$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e33a5e7-9c5e-3cf5-abb7-79dbee56623e.roa File: 3e33a5e7-9c5e-3cf5-abb7-79dbee56623e.roa (raw, json) Hash identifier: /Nk3rXJs88dClTj3dl8HF4ZQ/jdjcpocJ4AFr0Lda/o= Subject key identifier: B4:02:4E:1B:4F:B5:B1:11:0C:34:9C:67:FC:97:B8:CA:81:90:F9:5C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BE8642EDC6C1E8686CF4AE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e33a5e7-9c5e-3cf5-abb7-79dbee56623e.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.217.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:42:ed:c6:c1:e8:68:6c:f4:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=48062ead-0fb8-4e89-bcc7-bce5968cb9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:18:63:0c:0a:99:12:22:82:68:cc:eb:f3:ff: 65:74:2e:27:49:a8:1b:e6:46:7f:c1:68:31:88:01: b0:0e:31:99:47:d4:e3:04:fe:0b:6e:50:dd:43:c5: e2:eb:fc:1f:bf:fb:c8:76:2e:bb:f6:30:b8:b5:cb: 35:6b:b6:28:3e:05:56:fa:8c:28:f3:51:21:a7:13: 13:ef:06:ef:ca:c9:76:ea:89:3e:cd:d2:e8:d9:f4: b1:d1:be:07:b7:69:22:fe:7d:e2:e3:61:5c:d0:b2: 19:4d:82:bc:18:b9:0b:42:c8:97:f0:7f:30:67:46: 81:4e:18:d8:cd:d8:9d:d6:82:7e:62:1f:8f:7e:e9: dd:1e:ed:da:fe:f4:cd:51:d4:89:ee:32:8c:b2:a6: b6:fa:5d:30:29:db:16:0d:a6:f8:a4:0b:38:2e:c3: 94:f4:cb:9e:f2:67:ba:6f:7b:ef:94:82:b0:8a:9a: 1f:75:aa:f6:1e:65:9e:d7:fb:9e:c7:be:18:a0:a7: 38:32:2b:c6:87:88:82:ba:8a:02:df:72:3e:0b:66: 68:66:94:49:3e:c3:55:b0:f9:11:7f:6b:a9:c3:eb: db:e6:27:a6:41:8d:f5:b8:11:9c:49:26:2b:78:67: c6:26:9d:8b:af:b5:8e:0d:56:2b:e6:f3:c5:5a:d9: 75:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:02:4E:1B:4F:B5:B1:11:0C:34:9C:67:FC:97:B8:CA:81:90:F9:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e33a5e7-9c5e-3cf5-abb7-79dbee56623e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:87:df:1b:80:2b:2c:d6:72:e8:1f:2f:16:39:b5:07:20:92: db:25:8d:50:0a:80:49:fc:02:db:95:6f:0c:e0:c8:d9:41:ef: 17:06:fe:dc:0a:e4:1f:65:7a:36:2a:ed:69:f5:24:a2:55:8b: 0c:5c:21:d8:2d:ae:6c:7e:bc:00:1a:13:a2:bb:db:c0:4e:c9: 1d:a4:18:3b:0e:0a:01:10:65:cd:06:07:b0:2c:93:d2:0c:1c: d8:e7:27:21:c2:9b:48:cb:73:ae:83:eb:85:91:ac:c5:e8:c2: da:66:22:5a:d7:5d:98:0f:09:81:0c:05:6a:7a:73:94:83:8a: 4f:3f:c9:41:34:d5:3f:5b:3e:89:ea:ca:93:37:0b:f4:fc:8b: c3:af:ac:57:19:51:d7:8a:d1:95:3a:20:c2:24:ae:1d:68:73: 39:87:fe:f8:68:1f:01:0a:ca:bd:26:9a:3c:2e:80:df:e5:3a: ad:a9:9e:5c:2f:b2:61:e8:7b:04:07:29:aa:72:d6:65:25:5a: 6d:36:d3:5e:ca:3f:fa:99:d6:a4:62:af:64:74:b4:47:8f:a7: 5d:40:0e:37:12:46:bb:15:c1:5e:45:ab:49:0b:9b:8e:84:1f: 96:8e:a9:0e:52:da:30:65:e3:d1:73:84:78:59:94:a5:45:15: dc:cc:d1:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hkLtxsHoaGz0roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk NDgwNjJlYWQtMGZiOC00ZTg5LWJjYzctYmNlNTk2OGNiOWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRhjDAqZEiKCaMzr8/9ldC4nSagb5kZ/wWgx iAGwDjGZR9TjBP4LblDdQ8Xi6/wfv/vIdi679jC4tcs1a7YoPgVW+owo81EhpxMT 7wbvysl26ok+zdLo2fSx0b4Ht2ki/n3i42Fc0LIZTYK8GLkLQsiX8H8wZ0aBThjY zdid1oJ+Yh+PfundHu3a/vTNUdSJ7jKMsqa2+l0wKdsWDab4pAs4LsOU9Mue8me6 b3vvlIKwipofdar2HmWe1/uex74YoKc4MivGh4iCuooC33I+C2ZoZpRJPsNVsPkR f2upw+vb5iemQY31uBGcSSYreGfGJp2Lr7WODVYr5vPFWtl1EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQCThtPtbERDDScZ/yXuMqBkPlcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2UzM2E1ZTctOWM1ZS0z Y2Y1LWFiYjctNzlkYmVlNTY2MjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9m0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWH3xuAKyzWcugfLxY5tQcgktsljVAKgEn8AtuVbwzgyNlB7xcG/twK 5B9lejYq7Wn1JKJViwxcIdgtrmx+vAAaE6K728BOyR2kGDsOCgEQZc0GB7Ask9IM HNjnJyHCm0jLc66D64WRrMXowtpmIlrXXZgPCYEMBWp6c5SDik8/yUE01T9bPonq ypM3C/T8i8OvrFcZUdeK0ZU6IMIkrh1oczmH/vhoHwEKyr0mmjwugN/lOq2pnlwv smHoewQHKapy1mUlWm02017KP/qZ1qRir2R0tEePp11ADjcSRrsVwV5Fq0kLm46E H5aOqQ5S2jBl49FzhHhZlKVFFdzM0XU= -----END CERTIFICATE-----Generated at Sat Apr 5 10:53:44 2025 by rpki-client