$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59d7baf7-9176-3963-8316-9206e458e448.roa File: 59d7baf7-9176-3963-8316-9206e458e448.roa (raw, json) Hash identifier: oTX00IovejaHbMdgp3+kRN8KWOTII6o5d46ibTMKF5A= Subject key identifier: 29:AE:7C:47:69:7D:CB:F4:0B:F0:4A:55:D6:BD:10:DF:83:D2:66:E4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF4A16C73C7E205E9690880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59d7baf7-9176-3963-8316-9206e458e448.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.213.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:a1:6c:73:c7:e2:05:e9:69:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=322480bd-c8b7-4e3f-8524-ca7e2b8e6bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1d:59:c8:6f:28:e7:3d:fb:bf:e3:0a:20:c1: 4a:63:88:fb:fc:67:9e:e1:dc:27:17:a9:9f:5c:05: 8f:62:4d:09:33:c1:c1:93:f3:0d:c9:6a:93:d7:b5: 43:75:72:20:b5:4e:2c:c6:d8:39:9d:81:24:ec:94: 0f:20:2c:1c:e3:69:13:e6:77:3d:5e:0d:03:c4:9e: 78:5d:31:02:a6:a9:bd:7d:ea:f5:9f:ea:87:1f:16: f2:64:f5:2f:e4:ed:64:8d:5e:f8:59:6a:77:b3:61: ce:2e:d7:7d:f7:6b:54:d9:23:46:11:58:ed:48:d7: e4:17:18:2a:42:00:b0:84:5f:52:91:6c:e9:34:b5: b2:20:be:b2:80:25:a2:05:55:7f:3a:42:64:c2:29: 15:ae:94:eb:0b:4b:56:8c:12:cb:74:1f:fb:2b:74: 10:cf:d6:76:e2:e5:56:50:74:58:13:f2:8f:72:41: 88:20:18:3b:16:93:50:31:43:16:4c:91:b6:0c:e9: 8a:81:36:bb:0f:cb:0a:34:f1:ed:7c:8a:72:fc:b1: c5:bf:53:62:a2:75:72:27:07:46:eb:ec:d3:63:0e: 46:2b:9c:78:e0:1b:f7:98:e5:d9:9e:bf:38:7d:4f: 23:bf:b5:4c:13:43:54:90:fa:cc:f3:c8:c6:0c:e2: 3c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AE:7C:47:69:7D:CB:F4:0B:F0:4A:55:D6:BD:10:DF:83:D2:66:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59d7baf7-9176-3963-8316-9206e458e448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:33:6c:95:17:7b:49:f1:a7:09:5a:8c:a2:89:85:70:4e:6e: b3:01:b3:f4:b6:db:ec:29:5b:7a:9b:73:ae:c6:ff:5d:30:d6: 10:5a:b6:26:73:08:80:4c:e7:84:1d:c0:9d:19:05:e2:78:7a: 22:bb:f1:e5:83:7e:d7:f8:47:73:d8:17:69:2c:4f:03:38:12: 5a:a0:5f:0c:f4:8f:2d:3e:27:d8:48:cb:c9:c3:cb:6f:32:48: 51:98:ac:8d:e7:af:dd:fc:72:ba:ac:0c:36:41:12:cf:46:50: 91:cf:29:b5:f0:a8:7e:44:ec:cd:b8:24:ac:ec:2e:cb:92:bd: b0:53:2b:06:54:a8:b9:38:4d:a5:59:7c:2e:97:81:18:92:46: 00:20:25:38:b6:c1:af:33:34:8f:cc:6f:9f:62:fb:22:f6:f2: f4:1e:78:45:a3:a8:52:de:24:a3:6b:a2:20:c6:68:d2:35:f8: 22:82:a5:1e:88:96:1b:b8:c8:eb:34:15:2d:b4:45:2f:05:92: c6:67:62:8d:f7:c9:5d:61:8d:43:ed:34:34:26:26:92:6d:29: 7f:cf:e3:ef:dd:b6:0e:e3:1c:2e:0a:ec:f2:1c:42:9a:72:6b: 7e:6d:ce:54:28:53:5b:50:0d:da:ab:d7:f5:ae:0d:ca:02:8e: 47:a6:ad:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9KFsc8fiBelpCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MzIyNDgwYmQtYzhiNy00ZTNmLTg1MjQtY2E3ZTJiOGU2YmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh1ZyG8o5z37v+MKIMFKY4j7/Gee4dwnF6mf XAWPYk0JM8HBk/MNyWqT17VDdXIgtU4sxtg5nYEk7JQPICwc42kT5nc9Xg0DxJ54 XTECpqm9fer1n+qHHxbyZPUv5O1kjV74WWp3s2HOLtd992tU2SNGEVjtSNfkFxgq QgCwhF9SkWzpNLWyIL6ygCWiBVV/OkJkwikVrpTrC0tWjBLLdB/7K3QQz9Z24uVW UHRYE/KPckGIIBg7FpNQMUMWTJG2DOmKgTa7D8sKNPHtfIpy/LHFv1NionVyJwdG 6+zTYw5GK5x44Bv3mOXZnr84fU8jv7VME0NUkPrM88jGDOI8YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmufEdpfcv0C/BKVda9EN+D0mbkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTlkN2JhZjctOTE3Ni0z OTYzLTgzMTYtOTIwNmU0NThlNDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9XQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4zbJUXe0nxpwlajKKJhXBObrMBs/S22+wpW3qbc67G/10w1hBatiZz CIBM54QdwJ0ZBeJ4eiK78eWDftf4R3PYF2ksTwM4ElqgXwz0jy0+J9hIy8nDy28y SFGYrI3nr938crqsDDZBEs9GUJHPKbXwqH5E7M24JKzsLsuSvbBTKwZUqLk4TaVZ fC6XgRiSRgAgJTi2wa8zNI/Mb59i+yL28vQeeEWjqFLeJKNroiDGaNI1+CKCpR6I lhu4yOs0FS20RS8FksZnYo33yV1hjUPtNDQmJpJtKX/P4+/dtg7jHC4K7PIcQppy a35tzlQoU1tQDdqr1/WuDcoCjkemrQs= -----END CERTIFICATE-----Generated at Sun Jun 8 06:11:50 2025 by rpki-client