$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57b49f85-23ca-30b3-8ada-d3455f8bb05c.roa File: 57b49f85-23ca-30b3-8ada-d3455f8bb05c.roa (raw, json) Hash identifier: F3bzUH1U5Z8N49GMp8UH+cUNjDnMgvE+X8DwLNrE3Cc= Subject key identifier: AD:47:E4:B1:96:09:C9:20:4E:9E:D6:75:8E:1C:DD:9E:90:1A:89:CC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BE863D94F88C675EDF54BB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57b49f85-23ca-30b3-8ada-d3455f8bb05c.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.214.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:3d:94:f8:8c:67:5e:df:54:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=d4e5f658-0131-42ee-bb54-3f8acfbae48f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9e:7f:06:cb:59:f0:b0:ba:43:1c:8a:be:e8: 71:a6:29:55:76:9f:2a:33:3f:77:cf:0a:9c:a7:c3: 14:28:cc:e9:4d:7b:67:ab:c3:db:3a:1a:c2:c2:d4: b5:9e:8a:c5:11:53:27:4b:6a:93:74:21:4d:f6:6b: 7b:6a:8a:fd:fb:5b:4d:70:8a:b2:61:de:30:dc:01: 02:82:2c:40:a9:30:24:ec:81:81:fd:50:87:10:60: f3:19:3d:b2:70:8c:f5:99:70:88:8d:f3:8c:79:20: ab:49:a3:5d:76:b7:2d:05:cb:cd:a8:3d:6e:f6:12: 25:23:8c:7a:3a:b9:a1:19:b7:0d:ea:2e:5a:11:09: e3:29:94:d6:2b:cf:ef:3a:e2:d1:02:1c:9e:f9:76: b3:8a:72:a0:9e:7d:10:85:b6:c7:cf:48:f2:4a:33: ca:73:6e:7c:df:7e:55:9d:33:f1:86:dd:90:ca:69: 99:14:f3:4d:02:6d:5b:dc:0d:1c:e7:f1:af:47:c6: 11:1e:3b:3b:c8:55:fa:3c:cd:70:d5:8a:0f:b9:c3: 53:fd:aa:21:1d:55:71:4c:19:3d:aa:47:56:32:51: e1:4c:59:b0:cd:fd:dc:6b:32:14:3d:6d:86:be:40: 91:d6:d8:95:b7:9a:b7:b5:ca:8b:96:23:1d:ec:9d: 81:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:47:E4:B1:96:09:C9:20:4E:9E:D6:75:8E:1C:DD:9E:90:1A:89:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57b49f85-23ca-30b3-8ada-d3455f8bb05c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:0b:00:b3:45:56:8e:66:2b:71:4f:9b:bf:74:0c:ad:9d:51: db:68:9d:04:12:c7:da:a5:cb:55:75:66:19:b5:1d:c6:3c:03: 6b:7d:b4:06:52:37:d4:79:1f:91:06:7a:06:d9:49:a1:e1:bd: 05:76:f2:54:14:e7:eb:8e:bd:e4:b3:ca:3b:24:b6:be:7a:a4: 1e:01:e2:8e:b1:f1:3d:a1:10:a7:1b:3a:76:7c:6b:7a:21:a2: 7b:a1:a4:4d:70:83:aa:30:13:7a:b6:11:af:2c:9e:28:eb:b2: cf:52:9c:03:2f:89:f4:f1:61:c8:77:31:2f:51:f4:fb:37:11: b2:a0:a1:f1:da:d3:58:33:83:4d:52:65:cf:b7:79:8d:1b:5b: cf:cf:61:83:c7:ea:8c:4d:c4:68:18:dc:99:fc:29:30:99:6e: 92:50:cc:59:6e:9e:f6:10:82:88:53:07:8d:43:7b:03:64:8a: b9:82:45:9b:40:a6:40:0f:09:b4:22:76:dd:70:83:6f:fe:ee: 5f:9b:2f:9c:66:eb:f2:85:d7:ca:96:da:39:e8:58:83:70:6b: e1:ed:16:b5:3d:dd:89:56:7e:06:8f:21:4b:5d:42:70:72:1b: d7:6b:6c:c5:23:bd:59:45:6d:e1:6b:c0:12:f5:e2:a4:34:8a: 9c:f8:06:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hj2U+IxnXt9Uu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk ZDRlNWY2NTgtMDEzMS00MmVlLWJiNTQtM2Y4YWNmYmFlNDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp5/BstZ8LC6QxyKvuhxpilVdp8qMz93zwqc p8MUKMzpTXtnq8PbOhrCwtS1norFEVMnS2qTdCFN9mt7aor9+1tNcIqyYd4w3AEC gixAqTAk7IGB/VCHEGDzGT2ycIz1mXCIjfOMeSCrSaNddrctBcvNqD1u9hIlI4x6 OrmhGbcN6i5aEQnjKZTWK8/vOuLRAhye+XazinKgnn0QhbbHz0jySjPKc258335V nTPxht2QymmZFPNNAm1b3A0c5/GvR8YRHjs7yFX6PM1w1YoPucNT/aohHVVxTBk9 qkdWMlHhTFmwzf3cazIUPW2GvkCR1tiVt5q3tcqLliMd7J2BxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1H5LGWCckgTp7WdY4c3Z6QGonMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTdiNDlmODUtMjNjYS0z MGIzLThhZGEtZDM0NTVmOGJiMDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9Z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGELALNFVo5mK3FPm790DK2dUdtonQQSx9qly1V1Zhm1HcY8A2t9tAZS N9R5H5EGegbZSaHhvQV28lQU5+uOveSzyjsktr56pB4B4o6x8T2hEKcbOnZ8a3oh onuhpE1wg6owE3q2Ea8snijrss9SnAMvifTxYch3MS9R9Ps3EbKgofHa01gzg01S Zc+3eY0bW8/PYYPH6oxNxGgY3Jn8KTCZbpJQzFlunvYQgohTB41DewNkirmCRZtA pkAPCbQidt1wg2/+7l+bL5xm6/KF18qW2jnoWINwa+HtFrU93YlWfgaPIUtdQnBy G9drbMUjvVlFbeFrwBL14qQ0ipz4Bsk= -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:32 2025 by rpki-client