$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46898293-22e0-34e2-918a-a8f84b6a8ada.roa File: 46898293-22e0-34e2-918a-a8f84b6a8ada.roa (raw, json) Hash identifier: k/GKLE7WgoRA5rADNLYUm/4kYnsusmzcVs+kWajsf1A= Subject key identifier: 7E:D9:BE:43:AA:A3:8E:88:4A:A5:00:FD:90:9F:11:D8:4E:62:7E:23 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858486BA2FCCC4859EB025E4E0400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46898293-22e0-34e2-918a-a8f84b6a8ada.roa Signing time: Fri 03 Jan 2025 09:26:47 +0000 ROA not before: Fri 03 Jan 2025 09:26:47 +0000 ROA not after: Thu 03 Apr 2025 08:26:47 +0000 asID: 16625 IP address blocks: 23.209.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6b:a2:fc:cc:48:59:eb:02:5e:4e:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 3 09:26:47 2025 GMT Not After : Apr 3 08:26:47 2025 GMT Subject: CN=4f5e4dc6-d4af-438e-923b-376777939e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:8a:63:95:7a:f3:7e:7a:70:70:0b:bf:3e: 1d:8d:cc:6a:84:7e:92:1b:59:8f:f8:9a:cc:54:25: 07:27:d3:dc:94:51:d0:45:b8:fa:ba:8c:65:db:18: 24:5f:78:55:c1:a3:8d:e2:9f:05:87:2c:5b:21:c5: 71:37:fc:00:86:0a:e7:4c:bf:d9:5a:c8:a6:76:1a: a5:02:77:e0:62:cc:b5:e2:96:67:fb:1a:13:f2:fa: 5f:f0:88:e1:d3:04:a8:7a:9b:53:8b:24:d5:30:07: 14:4c:17:e6:bf:68:aa:5b:ef:2f:10:67:e8:80:7c: 10:e5:0d:08:e9:6d:e2:28:9b:a5:c4:f5:5c:0a:89: b2:62:71:a2:97:b5:1d:64:cf:c1:84:13:c5:1e:50: c5:57:16:fd:76:7a:d7:af:dd:18:5d:44:36:9c:9a: 85:5d:0c:cb:7c:7e:21:29:ba:d5:ac:b9:a1:0e:e1: 32:c3:fa:4f:ad:51:ce:da:d4:e5:7a:d9:4f:3e:99: 6f:1d:fe:fd:bd:78:a8:af:40:25:f2:bf:ed:0e:74: 6f:0c:0f:89:5b:58:8e:d3:27:c7:58:fb:a4:ee:e5: 9c:b4:f2:17:be:bc:8a:93:e1:51:da:8a:f0:48:ac: e4:0d:12:24:38:04:a8:ab:99:6e:0e:34:91:d8:f9: 91:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D9:BE:43:AA:A3:8E:88:4A:A5:00:FD:90:9F:11:D8:4E:62:7E:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46898293-22e0-34e2-918a-a8f84b6a8ada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:17:6c:e1:0f:8e:37:35:6a:36:35:83:4e:9b:79:0f:58:01: ef:de:e8:83:2d:f5:ee:a1:a3:2d:d7:29:89:68:8e:64:51:8e: af:13:1d:1d:f6:cb:19:42:d1:ce:e9:6f:8b:e4:6c:ce:32:aa: d2:3d:b5:1c:f4:e4:a6:d8:40:02:22:0b:0d:ed:d0:d9:a5:9f: a8:02:77:2e:3a:40:59:d3:4a:99:fc:98:60:ba:47:81:c1:e0: ad:57:2f:ba:ee:98:b2:df:99:ae:2a:34:f2:02:a4:1e:0c:91: 02:12:a4:e6:dc:e1:da:0b:88:35:bb:97:d3:80:d2:f8:be:17: d4:3d:1c:07:ac:14:63:ce:c4:5e:5b:d3:b3:20:3a:42:39:c2: dc:3a:27:d9:92:bd:14:b5:7d:35:65:ca:45:3f:6a:01:60:9e: 78:83:84:09:43:1d:ab:3b:af:5e:fd:70:cd:8d:50:c3:67:56: c6:c0:bd:35:32:50:22:e2:99:48:3c:ed:43:2d:c9:42:90:16: 4b:4e:45:2c:a0:35:41:bc:fc:1e:9f:ce:b5:1c:b4:b0:18:79: 5c:df:40:82:7f:e7:08:4d:a4:f1:88:94:85:bc:34:a3:50:6c: 91:e2:b9:01:87:09:c8:9b:b6:03:c9:72:20:54:d7:3d:45:2e: 37:f4:72:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhrovzMSFnrAl5OBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEwMzA5MjY0N1oXDTI1MDQwMzA4MjY0N1owLzEtMCsGA1UEAxMk NGY1ZTRkYzYtZDRhZi00MzhlLTkyM2ItMzc2Nzc3OTM5ZTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS2KY5V68356cHALvz4djcxqhH6SG1mP+JrM VCUHJ9PclFHQRbj6uoxl2xgkX3hVwaON4p8FhyxbIcVxN/wAhgrnTL/ZWsimdhql AnfgYsy14pZn+xoT8vpf8Ijh0wSoeptTiyTVMAcUTBfmv2iqW+8vEGfogHwQ5Q0I 6W3iKJulxPVcComyYnGil7UdZM/BhBPFHlDFVxb9dnrXr90YXUQ2nJqFXQzLfH4h KbrVrLmhDuEyw/pPrVHO2tTletlPPplvHf79vXior0Al8r/tDnRvDA+JW1iO0yfH WPuk7uWctPIXvryKk+FR2orwSKzkDRIkOASoq5luDjSR2PmR1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7ZvkOqo46ISqUA/ZCfEdhOYn4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDY4OTgyOTMtMjJlMC0z NGUyLTkxOGEtYThmODRiNmE4YWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9HYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0XbOEPjjc1ajY1g06beQ9YAe/e6IMt9e6hoy3XKYlojmRRjq8THR32 yxlC0c7pb4vkbM4yqtI9tRz05KbYQAIiCw3t0Nmln6gCdy46QFnTSpn8mGC6R4HB 4K1XL7rumLLfma4qNPICpB4MkQISpObc4doLiDW7l9OA0vi+F9Q9HAesFGPOxF5b 07MgOkI5wtw6J9mSvRS1fTVlykU/agFgnniDhAlDHas7r179cM2NUMNnVsbAvTUy UCLimUg87UMtyUKQFktORSygNUG8/B6fzrUctLAYeVzfQIJ/5whNpPGIlIW8NKNQ bJHiuQGHCcibtgPJciBU1z1FLjf0cho= -----END CERTIFICATE-----Generated at Fri Mar 14 15:00:55 2025 by rpki-client