$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21e00e69-2c12-36cd-bdeb-7b6c72777099.roa File: 21e00e69-2c12-36cd-bdeb-7b6c72777099.roa (raw, json) Hash identifier: Y0n9MCjYMgDMo+VUyTzsYbbnJZOvfNY7qab594kIbi8= Subject key identifier: 38:0F:7C:80:C9:9B:1B:52:D6:7B:90:B6:FB:CA:C0:BA:E5:F6:B3:DD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848C9B0E0F0B29F224E3249EC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21e00e69-2c12-36cd-bdeb-7b6c72777099.roa Signing time: Thu 06 Feb 2025 02:00:39 +0000 ROA not before: Thu 06 Feb 2025 02:00:39 +0000 ROA not after: Wed 07 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.218.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c9:b0:e0:f0:b2:9f:22:4e:32:49:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 6 02:00:39 2025 GMT Not After : May 7 01:00:39 2025 GMT Subject: CN=65fa26bb-2e58-4b69-9094-dab3071a7c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b2:47:0d:6f:92:40:95:f7:39:d9:58:35:f6: 66:67:7c:59:dc:7a:c3:0d:2d:e2:dd:7a:80:e1:cc: cc:39:a7:76:bb:77:da:48:5a:d1:3b:0a:76:fe:24: 8a:18:29:9f:12:24:9c:71:40:4c:88:fe:d8:0d:88: 8b:a0:27:76:52:d8:8f:22:5b:d5:e5:9a:62:d6:5f: de:d3:a4:07:11:41:7d:f5:fc:aa:7a:cb:22:51:41: f8:b3:87:8d:9c:aa:00:e1:6d:70:0e:5c:04:68:cc: e9:91:d2:dc:60:a7:2c:64:ef:72:3d:c7:8b:e7:b9: f4:e0:d7:07:40:2e:d3:be:d0:2d:06:e6:cd:2d:97: 66:97:19:48:ef:fc:46:d7:a9:d4:ce:f6:23:af:17: f2:ca:e9:50:b1:28:5a:4e:ab:da:67:a7:0f:55:a4: 73:30:e0:3a:da:0b:9f:ab:a1:a3:10:28:d3:10:6d: e6:da:06:3d:e9:b4:97:19:01:37:36:c7:4b:e9:aa: 55:e1:e2:cc:0f:0a:4c:3f:ce:a9:99:1e:d9:cb:dc: 4e:e8:2b:1b:46:54:c8:66:ea:42:92:3a:0a:56:7d: 26:70:dd:b6:98:b3:48:6f:70:4f:c8:a6:4c:5b:a2: 3c:e5:7f:a5:bb:02:ca:6f:ef:61:3b:d4:84:52:a3: 6e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0F:7C:80:C9:9B:1B:52:D6:7B:90:B6:FB:CA:C0:BA:E5:F6:B3:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21e00e69-2c12-36cd-bdeb-7b6c72777099.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:30:ab:c2:34:b5:be:16:4f:76:8b:d8:93:42:5a:2e:eb:6a: db:f5:71:ef:b1:97:ae:95:47:07:d9:28:66:18:d7:0a:ce:e5: ca:3e:74:95:6c:7b:64:bb:e1:a4:df:9c:6d:11:c3:54:70:74: f2:3b:ec:08:27:d2:1e:1b:a4:17:b4:20:72:89:56:61:15:ec: ee:8d:86:87:94:f0:1b:f9:0f:ab:dd:35:8a:bc:05:5c:7f:f2: 2a:cf:de:46:33:cb:f6:b3:7e:2c:bb:98:ac:6c:e8:c1:96:7c: 9b:c3:c5:0b:eb:89:2e:1b:91:11:5e:8f:34:67:b0:e1:31:ed: 0e:16:9b:4e:27:60:5e:d5:62:70:0b:7d:7b:77:f2:b1:98:55: 9b:27:77:d8:fc:f6:38:3e:bb:b1:8e:73:3a:a8:35:54:fc:eb: 52:08:93:88:36:24:db:a5:ea:f5:97:ba:4b:d6:27:45:c3:de: 8f:23:2b:9a:87:e9:c3:ad:ec:ef:af:12:8c:4a:de:9e:5c:8c: 0c:eb:98:7e:b3:2a:f9:79:46:ad:25:33:72:c8:a8:26:80:85: 76:39:59:96:15:f6:bb:36:95:b4:0d:26:b1:24:5e:a5:f3:be: 55:88:bf:39:c8:ad:05:aa:e3:d6:92:47:74:63:b3:ca:45:0b: 39:d7:d7:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjJsODwsp8iTjJJ7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwNjAyMDAzOVoXDTI1MDUwNzAxMDAzOVowLzEtMCsGA1UEAxMk NjVmYTI2YmItMmU1OC00YjY5LTkwOTQtZGFiMzA3MWE3YzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurJHDW+SQJX3OdlYNfZmZ3xZ3HrDDS3i3XqA 4czMOad2u3faSFrROwp2/iSKGCmfEiSccUBMiP7YDYiLoCd2UtiPIlvV5Zpi1l/e 06QHEUF99fyqessiUUH4s4eNnKoA4W1wDlwEaMzpkdLcYKcsZO9yPceL57n04NcH QC7TvtAtBubNLZdmlxlI7/xG16nUzvYjrxfyyulQsShaTqvaZ6cPVaRzMOA62guf q6GjECjTEG3m2gY96bSXGQE3NsdL6apV4eLMDwpMP86pmR7Zy9xO6CsbRlTIZupC kjoKVn0mcN22mLNIb3BPyKZMW6I85X+luwLKb+9hO9SEUqNu4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgPfIDJmxtS1nuQtvvKwLrl9rPdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjFlMDBlNjktMmMxMi0z NmNkLWJkZWItN2I2YzcyNzc3MDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9reMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGowq8I0tb4WT3aL2JNCWi7ratv1ce+xl66VRwfZKGYY1wrO5co+dJVs e2S74aTfnG0Rw1RwdPI77Agn0h4bpBe0IHKJVmEV7O6NhoeU8Bv5D6vdNYq8BVx/ 8irP3kYzy/azfiy7mKxs6MGWfJvDxQvriS4bkRFejzRnsOEx7Q4Wm04nYF7VYnAL fXt38rGYVZsnd9j89jg+u7GOczqoNVT861IIk4g2JNul6vWXukvWJ0XD3o8jK5qH 6cOt7O+vEoxK3p5cjAzrmH6zKvl5Rq0lM3LIqCaAhXY5WZYV9rs2lbQNJrEkXqXz vlWIvznIrQWq49aSR3Rjs8pFCznX1yE= -----END CERTIFICATE-----Generated at Sat Apr 5 12:23:29 2025 by rpki-client