$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f8f5272-931a-3c65-a6d3-014af3db641b.roa File: 4f8f5272-931a-3c65-a6d3-014af3db641b.roa (raw, json) Hash identifier: umzWq71k7XO/iVqdTidxHhzx3fDENs1xmku4D+IWo4c= Subject key identifier: BE:36:AF:85:25:1E:39:A3:48:1C:82:49:0F:58:81:0D:F5:8E:99:BF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584929E3DD19DA7AC35154B37040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f8f5272-931a-3c65-a6d3-014af3db641b.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 16625 IP address blocks: 23.207.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:dd:19:da:7a:c3:51:54:b3:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=c7db3e16-01c3-4f0f-8a26-ff4de65a871d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:21:c5:65:75:2a:47:ce:e3:35:20:94:06:c1: 4c:e3:74:23:13:10:39:4d:35:0d:17:48:53:eb:91: 6d:db:27:c5:a2:8a:96:67:77:26:06:a6:0d:3f:05: d1:d1:0d:0c:90:d0:b1:5c:be:30:66:72:74:33:04: 35:c7:35:01:40:18:b0:54:d2:50:26:1d:58:02:0c: 3c:e6:b5:cf:df:0b:e9:de:f4:3a:91:d9:0a:8f:8e: d4:37:63:16:a8:a0:e7:ea:44:8d:06:34:51:27:cf: a1:51:12:6b:73:f0:46:e6:70:9f:54:bb:0e:f8:8f: 1d:79:03:4a:8a:1b:b3:e1:6a:3e:b0:32:72:17:a1: 9c:71:d3:59:55:17:96:d5:a5:3e:75:63:62:d4:3c: 71:1e:af:22:79:2a:63:c2:c7:e9:40:f8:02:7b:85: 01:80:b9:3f:0a:2f:02:68:b3:e7:a5:b6:38:ef:ed: af:a2:05:69:6a:e8:48:67:55:00:e7:da:a9:a6:90: 1d:b0:31:20:01:18:51:8c:a9:05:84:e3:75:dd:20: 70:4f:a1:16:2b:5f:1a:60:a7:8b:2a:d4:01:2a:6e: 5d:12:e7:a2:fd:3f:37:85:b9:6c:b2:07:22:33:4a: d7:50:83:66:45:18:c8:5f:98:88:41:1e:2e:66:93: ce:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:36:AF:85:25:1E:39:A3:48:1C:82:49:0F:58:81:0D:F5:8E:99:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f8f5272-931a-3c65-a6d3-014af3db641b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a7:bf:9c:87:34:99:67:24:25:82:59:63:3f:88:46:90:65: 52:3e:96:f4:76:60:7c:9f:60:b3:84:f6:6a:b2:62:d0:be:f3: d9:f8:9d:44:c4:79:b7:b6:03:f6:1e:7a:90:e5:ec:7e:74:45: 98:98:c9:cb:96:8e:63:03:f4:88:2c:0d:35:bc:b9:a0:40:36: b9:bd:ce:1b:d1:bb:7f:60:06:ee:1f:5e:61:4e:e0:db:5f:93: 73:5c:08:cf:fa:95:9a:5e:da:b1:5b:2f:7b:04:c2:dd:a0:2a: c2:2b:33:db:85:8b:97:8d:9a:7b:e7:fa:4c:bc:c0:8f:e0:19: d4:94:16:b1:bb:ce:be:0e:0a:9a:3a:9f:58:69:ab:41:70:fa: f9:2b:ab:af:e4:1b:d3:7a:1a:e6:9f:5b:ed:7c:4d:dd:22:bb: 48:26:5e:2f:1e:57:85:00:3a:2a:de:c7:8a:a0:66:c5:58:fb: 7f:77:52:9a:52:11:21:5c:63:79:69:de:c8:39:ea:6f:e6:76: b7:3b:55:af:02:a2:e8:fa:e7:76:ad:74:67:d1:62:41:66:90: 09:6f:a9:4b:a8:e7:ae:1a:0b:c1:71:5f:27:51:00:03:2b:10: db:8f:54:40:1f:01:1c:e5:e3:18:d8:eb:2b:30:b4:e0:7a:a0: 6f:86:54:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkp490Z2nrDUVSzcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk YzdkYjNlMTYtMDFjMy00ZjBmLThhMjYtZmY0ZGU2NWE4NzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCHFZXUqR87jNSCUBsFM43QjExA5TTUNF0hT 65Ft2yfFooqWZ3cmBqYNPwXR0Q0MkNCxXL4wZnJ0MwQ1xzUBQBiwVNJQJh1YAgw8 5rXP3wvp3vQ6kdkKj47UN2MWqKDn6kSNBjRRJ8+hURJrc/BG5nCfVLsO+I8deQNK ihuz4Wo+sDJyF6GccdNZVReW1aU+dWNi1DxxHq8ieSpjwsfpQPgCe4UBgLk/Ci8C aLPnpbY47+2vogVpauhIZ1UA59qpppAdsDEgARhRjKkFhON13SBwT6EWK18aYKeL KtQBKm5dEuei/T83hblssgciM0rXUINmRRjIX5iIQR4uZpPOpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL42r4UlHjmjSByCSQ9YgQ31jpm/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGY4ZjUyNzItOTMxYS0z YzY1LWE2ZDMtMDE0YWYzZGI2NDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8/aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSnv5yHNJlnJCWCWWM/iEaQZVI+lvR2YHyfYLOE9mqyYtC+89n4nUTE ebe2A/YeepDl7H50RZiYycuWjmMD9IgsDTW8uaBANrm9zhvRu39gBu4fXmFO4Ntf k3NcCM/6lZpe2rFbL3sEwt2gKsIrM9uFi5eNmnvn+ky8wI/gGdSUFrG7zr4OCpo6 n1hpq0Fw+vkrq6/kG9N6GuafW+18Td0iu0gmXi8eV4UAOirex4qgZsVY+393UppS ESFcY3lp3sg56m/mdrc7Va8Couj653atdGfRYkFmkAlvqUuo564aC8FxXydRAAMr ENuPVEAfARzl4xjY6yswtOB6oG+GVI0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:54 2025 by rpki-client