$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60f70201-dd72-34ee-b145-8cd6056b4884.roa File: 60f70201-dd72-34ee-b145-8cd6056b4884.roa (raw, json) Hash identifier: jJ8mp5VBUDE1ep4e/X5SXjs1Xoan159oZCc77sp4ilw= Subject key identifier: 4A:80:14:75:28:F3:31:18:92:D4:3C:EE:66:81:62:64:13:94:DA:B1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF48BF59D9D2D94EE2FD00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60f70201-dd72-34ee-b145-8cd6056b4884.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 35994 IP address blocks: 23.217.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:48:bf:59:d9:d2:d9:4e:e2:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=4620cf7f-0a6a-4d56-b116-8e020e85116e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:11:c3:1d:0d:25:b5:42:ce:c5:af:83:38:de: 87:68:cf:83:78:8f:a3:e0:ce:03:91:1d:a9:27:88: 9e:96:f1:d5:f1:a8:d5:65:1b:95:c7:3f:0e:5e:fc: 4c:39:4a:6c:ce:cf:ce:5f:90:8d:fb:6f:6b:27:0d: ee:d9:a2:21:8c:00:c5:a3:60:34:03:1c:d5:ea:3f: ba:70:b6:c0:4e:17:04:94:07:d9:e0:13:5f:7f:a6: b6:60:e1:ef:94:a9:29:87:da:c7:e4:75:2d:49:f6: 9c:b3:4b:04:46:54:56:81:fa:83:ca:0f:9c:cc:08: 3c:80:fe:a0:ee:c0:e8:74:98:ea:99:27:5f:77:20: 9d:ff:77:da:0e:a4:4c:83:2f:66:b5:1b:26:86:b0: d0:44:1a:e2:d6:ff:31:35:d6:52:31:f7:bd:39:09: 19:11:4b:29:2c:62:8a:ef:b2:3d:de:cd:6d:4c:5f: 29:fb:cf:fb:7e:98:e4:65:10:93:7a:d4:03:94:af: d4:31:d2:c3:69:cd:03:ca:78:a4:de:41:0d:1c:96: eb:40:1d:fb:12:03:f4:52:8d:eb:e6:78:16:91:03: b1:1f:da:66:05:9c:5f:99:a0:65:3f:55:22:14:6d: 16:ef:a8:37:aa:21:6a:f8:0a:81:58:39:c1:06:5d: 16:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:80:14:75:28:F3:31:18:92:D4:3C:EE:66:81:62:64:13:94:DA:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60f70201-dd72-34ee-b145-8cd6056b4884.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:cd:2b:dd:0e:fd:fb:38:8a:96:1f:28:80:0c:d9:67:7e:9a: 90:52:be:7a:52:83:eb:51:cb:ee:6b:7e:0f:23:b2:59:2e:50: bf:a5:da:46:42:c6:04:2e:ad:dc:02:c1:1f:e6:b6:cc:94:ac: 81:95:dd:3c:d2:a4:48:cd:d4:80:5b:d7:da:31:d9:22:10:d5: 24:1a:96:67:c7:a9:b5:fc:43:d1:b3:aa:84:ed:bf:50:3e:bd: e8:ef:4a:11:62:3c:c6:e9:22:ef:50:16:62:a4:1f:06:31:87: ae:1e:e8:5c:f1:a3:e4:20:b4:c5:f7:0c:dc:b5:57:72:6b:23: 25:da:10:8c:66:08:1c:fe:16:f5:ee:a4:25:4e:cf:73:9a:ac: 5d:80:19:3e:da:e6:50:4f:b7:2b:81:20:58:7e:31:51:70:b3: 24:c1:69:ab:a1:72:f5:bc:a4:e8:83:a7:43:4f:69:f0:28:08: cd:0e:cf:f7:4e:40:00:2e:8d:02:23:21:1e:a6:c7:75:09:4f: cb:0d:fb:b7:6a:e7:23:b0:ec:36:06:3c:25:6a:37:e0:c6:ff: 88:35:d3:27:46:6f:b5:63:96:8d:12:42:74:6c:ad:bc:c7:11: f5:09:3c:ca:69:9b:4e:14:7e:f6:6a:c0:8d:59:13:ff:7b:fd: 0a:b4:cf:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0i/WdnS2U7i/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NDYyMGNmN2YtMGE2YS00ZDU2LWIxMTYtOGUwMjBlODUxMTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBHDHQ0ltULOxa+DON6HaM+DeI+j4M4DkR2p J4ielvHV8ajVZRuVxz8OXvxMOUpszs/OX5CN+29rJw3u2aIhjADFo2A0AxzV6j+6 cLbAThcElAfZ4BNff6a2YOHvlKkph9rH5HUtSfacs0sERlRWgfqDyg+czAg8gP6g 7sDodJjqmSdfdyCd/3faDqRMgy9mtRsmhrDQRBri1v8xNdZSMfe9OQkZEUspLGKK 77I93s1tTF8p+8/7fpjkZRCTetQDlK/UMdLDac0Dynik3kENHJbrQB37EgP0Uo3r 5ngWkQOxH9pmBZxfmaBlP1UiFG0W76g3qiFq+AqBWDnBBl0WGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqAFHUo8zEYktQ87maBYmQTlNqxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjBmNzAyMDEtZGQ3Mi0z NGVlLWIxNDUtOGNkNjA1NmI0ODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9lrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7NK90O/fs4ipYfKIAM2Wd+mpBSvnpSg+tRy+5rfg8jslkuUL+l2kZC xgQurdwCwR/mtsyUrIGV3TzSpEjN1IBb19ox2SIQ1SQalmfHqbX8Q9GzqoTtv1A+ vejvShFiPMbpIu9QFmKkHwYxh64e6Fzxo+QgtMX3DNy1V3JrIyXaEIxmCBz+FvXu pCVOz3OarF2AGT7a5lBPtyuBIFh+MVFwsyTBaauhcvW8pOiDp0NPafAoCM0Oz/dO QAAujQIjIR6mx3UJT8sN+7dq5yOw7DYGPCVqN+DG/4g10ydGb7Vjlo0SQnRsrbzH EfUJPMppm04UfvZqwI1ZE/97/Qq0z3g= -----END CERTIFICATE-----Generated at Sat Jun 7 14:39:51 2025 by rpki-client