$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b4d5bf1-5302-3e4a-9d34-43a57dbe1e0d.roa File: 5b4d5bf1-5302-3e4a-9d34-43a57dbe1e0d.roa (raw, json) Hash identifier: 9K7MU9jvCtoYVblAqfMZO1IZ3mG4IJ9lcnJRBno0Aiw= Subject key identifier: 03:48:4A:72:81:6F:42:15:36:93:1F:FF:E5:0D:F0:3A:3F:CE:30:6C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849D85F842BC7A4C77D265CBC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b4d5bf1-5302-3e4a-9d34-43a57dbe1e0d.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 35994 IP address blocks: 23.217.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:84:2b:c7:a4:c7:7d:26:5c:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=b82d29f9-40a3-4f93-9745-572f7f9446b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0f:d1:d2:16:c2:da:40:6e:6e:7e:60:5b:d5: 99:bd:9d:01:5e:bb:04:7b:d4:9d:63:25:2d:9b:ae: 3d:e9:7c:38:10:b2:37:4f:e8:92:bd:ac:c5:ab:8e: 17:6c:4c:ba:fb:e1:71:a2:cb:96:03:53:61:b2:d2: b0:77:e3:65:37:04:fa:8b:f7:d3:43:b4:bf:2d:b0: f6:8d:5b:49:79:8a:7f:8b:6c:83:f3:94:81:a2:f4: bb:dc:4c:3c:f5:e9:2b:0a:6a:50:4a:0f:7f:f2:cd: bc:0f:c9:6a:a1:62:08:a5:69:80:43:b0:65:71:2f: 2b:8c:39:86:57:00:f6:17:87:d6:bf:f6:a7:c8:67: 48:30:c8:93:20:2d:4c:08:8e:57:44:84:f0:f5:87: 58:bb:9c:0a:e6:f7:80:52:23:4a:70:aa:ae:1a:1e: 7a:dd:08:eb:82:39:5e:84:74:19:6f:37:25:50:e6: d1:8d:31:a6:8b:b2:03:45:93:32:b5:49:46:c2:e6: 67:be:2b:1d:b0:d8:54:0c:b7:48:d0:f8:fc:51:21: 09:13:93:89:3a:fd:9e:90:ff:70:90:ce:71:9b:e7: 10:98:5e:b3:ac:02:9f:73:11:e7:1f:fc:4d:23:3e: 8f:38:41:0f:4d:1b:4e:9b:22:b9:47:2c:8a:68:e3: 55:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:48:4A:72:81:6F:42:15:36:93:1F:FF:E5:0D:F0:3A:3F:CE:30:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b4d5bf1-5302-3e4a-9d34-43a57dbe1e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:e0:14:ea:c0:a6:6c:2d:93:95:55:5a:07:60:57:14:3a:37: e8:38:f4:62:fd:aa:68:c8:68:6e:08:e7:c3:20:cd:5c:29:08: 76:91:27:bd:47:d5:6a:94:f3:10:f0:b4:9e:2d:76:39:bf:dd: 7c:be:7b:98:50:1c:ed:a6:4e:13:a5:8a:91:8a:f5:08:82:30: 84:5e:42:27:55:09:3d:10:e4:46:7b:0b:c3:13:a7:1c:6d:da: c9:40:55:89:2b:09:7f:e6:3c:11:ce:f5:61:47:eb:e0:98:7a: 82:28:05:25:57:1e:ac:c6:40:22:32:5e:80:57:18:c4:6d:35: 6e:66:67:c6:c6:af:a5:5c:40:bb:cf:9e:8b:aa:56:84:84:8b: 92:52:ad:92:06:14:e9:c1:3f:4c:e9:a9:eb:ee:b3:5e:26:13: 3a:0f:d1:f3:38:37:ee:55:e2:35:00:66:bc:66:69:fc:23:c9: 85:65:b3:79:dc:66:11:e2:8e:51:f4:7a:a3:e3:fd:54:36:39: 1e:1b:2f:38:80:c8:5e:02:d8:fa:a6:1c:c9:12:8c:f3:01:3a: bc:ce:27:a0:8f:4a:77:aa:df:64:1c:04:f2:08:19:38:ec:c8: fd:3c:02:86:26:31:f4:79:cf:d0:5a:92:96:29:1f:f5:03:f4: d8:1f:d7:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX4Qrx6THfSZcvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YjgyZDI5ZjktNDBhMy00ZjkzLTk3NDUtNTcyZjdmOTQ0NmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA/R0hbC2kBubn5gW9WZvZ0BXrsEe9SdYyUt m6496Xw4ELI3T+iSvazFq44XbEy6++FxosuWA1NhstKwd+NlNwT6i/fTQ7S/LbD2 jVtJeYp/i2yD85SBovS73Ew89ekrCmpQSg9/8s28D8lqoWIIpWmAQ7BlcS8rjDmG VwD2F4fWv/anyGdIMMiTIC1MCI5XRITw9YdYu5wK5veAUiNKcKquGh563Qjrgjle hHQZbzclUObRjTGmi7IDRZMytUlGwuZnvisdsNhUDLdI0Pj8USEJE5OJOv2ekP9w kM5xm+cQmF6zrAKfcxHnH/xNIz6POEEPTRtOmyK5RyyKaONV+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANISnKBb0IVNpMf/+UN8Do/zjBsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWI0ZDViZjEtNTMwMi0z ZTRhLTlkMzQtNDNhNTdkYmUxZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9nLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPgFOrApmwtk5VVWgdgVxQ6N+g49GL9qmjIaG4I58MgzVwpCHaRJ71H 1WqU8xDwtJ4tdjm/3Xy+e5hQHO2mThOlipGK9QiCMIReQidVCT0Q5EZ7C8MTpxxt 2slAVYkrCX/mPBHO9WFH6+CYeoIoBSVXHqzGQCIyXoBXGMRtNW5mZ8bGr6VcQLvP nouqVoSEi5JSrZIGFOnBP0zpqevus14mEzoP0fM4N+5V4jUAZrxmafwjyYVls3nc ZhHijlH0eqPj/VQ2OR4bLziAyF4C2PqmHMkSjPMBOrzOJ6CPSneq32QcBPIIGTjs yP08AoYmMfR5z9BakpYpH/UD9Ngf198= -----END CERTIFICATE-----Generated at Sat Jun 7 13:56:47 2025 by rpki-client