$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20b2663f-3703-3ce1-959e-b67933782eba.roa File: 20b2663f-3703-3ce1-959e-b67933782eba.roa (raw, json) Hash identifier: Gk+PW3clTEfxVJ/3ccejYCTLc4400K4ExbEeOH4i8F0= Subject key identifier: 88:85:48:A0:24:93:DA:1D:DE:EA:00:84:35:FB:5D:3D:89:91:6B:CF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829DBB06B47C419620C6E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20b2663f-3703-3ce1-959e-b67933782eba.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.206.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:db:b0:6b:47:c4:19:62:0c:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=c72286b0-3eea-40cc-9ac8-aed2cf219a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:30:83:c1:4e:43:b8:db:2e:5b:95:e8:7c:ed: a1:3c:17:1d:25:6d:ae:35:d5:5c:28:3b:a9:66:39: b9:3f:67:29:ef:9e:46:76:f0:1b:2e:36:b6:34:bf: 32:3d:39:36:d2:20:87:7b:6a:e8:c5:ce:69:2b:1e: b7:c4:55:19:31:d7:ea:d6:19:94:ca:07:03:f1:81: 57:44:df:45:c5:6d:2f:ed:36:29:23:80:85:4e:7b: 64:2e:71:d1:ba:74:7d:c9:07:5e:ac:39:4f:56:39: f6:4d:4c:4d:38:c8:70:cb:fb:4f:42:16:7b:f3:1b: f9:a8:ab:8b:ae:7f:b5:5e:0c:cd:3f:28:0e:bb:60: f0:1f:28:45:6d:85:5a:67:ac:00:69:c0:40:30:2f: 42:5e:88:5a:65:d4:3b:3c:54:e1:88:b3:9c:86:81: 2f:15:60:ab:35:b5:29:cf:e9:c0:1c:31:87:38:71: 59:ea:ea:91:5a:45:25:b7:39:2f:34:27:f7:76:06: 87:65:f2:db:d7:53:10:91:c8:cc:4d:2a:5e:f7:08: bb:9b:dd:26:d4:7b:42:ae:fb:75:c7:8b:48:25:08: cf:f9:f3:5b:a7:ba:b7:75:e9:ae:fb:c7:6d:a3:87: c5:d5:99:40:1c:95:d8:aa:a2:b3:93:9b:e7:e7:06: d9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:85:48:A0:24:93:DA:1D:DE:EA:00:84:35:FB:5D:3D:89:91:6B:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20b2663f-3703-3ce1-959e-b67933782eba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:07:ea:a5:a1:c2:3b:32:c5:02:59:7d:d4:50:98:e2:fd:f3: 9b:1f:7f:41:12:9a:c3:14:25:bb:16:71:89:ea:09:b2:10:af: fa:94:50:a2:2d:93:52:26:bd:ac:0f:d2:18:79:da:e0:f9:01: a0:bf:1e:8e:f5:9c:5d:d4:b3:25:93:cd:ee:e8:44:0a:e9:0f: e6:15:e2:1d:e0:52:24:59:ee:6c:6c:fb:53:8e:d5:4e:27:12: d9:3f:b7:13:0c:0c:24:9e:3b:fa:00:4d:46:ff:8c:fb:fb:2c: 76:7a:99:5c:d3:12:0b:92:36:b6:96:2b:12:04:25:30:19:66: b3:36:ad:bb:08:db:d8:9d:a3:c3:65:ad:b2:f2:2c:6b:4b:46: 48:00:a5:48:9d:8e:8c:43:b4:54:25:39:63:d8:f8:7c:ce:3c: 46:5e:70:d8:99:aa:f4:f3:67:b9:61:ce:61:a5:fd:9e:ea:b8: 77:46:ef:85:f1:23:27:5a:60:0c:88:b5:ad:de:ec:a0:ba:1f: 98:e2:5e:91:ff:98:11:ae:b2:46:63:1d:95:3d:1b:9d:cd:06: fa:2d:32:87:cf:7e:6a:53:65:b0:e1:3e:bf:76:11:18:0a:d7: 0f:0e:de:92:2c:72:56:f9:d1:1a:24:a8:46:5b:b0:2b:8b:8d: ea:ac:fb:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKduwa0fEGWIMboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YzcyMjg2YjAtM2VlYS00MGNjLTlhYzgtYWVkMmNmMjE5YTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDCDwU5DuNsuW5XofO2hPBcdJW2uNdVcKDup Zjm5P2cp755GdvAbLja2NL8yPTk20iCHe2roxc5pKx63xFUZMdfq1hmUygcD8YFX RN9FxW0v7TYpI4CFTntkLnHRunR9yQderDlPVjn2TUxNOMhwy/tPQhZ78xv5qKuL rn+1XgzNPygOu2DwHyhFbYVaZ6wAacBAMC9CXohaZdQ7PFThiLOchoEvFWCrNbUp z+nAHDGHOHFZ6uqRWkUltzkvNCf3dgaHZfLb11MQkcjMTSpe9wi7m90m1HtCrvt1 x4tIJQjP+fNbp7q3demu+8dto4fF1ZlAHJXYqqKzk5vn5wbZIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiFSKAkk9od3uoAhDX7XT2JkWvPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjBiMjY2M2YtMzcwMy0z Y2UxLTk1OWUtYjY3OTMzNzgyZWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF85wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoH6qWhwjsyxQJZfdRQmOL985sff0ESmsMUJbsWcYnqCbIQr/qUUKIt k1ImvawP0hh52uD5AaC/Ho71nF3UsyWTze7oRArpD+YV4h3gUiRZ7mxs+1OO1U4n Etk/txMMDCSeO/oATUb/jPv7LHZ6mVzTEguSNraWKxIEJTAZZrM2rbsI29ido8Nl rbLyLGtLRkgApUidjoxDtFQlOWPY+HzOPEZecNiZqvTzZ7lhzmGl/Z7quHdG74Xx IydaYAyIta3e7KC6H5jiXpH/mBGuskZjHZU9G53NBvotMofPfmpTZbDhPr92ERgK 1w8O3pIsclb50RokqEZbsCuLjeqs+48= -----END CERTIFICATE-----Generated at Sat Jun 7 14:52:36 2025 by rpki-client