$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cc33061-2516-3ff1-bd3a-f1cd5d92a140.roa File: 3cc33061-2516-3ff1-bd3a-f1cd5d92a140.roa (raw, json) Hash identifier: XvWieS2WMUKCcRPcuMYzqzpi9gzasnvme0D64aMjasw= Subject key identifier: 9C:AF:F9:FA:80:41:D9:8A:FC:3D:0A:62:3B:C2:62:4E:C1:DD:97:80 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF49E16A049077A937F8F40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cc33061-2516-3ff1-bd3a-f1cd5d92a140.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.211.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:9e:16:a0:49:07:7a:93:7f:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=ee3feb9a-1093-402a-9ce1-f8b0b3eeb4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1e:5f:36:26:64:04:f7:4a:74:d7:79:7b:92: 27:93:db:22:c4:97:e1:03:cf:8d:02:86:d0:a8:d9: f1:b2:ff:93:39:4b:13:3e:43:6b:a1:6d:aa:e0:fe: d6:6d:0f:b4:c4:93:dc:0c:20:64:69:e3:54:4b:af: 7a:0b:ea:3e:c1:f4:0e:8a:c3:43:f7:61:ac:2f:e4: ad:37:58:1b:25:f0:c7:c7:59:62:e2:8e:7e:d3:a0: 4e:94:f1:22:e1:b5:99:48:ae:59:e6:7d:43:da:b5: 21:a1:72:fe:95:a4:a2:95:84:39:94:f6:3c:52:b7: 20:f9:7a:11:60:d8:4f:3c:6b:01:86:fb:8d:53:84: f3:b6:4d:f4:78:11:51:8c:f1:63:e1:df:e5:55:b8: e2:68:e6:77:86:34:6f:50:bc:f3:f6:f4:90:6c:18: a0:23:23:6a:c0:21:fc:56:ec:00:22:75:47:f7:fe: 55:cd:4c:35:41:32:6b:17:7c:7b:2f:e5:01:91:07: f0:94:27:72:c1:4f:c2:80:0c:14:1f:5e:50:80:eb: 14:ab:e2:e9:53:7d:07:38:f1:df:44:3b:f0:65:17: 48:8d:ab:b4:66:38:64:6c:c1:6a:fc:7e:91:6f:24: c8:ac:16:94:a2:5b:2c:1c:67:a3:08:61:fe:07:56: 20:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AF:F9:FA:80:41:D9:8A:FC:3D:0A:62:3B:C2:62:4E:C1:DD:97:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cc33061-2516-3ff1-bd3a-f1cd5d92a140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:0b:93:98:e5:c9:f4:9f:20:fb:12:87:bc:51:46:90:bb:25: 46:71:a6:a1:37:2c:99:de:67:3f:0c:c3:35:94:a3:f4:2c:41: 8f:1d:d6:64:ee:cf:3a:cf:4c:da:24:45:75:2d:46:64:30:6c: a0:3e:b8:4c:f0:c6:a3:eb:34:9b:b5:70:31:e9:b3:6c:a3:c7: e9:30:b6:72:78:e6:7b:d7:33:6d:71:0d:36:f2:3f:b0:e1:49: 54:aa:fe:d2:8e:3e:14:f4:c9:fd:b4:9b:20:35:f2:6e:81:48: 07:23:47:6a:19:dc:84:30:f0:b6:40:0a:db:66:09:03:c2:0a: 39:37:7e:d3:a6:6f:8e:79:67:10:88:1b:ea:c1:88:e9:3e:37: 1f:4c:ad:c4:e4:29:96:6d:76:57:71:f0:86:74:c0:87:ac:4a: d2:d4:e1:dd:e7:db:c7:5c:a8:49:17:5f:34:43:98:39:ec:dd: fd:fa:dd:97:ce:5d:80:28:b9:d2:6d:a4:5c:d3:f7:c3:9d:ff: ad:d6:dc:af:d8:52:53:7d:3f:cf:0b:6d:7a:40:e8:2c:6c:c6: ba:92:f5:97:7c:0f:57:05:15:30:fd:18:20:df:6d:ba:29:21: 3f:df:13:bb:01:7a:bc:6f:26:41:67:f6:ef:fa:a0:12:a0:04: 40:7a:37:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9J4WoEkHepN/j0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZWUzZmViOWEtMTA5My00MDJhLTljZTEtZjhiMGIzZWViNGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR5fNiZkBPdKdNd5e5Ink9sixJfhA8+NAobQ qNnxsv+TOUsTPkNroW2q4P7WbQ+0xJPcDCBkaeNUS696C+o+wfQOisND92GsL+St N1gbJfDHx1li4o5+06BOlPEi4bWZSK5Z5n1D2rUhoXL+laSilYQ5lPY8Urcg+XoR YNhPPGsBhvuNU4Tztk30eBFRjPFj4d/lVbjiaOZ3hjRvULzz9vSQbBigIyNqwCH8 VuwAInVH9/5VzUw1QTJrF3x7L+UBkQfwlCdywU/CgAwUH15QgOsUq+LpU30HOPHf RDvwZRdIjau0ZjhkbMFq/H6RbyTIrBaUolssHGejCGH+B1YgMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyv+fqAQdmK/D0KYjvCYk7B3ZeAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2NjMzMwNjEtMjUxNi0z ZmYxLWJkM2EtZjFjZDVkOTJhMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9PyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkLk5jlyfSfIPsSh7xRRpC7JUZxpqE3LJneZz8MwzWUo/QsQY8d1mTu zzrPTNokRXUtRmQwbKA+uEzwxqPrNJu1cDHps2yjx+kwtnJ45nvXM21xDTbyP7Dh SVSq/tKOPhT0yf20myA18m6BSAcjR2oZ3IQw8LZACttmCQPCCjk3ftOmb455ZxCI G+rBiOk+Nx9MrcTkKZZtdldx8IZ0wIesStLU4d3n28dcqEkXXzRDmDns3f363ZfO XYAoudJtpFzT98Od/63W3K/YUlN9P88LbXpA6CxsxrqS9Zd8D1cFFTD9GCDfbbop IT/fE7sBerxvJkFn9u/6oBKgBEB6N0w= -----END CERTIFICATE-----Generated at Thu Jun 5 18:28:52 2025 by rpki-client