$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/645bff21-1100-36b5-beda-bc1226ca9fdb.roa File: 645bff21-1100-36b5-beda-bc1226ca9fdb.roa (raw, json) Hash identifier: TmfndVes0ziZrfxkWTgWFNd100SrmDP/K3juaXtb+GY= Subject key identifier: C3:62:F6:C9:23:C4:7D:53:30:3E:6D:F7:7B:08:11:2A:F9:24:75:08 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BBBB8C4E2A2B76E6774D56C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/645bff21-1100-36b5-beda-bc1226ca9fdb.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.211.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:8c:4e:2a:2b:76:e6:77:4d:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=cd4570e2-56b7-48d8-9e58-90a8e04353fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8b:6e:3f:08:29:2f:fa:9e:7a:e9:0a:96:76: 93:4d:a4:a7:eb:d4:6c:be:7b:f8:11:48:ff:39:7b: f1:1b:d2:ec:90:ab:38:34:44:96:bb:85:ee:0e:e3: 30:98:cb:9c:ce:16:c4:f5:23:a5:8e:22:e6:18:62: 65:73:b9:80:91:0a:be:54:25:8a:02:63:77:83:5c: 1d:bb:f2:aa:53:11:fe:fa:64:a0:ad:a3:de:61:40: b9:46:ce:2a:6c:53:59:e6:98:d6:31:06:91:8a:d5: 51:c1:78:7f:c3:cf:96:9a:6f:ca:63:06:7b:74:87: 58:a8:1d:08:0f:be:95:12:37:36:bd:61:31:53:65: 13:f4:e2:15:ba:2d:fb:9b:73:c0:b6:99:bc:54:e7: 3f:6c:19:a8:bf:37:4d:fc:81:2e:58:5a:ed:7b:a8: f3:6f:6e:fb:ea:e8:5e:05:9d:55:34:4c:13:68:ab: 10:9d:a7:f1:fd:dd:17:f3:f9:40:bd:d6:0b:1c:49: b0:a5:6c:72:a1:ae:78:cb:fd:3d:a1:a8:5f:61:57: fa:ec:6b:f9:20:73:ce:14:26:a3:d9:a7:a1:c9:24: a2:c9:6a:26:dd:dc:cf:dd:80:95:36:f0:20:09:03: d9:37:2b:30:3e:18:4e:0b:d3:2a:ce:72:b5:8c:c6: 32:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:62:F6:C9:23:C4:7D:53:30:3E:6D:F7:7B:08:11:2A:F9:24:75:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/645bff21-1100-36b5-beda-bc1226ca9fdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e2:68:bc:b6:fd:56:f5:02:ed:c8:58:d0:f0:7c:15:13:a2: d5:34:97:ae:94:16:cd:62:77:6a:f7:a7:75:94:6f:58:b8:92: ec:72:d9:da:87:2e:a7:7a:e8:af:69:76:4a:6b:4c:c4:be:d5: 70:83:90:9f:3d:c6:f4:21:f2:42:56:da:b1:2d:e8:d6:5c:53: dc:bc:34:2d:bf:be:66:f0:40:0d:15:0c:6b:ed:f4:d1:b4:c9: 3c:04:5b:22:cc:c4:b8:f7:a8:86:46:38:69:e2:62:24:84:30: 3f:72:ec:06:37:3d:1c:de:98:01:51:41:45:c9:6a:f5:38:a3: ab:72:36:25:1a:99:00:0a:04:cd:8a:8e:43:02:a4:5b:1f:5b: 7a:08:09:ae:16:e9:74:51:70:c5:10:42:96:54:12:b7:4e:32: f3:d1:26:af:b2:7c:66:ef:f5:2e:6a:37:37:d8:86:d3:dc:03: b8:b1:c3:5c:69:72:23:fd:1a:eb:df:bc:9b:8f:66:b4:7a:f3: a0:f7:e9:2c:f6:ad:9b:93:c9:78:f1:d9:dc:25:b3:34:f9:ca: 7a:50:47:23:76:cd:06:41:1d:72:b2:fe:8a:35:ed:46:0b:ff: b6:38:0d:a6:55:1c:e3:22:fb:c7:80:c1:de:d4:63:f9:38:82: 13:a8:96:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4xOKit25ndNVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk Y2Q0NTcwZTItNTZiNy00OGQ4LTllNTgtOTBhOGUwNDM1M2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7otuPwgpL/qeeukKlnaTTaSn69Rsvnv4EUj/ OXvxG9LskKs4NESWu4XuDuMwmMuczhbE9SOljiLmGGJlc7mAkQq+VCWKAmN3g1wd u/KqUxH++mSgraPeYUC5Rs4qbFNZ5pjWMQaRitVRwXh/w8+Wmm/KYwZ7dIdYqB0I D76VEjc2vWExU2UT9OIVui37m3PAtpm8VOc/bBmovzdN/IEuWFrte6jzb2776uhe BZ1VNEwTaKsQnafx/d0X8/lAvdYLHEmwpWxyoa54y/09oahfYVf67Gv5IHPOFCaj 2aehySSiyWom3dzP3YCVNvAgCQPZNyswPhhOC9MqznK1jMYyTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNi9skjxH1TMD5t93sIESr5JHUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjQ1YmZmMjEtMTEwMC0z NmI1LWJlZGEtYmMxMjI2Y2E5ZmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9OyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDiaLy2/Vb1Au3IWNDwfBUTotU0l66UFs1id2r3p3WUb1i4kuxy2dqH Lqd66K9pdkprTMS+1XCDkJ89xvQh8kJW2rEt6NZcU9y8NC2/vmbwQA0VDGvt9NG0 yTwEWyLMxLj3qIZGOGniYiSEMD9y7AY3PRzemAFRQUXJavU4o6tyNiUamQAKBM2K jkMCpFsfW3oICa4W6XRRcMUQQpZUErdOMvPRJq+yfGbv9S5qNzfYhtPcA7ixw1xp ciP9GuvfvJuPZrR686D36Sz2rZuTyXjx2dwlszT5ynpQRyN2zQZBHXKy/oo17UYL /7Y4DaZVHOMi+8eAwd7UY/k4ghOolmg= -----END CERTIFICATE-----Generated at Sat Apr 5 11:17:07 2025 by rpki-client