$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ebf97d4-5d39-3eda-9bff-45e12e512c27.roa File: 5ebf97d4-5d39-3eda-9bff-45e12e512c27.roa (raw, json) Hash identifier: A57wIeP4EqfB5uzmUwsNDyiA2mLBrDX0YW0dbVk00Yc= Subject key identifier: 4B:86:BE:C0:7A:35:A4:E6:99:CD:AE:25:D6:CC:A9:88:A5:3E:5C:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858491ED6D237A773CDA6FF5BD6C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ebf97d4-5d39-3eda-9bff-45e12e512c27.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 9498 IP address blocks: 23.208.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:d2:37:a7:73:cd:a6:ff:5b:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=a50dd84c-2f7b-430b-82c4-a652c754499b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2d:56:16:f1:6b:e1:19:74:12:6a:36:10:91: a7:1f:d4:4b:2d:88:18:3f:1d:e1:f7:2d:58:b5:f2: 54:4f:44:4f:ce:cf:34:30:73:13:00:f1:75:4b:75: 23:c9:8a:36:82:3b:d2:83:14:d4:b5:4c:d9:2c:67: 4e:60:c7:4d:cd:72:4a:30:66:bb:6c:dc:f2:ed:fb: 7d:d1:f6:85:9a:d1:a4:44:0b:9a:83:64:27:4e:9b: 8f:40:7e:4f:23:5d:55:cd:d0:c7:53:b8:99:d9:25: fe:0d:33:33:61:46:48:84:07:12:d4:8f:80:43:79: 18:5d:88:19:f0:d2:e0:00:ad:15:b6:66:cd:a0:cb: 6b:b9:74:aa:6c:b0:cc:35:9b:a1:06:b6:ea:42:fe: 3d:bd:a3:b2:aa:3a:39:b3:b2:ff:4f:c9:70:87:fb: 72:a3:13:cc:d5:19:33:48:9e:8c:38:a1:12:c7:c3: 97:8e:26:49:98:50:93:26:70:3f:27:5a:e0:e2:c3: 78:96:bf:1b:33:fb:ac:b7:41:f3:8d:5a:67:41:ee: bc:e9:22:71:70:28:75:c7:ab:30:db:77:96:1a:2d: 28:bf:a4:c8:b7:ba:ae:07:c3:ac:62:fc:e1:26:f3: d9:ac:dd:c6:d0:d0:bf:60:62:a9:f2:34:42:78:79: c7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:86:BE:C0:7A:35:A4:E6:99:CD:AE:25:D6:CC:A9:88:A5:3E:5C:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ebf97d4-5d39-3eda-9bff-45e12e512c27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b2:84:a8:5c:e9:7f:48:57:1f:06:be:9d:89:20:26:40:e7: 9d:27:e6:7e:03:db:df:f2:ac:4b:e3:79:63:0d:8d:84:02:c0: e1:de:5f:e2:bb:c6:89:51:18:d5:f9:e1:19:3c:1e:34:ed:df: 01:92:06:20:0a:08:e7:8d:e6:94:f9:41:93:ee:60:b3:26:6c: 86:f9:0e:6d:ef:2c:60:0a:10:df:55:d4:4e:92:a1:8b:1c:67: 07:09:9e:c4:ff:8f:22:f1:27:66:40:db:60:72:8d:ef:71:06: d5:06:1e:38:c0:e1:ef:03:49:e6:98:43:d8:bb:da:dd:58:c5: ce:7d:7b:e7:ce:ac:9b:62:d8:63:c3:14:9a:75:64:51:82:5d: 8c:8b:4d:b2:af:79:ad:6e:b1:db:9f:1f:d6:8e:62:cd:25:f1: 1b:4f:2f:3f:36:eb:46:3a:d7:21:e1:74:3f:3f:a5:ac:76:f2: 1e:3c:b6:3b:14:b4:e5:61:65:de:9c:99:f9:10:94:b6:81:f9: 8d:aa:a8:4c:8f:80:bd:ea:03:27:8f:52:f9:45:a9:7b:9a:bc: d9:53:3f:45:6f:92:9d:f5:1f:53:f2:86:34:c9:00:56:64:32: 2a:bd:e6:67:c4:c7:73:83:6e:5c:88:13:7d:ed:8e:18:26:65: 88:11:a9:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1tI3p3PNpv9b1sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk YTUwZGQ4NGMtMmY3Yi00MzBiLTgyYzQtYTY1MmM3NTQ0OTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC1WFvFr4Rl0Emo2EJGnH9RLLYgYPx3h9y1Y tfJUT0RPzs80MHMTAPF1S3UjyYo2gjvSgxTUtUzZLGdOYMdNzXJKMGa7bNzy7ft9 0faFmtGkRAuag2QnTpuPQH5PI11VzdDHU7iZ2SX+DTMzYUZIhAcS1I+AQ3kYXYgZ 8NLgAK0VtmbNoMtruXSqbLDMNZuhBrbqQv49vaOyqjo5s7L/T8lwh/tyoxPM1Rkz SJ6MOKESx8OXjiZJmFCTJnA/J1rg4sN4lr8bM/ust0HzjVpnQe686SJxcCh1x6sw 23eWGi0ov6TIt7quB8OsYvzhJvPZrN3G0NC/YGKp8jRCeHnHVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuGvsB6NaTmmc2uJdbMqYilPlxVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWViZjk3ZDQtNWQzOS0z ZWRhLTliZmYtNDVlMTJlNTEyYzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9CwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOyhKhc6X9IVx8Gvp2JICZA550n5n4D29/yrEvjeWMNjYQCwOHeX+K7 xolRGNX54Rk8HjTt3wGSBiAKCOeN5pT5QZPuYLMmbIb5Dm3vLGAKEN9V1E6SoYsc ZwcJnsT/jyLxJ2ZA22Byje9xBtUGHjjA4e8DSeaYQ9i72t1Yxc59e+fOrJti2GPD FJp1ZFGCXYyLTbKvea1usdufH9aOYs0l8RtPLz8260Y61yHhdD8/pax28h48tjsU tOVhZd6cmfkQlLaB+Y2qqEyPgL3qAyePUvlFqXuavNlTP0Vvkp31H1PyhjTJAFZk Miq95mfEx3ODblyIE33tjhgmZYgRqZU= -----END CERTIFICATE-----Generated at Fri Mar 14 15:01:15 2025 by rpki-client