZUf4+86G9 l1w0epDAeVQcQP/ifTy7J+3ln8FopEHqkLemKBIucgu794qAFzd+6yqhm/pCr6u+ n8Eq4UIyleokpYWIBt/86qLFqbwC+7w= -----END CERTIFICATE-----Generated at Sat Apr 5 12:23:22 2025 by rpki-client