$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/243c2121-9527-32f8-8657-ae22867f3928.roa File: 243c2121-9527-32f8-8657-ae22867f3928.roa (raw, json) Hash identifier: xBfUulUsxRFISBOf1e2eaHzXB4k8g3ixwtLGclHzc1o= Subject key identifier: 31:59:32:FB:94:EE:E6:9B:9D:33:68:D3:0B:BA:3C:23:86:3D:96:05 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BE86426D48FB83542ADC69C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/243c2121-9527-32f8-8657-ae22867f3928.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.217.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:42:6d:48:fb:83:54:2a:dc:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=50a37792-a744-4380-8ba0-735cf6d427de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8c:95:1b:57:1e:cd:f4:28:a9:c4:2a:33:e1: bc:a8:43:3d:56:e6:ee:0b:09:54:32:2c:3d:0e:b3: 8d:ee:db:2d:d4:89:ae:f0:d5:be:4a:9d:7f:ef:7c: 39:7c:e6:f5:39:d2:94:73:d2:4b:13:c2:8d:80:ec: 29:96:d1:7c:aa:02:75:7b:80:9b:fb:f1:09:6e:e2: 7a:1c:57:6f:9b:a3:13:ee:c1:0d:ce:eb:70:97:9d: 61:80:59:89:d4:34:47:ec:54:3b:07:81:0d:c5:04: 6b:24:cc:e9:99:10:53:c1:73:2d:4e:32:05:44:6d: f0:04:01:6b:7f:6c:9a:61:17:79:00:58:b3:b0:95: ab:9a:1d:74:b4:03:46:53:6e:9c:ac:09:fa:4d:26: 2a:08:dd:53:1e:0b:1c:5f:e1:70:a8:33:bd:82:06: d8:0b:8f:2c:27:01:b6:8e:8a:b4:5c:ae:1b:8f:e5: 49:44:0b:f9:70:c6:f5:93:2e:48:9d:5d:03:25:fc: d9:9c:8d:d3:ec:e3:ae:94:65:25:88:f2:95:a2:6e: a6:e2:69:13:0b:34:4e:df:91:4c:3f:fa:eb:04:15: 61:3d:e9:c2:44:d1:8c:b2:0b:10:81:17:ec:11:ff: 08:65:9a:87:2a:75:0e:c2:80:1a:34:d8:7d:0a:b4: 53:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:59:32:FB:94:EE:E6:9B:9D:33:68:D3:0B:BA:3C:23:86:3D:96:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/243c2121-9527-32f8-8657-ae22867f3928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:23:b8:df:e8:3f:34:38:7e:3c:c2:b6:da:c0:93:d2:a0:f0: 2a:27:af:45:cc:26:ba:fe:0a:d4:f3:2f:f0:39:5a:f9:c2:d4: b5:ac:94:40:d9:74:04:11:84:0e:04:8d:ff:dd:1b:d8:55:f2: d7:a5:66:df:bb:e0:f7:bf:1d:7b:9a:a5:36:41:00:09:40:08: 8b:4d:3e:4a:a0:e5:61:6f:6b:07:88:a7:52:29:cf:af:66:6b: 58:37:26:f8:75:4b:b3:62:a4:c1:1c:1b:ec:38:d6:0e:bf:ed: f8:7b:ac:77:f8:db:d5:da:79:b3:2f:56:5e:b3:24:10:cb:fb: 0e:2b:8f:ec:10:3e:37:ca:de:63:bd:bf:20:38:c0:04:d0:33: c5:d9:44:3e:7f:08:dd:45:a7:c5:ba:da:92:84:70:e2:1b:7c: a5:e8:fd:4f:5d:78:85:db:6d:51:d6:8e:c7:de:c3:52:18:f1: d4:7b:9e:ef:c9:4a:45:b5:d8:d6:45:60:d5:21:46:76:4d:07: 08:c4:c5:43:28:e7:d0:cc:1d:9e:b3:33:27:19:c0:93:e9:1a: d2:b7:cf:a7:56:57:c0:e1:db:cd:6b:b2:1c:76:d1:84:84:a1: 12:93:4b:91:b9:9d:ef:0c:f9:01:ee:c4:ad:05:14:20:b5:20: e3:3e:28:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hkJtSPuDVCrcacAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk NTBhMzc3OTItYTc0NC00MzgwLThiYTAtNzM1Y2Y2ZDQyN2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4yVG1cezfQoqcQqM+G8qEM9VubuCwlUMiw9 DrON7tst1Imu8NW+Sp1/73w5fOb1OdKUc9JLE8KNgOwpltF8qgJ1e4Cb+/EJbuJ6 HFdvm6MT7sENzutwl51hgFmJ1DRH7FQ7B4ENxQRrJMzpmRBTwXMtTjIFRG3wBAFr f2yaYRd5AFizsJWrmh10tANGU26crAn6TSYqCN1THgscX+FwqDO9ggbYC48sJwG2 joq0XK4bj+VJRAv5cMb1ky5InV0DJfzZnI3T7OOulGUliPKVom6m4mkTCzRO35FM P/rrBBVhPenCRNGMsgsQgRfsEf8IZZqHKnUOwoAaNNh9CrRTBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFZMvuU7uabnTNo0wu6PCOGPZYFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjQzYzIxMjEtOTUyNy0z MmY4LTg2NTctYWUyMjg2N2YzOTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9lwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgjuN/oPzQ4fjzCttrAk9Kg8Conr0XMJrr+CtTzL/A5WvnC1LWslEDZ dAQRhA4Ejf/dG9hV8telZt+74Pe/HXuapTZBAAlACItNPkqg5WFvaweIp1Ipz69m a1g3Jvh1S7NipMEcG+w41g6/7fh7rHf429XaebMvVl6zJBDL+w4rj+wQPjfK3mO9 vyA4wATQM8XZRD5/CN1Fp8W62pKEcOIbfKXo/U9deIXbbVHWjsfew1IY8dR7nu/J SkW12NZFYNUhRnZNBwjExUMo59DMHZ6zMycZwJPpGtK3z6dWV8Dh281rshx20YSE oRKTS5G5ne8M+QHuxK0FFCC1IOM+KFc= -----END CERTIFICATE-----Generated at Sat Apr 5 11:19:32 2025 by rpki-client