$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d64c3a2-e789-3e6b-8a88-cdce94fde92e.roa File: 6d64c3a2-e789-3e6b-8a88-cdce94fde92e.roa (raw, json) Hash identifier: F0/IGYeoBUzb+Z/MDvZmMO7SC3es0K6bv14sTooDOFA= Subject key identifier: F1:F6:A6:9D:E4:F0:55:50:88:76:C8:29:A8:DD:E2:8C:CA:22:2A:A3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495EEEF2C7A6C172588C6FF580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d64c3a2-e789-3e6b-8a88-cdce94fde92e.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.212.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:f2:c7:a6:c1:72:58:8c:6f:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=e1e8d891-f7aa-4fe0-afe4-d417ca6d8a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b0:80:5a:b4:9e:4f:a4:16:ce:b8:ed:65:11: c7:78:9e:ed:a2:d0:37:a6:2b:e2:c6:1a:84:87:06: 6d:ed:83:c5:60:75:57:9b:32:99:d7:05:77:bf:c6: 9e:de:1e:8c:9f:94:81:07:f1:09:a8:a5:91:8d:c6: 6e:c7:de:1f:82:bf:c0:52:e3:27:7e:fb:e2:f3:f5: 57:ab:01:7d:20:e9:ed:5c:fc:e0:26:2f:ee:69:df: 99:ec:60:2e:f8:ef:cb:d7:7a:07:30:76:17:58:3b: 6d:e9:f5:1e:35:5d:aa:f7:47:e2:2e:76:ca:c7:68: a0:52:8a:75:14:42:d3:be:19:35:ea:9f:9f:b9:fe: 1a:8b:71:51:2e:cb:02:51:27:5b:f6:58:98:d4:3c: 2f:c8:e5:52:83:13:46:f8:06:18:a6:55:08:ca:de: 5a:1a:6b:41:4b:28:37:a5:0b:21:00:54:87:2f:ea: 58:4e:43:34:a0:bd:e1:9a:e5:97:5c:dc:25:ac:3c: b5:32:38:be:a1:95:34:4f:ac:7f:8f:35:80:87:e1: 54:9f:c5:84:28:ee:33:32:c5:2a:8a:32:14:6e:10: 3f:e7:6c:4b:b3:cc:56:fe:22:06:90:07:06:44:34: 77:e6:ae:88:a6:25:c6:f6:82:df:c3:e8:c6:23:ac: c5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F6:A6:9D:E4:F0:55:50:88:76:C8:29:A8:DD:E2:8C:CA:22:2A:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d64c3a2-e789-3e6b-8a88-cdce94fde92e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:66:88:32:49:25:3c:5e:5d:7f:51:2a:a4:62:12:6b:23:ac: 03:0a:b1:7a:c2:9c:ed:86:c8:96:17:56:0d:49:2f:5d:21:fd: 3e:05:e3:db:75:3a:44:b4:81:13:07:b8:24:29:9c:4c:85:86: 64:b7:76:bb:e2:59:17:ed:cd:a0:61:6c:08:0b:03:da:d1:df: 0b:0c:ee:f2:14:90:37:f4:92:fd:f7:cc:77:6e:cd:8e:42:4f: ac:73:d0:27:fa:e3:71:a8:43:c1:e5:69:a8:15:af:e9:31:46: a4:92:12:c2:5c:c2:51:7f:8c:d9:8e:91:7f:9d:42:8a:3e:cb: 5a:c4:44:7f:c8:66:dd:29:e0:5b:b8:99:19:7e:51:51:34:d2: 85:30:f5:11:45:0f:2a:0e:1b:2b:ef:37:c3:d1:9b:1b:1c:dc: 76:12:00:26:2b:d1:80:60:4d:b9:6c:48:f0:e6:a1:cf:3a:18: 8c:7a:2e:20:ef:78:31:5b:64:17:67:b8:e2:d3:0c:20:be:6d: 5b:62:cd:6b:18:d1:ac:a1:29:12:3b:9e:72:60:67:06:09:ef: dc:05:40:2b:24:79:3d:56:4a:0b:24:fe:1a:b8:9d:6c:b3:1b: ca:3d:f1:da:ec:ec:6c:9f:84:97:cd:55:c1:ca:a3:61:1e:3f: a3:15:ca:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7vLHpsFyWIxv9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk ZTFlOGQ4OTEtZjdhYS00ZmUwLWFmZTQtZDQxN2NhNmQ4YTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7CAWrSeT6QWzrjtZRHHeJ7totA3pivixhqE hwZt7YPFYHVXmzKZ1wV3v8ae3h6Mn5SBB/EJqKWRjcZux94fgr/AUuMnfvvi8/VX qwF9IOntXPzgJi/uad+Z7GAu+O/L13oHMHYXWDtt6fUeNV2q90fiLnbKx2igUop1 FELTvhk16p+fuf4ai3FRLssCUSdb9liY1DwvyOVSgxNG+AYYplUIyt5aGmtBSyg3 pQshAFSHL+pYTkM0oL3hmuWXXNwlrDy1Mji+oZU0T6x/jzWAh+FUn8WEKO4zMsUq ijIUbhA/52xLs8xW/iIGkAcGRDR35q6IpiXG9oLfw+jGI6zFLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPH2pp3k8FVQiHbIKajd4ozKIiqjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmQ2NGMzYTItZTc4OS0z ZTZiLThhODgtY2RjZTk0ZmRlOTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9TtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtmiDJJJTxeXX9RKqRiEmsjrAMKsXrCnO2GyJYXVg1JL10h/T4F49t1 OkS0gRMHuCQpnEyFhmS3drviWRftzaBhbAgLA9rR3wsM7vIUkDf0kv33zHduzY5C T6xz0Cf643GoQ8HlaagVr+kxRqSSEsJcwlF/jNmOkX+dQoo+y1rERH/IZt0p4Fu4 mRl+UVE00oUw9RFFDyoOGyvvN8PRmxsc3HYSACYr0YBgTblsSPDmoc86GIx6LiDv eDFbZBdnuOLTDCC+bVtizWsY0ayhKRI7nnJgZwYJ79wFQCskeT1WSgsk/hq4nWyz G8o98drs7GyfhJfNVcHKo2EeP6MVynQ= -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:44 2025 by rpki-client