$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/44d6d319-2090-3fd4-a170-3c6cdaa1ad0c.roa File: 44d6d319-2090-3fd4-a170-3c6cdaa1ad0c.roa (raw, json) Hash identifier: DL+dDXJzU8bjm9DUEN4xvHDSgFWzFQn/dP7Jr+KeixE= Subject key identifier: CD:D1:FC:CC:5B:AE:4C:FB:4A:41:CA:74:87:86:BA:01:B6:A0:01:A3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858489340BDCC1315C74A283342C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/44d6d319-2090-3fd4-a170-3c6cdaa1ad0c.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 16625 IP address blocks: 23.213.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:bd:cc:13:15:c7:4a:28:33:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=d0645e04-ff94-488c-aaf9-b5f31f971b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5a:ca:35:08:ff:b5:47:63:9d:22:dc:e0:6f: 8a:74:ea:69:bb:3d:72:43:32:d5:3e:07:c0:ae:08: 15:ae:cd:3b:d0:f8:27:f1:d6:64:29:14:69:3d:b0: b0:f1:f9:51:e1:16:fb:b4:06:4b:47:c0:a0:3f:f9: 54:72:b6:72:57:43:a1:26:37:a6:5a:91:a8:79:1d: 4f:47:c4:db:88:be:73:7a:8f:52:f4:04:3a:5c:5a: 7b:93:c0:46:dd:ea:2d:4e:a0:a6:da:69:44:4a:3f: 09:6b:1c:4e:cc:b5:f1:a9:0c:5b:ab:08:6a:ba:df: 00:d3:ef:02:93:ca:82:e6:95:45:7d:d8:56:16:fa: f2:42:8d:f5:e7:cb:74:b3:ca:00:ae:54:eb:01:52: f3:6e:53:a6:03:11:44:bf:9c:0a:5a:ef:30:37:65: 0b:8e:3b:ba:91:df:b7:73:af:f3:42:a0:07:e7:71: c5:f1:dd:a2:aa:c2:b4:c8:9d:b0:50:d4:81:06:9f: 1c:4a:cb:83:65:c3:02:76:e6:bd:b2:67:95:c6:e6: 0a:12:46:ab:3f:9e:ef:32:cd:b9:83:85:46:0d:fd: 18:e0:13:2a:92:0f:31:4b:9b:ac:be:37:79:8b:52: b7:c5:43:4a:10:0f:44:ca:d9:b5:9e:b0:f8:10:90: 4d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D1:FC:CC:5B:AE:4C:FB:4A:41:CA:74:87:86:BA:01:B6:A0:01:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/44d6d319-2090-3fd4-a170-3c6cdaa1ad0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:73:2b:23:b4:ff:9e:11:16:df:64:7b:11:fe:ce:06:8a:5d: 22:05:d8:6f:fc:62:c7:90:9f:15:8a:62:b1:32:b9:86:74:c2: 73:88:ce:bb:00:14:ef:fc:ac:d7:4c:a4:48:7b:f0:07:81:bd: aa:65:c6:5b:17:28:37:8f:e2:b3:3c:ae:71:71:ab:97:c4:cd: 7b:9f:48:67:4e:e4:59:e0:b4:46:21:09:85:05:92:e2:b6:62: 45:1a:fa:d8:75:c8:b7:01:00:f7:20:c3:54:ae:19:0b:5c:7b: 67:f3:33:3a:e1:ee:2b:9c:40:d9:23:5e:2d:91:38:5e:b4:55: ae:6c:db:f4:28:a4:d7:3b:69:e1:3e:9d:3f:28:a7:0e:04:f7: 84:1f:7e:d2:0e:95:94:fd:f3:be:6e:4b:75:ae:2b:e9:25:2b: c2:30:2a:ee:63:e5:52:41:ed:d3:a5:94:46:92:9d:80:96:4f: c0:c1:55:f2:8b:7e:cc:c3:b6:0a:0c:84:b0:2c:b1:58:53:03: 43:9d:e6:90:5e:da:43:c0:43:97:96:f8:ae:42:a1:e7:c1:75: 55:ad:45:12:aa:34:69:91:40:d2:b1:61:5d:af:42:a6:b5:47: 6d:e6:c6:54:24:2f:e8:94:da:4a:45:cc:ff:ba:ce:2d:f1:e2: 11:de:10:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQL3MExXHSigzQsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk ZDA2NDVlMDQtZmY5NC00ODhjLWFhZjktYjVmMzFmOTcxYjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFrKNQj/tUdjnSLc4G+KdOppuz1yQzLVPgfA rggVrs070Pgn8dZkKRRpPbCw8flR4Rb7tAZLR8CgP/lUcrZyV0OhJjemWpGoeR1P R8TbiL5zeo9S9AQ6XFp7k8BG3eotTqCm2mlESj8JaxxOzLXxqQxbqwhqut8A0+8C k8qC5pVFfdhWFvryQo3158t0s8oArlTrAVLzblOmAxFEv5wKWu8wN2ULjju6kd+3 c6/zQqAH53HF8d2iqsK0yJ2wUNSBBp8cSsuDZcMCdua9smeVxuYKEkarP57vMs25 g4VGDf0Y4BMqkg8xS5usvjd5i1K3xUNKEA9Eytm1nrD4EJBNnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3R/Mxbrkz7SkHKdIeGugG2oAGjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDRkNmQzMTktMjA5MC0z ZmQ0LWExNzAtM2M2Y2RhYTFhZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9WYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1zKyO0/54RFt9kexH+zgaKXSIF2G/8YseQnxWKYrEyuYZ0wnOIzrsA FO/8rNdMpEh78AeBvaplxlsXKDeP4rM8rnFxq5fEzXufSGdO5FngtEYhCYUFkuK2 YkUa+th1yLcBAPcgw1SuGQtce2fzMzrh7iucQNkjXi2ROF60Va5s2/QopNc7aeE+ nT8opw4E94QfftIOlZT9875uS3WuK+klK8IwKu5j5VJB7dOllEaSnYCWT8DBVfKL fszDtgoMhLAssVhTA0Od5pBe2kPAQ5eW+K5CoefBdVWtRRKqNGmRQNKxYV2vQqa1 R23mxlQkL+iU2kpFzP+6zi3x4hHeECY= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:05 2025 by rpki-client