$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74cc8694-de7f-3e31-89ac-f1455f8b7f00.roa File: 74cc8694-de7f-3e31-89ac-f1455f8b7f00.roa (raw, json) Hash identifier: e76FNYOJ5nGTZTaq6Zp7/5+/LY9aB7EsNc4jHq41GaY= Subject key identifier: 7D:A3:94:42:52:C3:67:D8:35:E3:EC:A2:CE:88:D1:72:4A:8B:D1:2F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BBBB8F8CA4F9B3E2D0E05D40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74cc8694-de7f-3e31-89ac-f1455f8b7f00.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.213.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:8f:8c:a4:f9:b3:e2:d0:e0:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=d1a1d8c2-a475-46d9-87af-be2842cf205f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:de:7c:3f:80:95:5a:9c:e7:0b:c9:ca:fe: 1b:3c:a8:21:7b:c7:7f:62:71:06:c6:b4:c1:15:79: 97:21:cf:c4:54:d4:63:9a:e5:14:37:a8:49:ac:40: 85:f8:d2:ed:ff:39:92:e2:92:71:e1:2b:6c:11:49: 94:81:5e:0a:ef:3e:9d:64:81:e1:1f:d5:79:57:71: b5:8f:56:38:09:8e:62:39:cb:0b:08:2a:76:6b:6e: 1e:4d:45:d2:7f:d1:a0:ea:d3:b0:81:85:35:25:48: 2f:3f:a3:58:e9:9c:fc:3c:fc:76:1f:ce:46:e4:60: 30:f4:9d:9f:f1:3d:41:15:fb:37:e3:e1:33:18:0e: a7:a0:86:5b:be:b1:15:d5:ea:78:c2:1f:9f:02:22: 38:f6:73:cc:d6:94:41:57:18:42:70:34:d2:4d:a1: f7:a4:81:2d:df:61:ca:e8:86:1c:6d:4a:70:38:2e: 0a:c7:73:e3:c0:cd:40:50:36:d6:89:bf:bd:18:df: 04:27:5c:42:34:d1:87:68:18:89:24:8c:74:ae:b4: 07:49:3d:a5:91:52:ce:4d:dd:ac:28:e0:7f:9a:b4: 72:87:a7:b9:a1:4a:74:b2:a5:14:05:9c:6a:f7:f8: aa:3d:93:aa:25:bf:53:57:25:46:1d:48:08:35:53: 86:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A3:94:42:52:C3:67:D8:35:E3:EC:A2:CE:88:D1:72:4A:8B:D1:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74cc8694-de7f-3e31-89ac-f1455f8b7f00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:0c:d4:ae:0e:1a:b2:68:ec:0e:fb:5b:3b:12:f4:15:06:d2: 3e:f3:48:b3:17:27:48:00:f4:7b:2c:36:b2:e5:6b:fc:f7:2d: f7:2b:25:ad:00:43:9b:b7:07:e3:45:a5:fe:d2:08:a8:7c:c4: ee:5d:95:c8:3f:6f:f5:9b:1f:19:f4:8f:1c:5a:2a:df:10:8e: cb:c8:e0:93:3e:c5:44:42:6c:e1:3e:3a:b5:ee:7b:54:43:34: 0f:4e:21:bc:ac:2b:0e:82:c4:b5:dc:72:ef:55:95:a3:c2:de: 17:a3:3f:17:e5:cd:7e:2d:0a:20:80:20:0b:30:8e:5c:97:b5: 44:36:05:45:55:ff:1a:2e:c9:66:8c:18:6e:bd:25:91:86:10: ad:29:8f:d1:4c:fa:4d:9d:70:0f:4b:5e:b4:b8:9f:9e:5e:49: f6:06:0d:84:0b:e6:c2:31:54:7d:1a:d2:91:5c:ab:39:33:a3: 9f:8f:81:9a:4a:4d:e8:34:00:aa:7f:91:23:e2:9b:71:7d:18: 3b:15:a1:bd:32:0e:fc:24:60:c3:af:f3:3c:f1:6a:9f:04:3c: 64:3d:4b:92:d7:7a:b9:e9:61:35:78:53:da:f7:e9:d4:d1:bd: 4a:55:a3:02:fd:13:be:43:63:9d:05:12:af:39:06:d0:58:26: d2:b2:77:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4+MpPmz4tDgXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk ZDFhMWQ4YzItYTQ3NS00NmQ5LTg3YWYtYmUyODQyY2YyMDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+refD+AlVqc5wvJyv4bPKghe8d/YnEGxrTB FXmXIc/EVNRjmuUUN6hJrECF+NLt/zmS4pJx4StsEUmUgV4K7z6dZIHhH9V5V3G1 j1Y4CY5iOcsLCCp2a24eTUXSf9Gg6tOwgYU1JUgvP6NY6Zz8PPx2H85G5GAw9J2f 8T1BFfs34+EzGA6noIZbvrEV1ep4wh+fAiI49nPM1pRBVxhCcDTSTaH3pIEt32HK 6IYcbUpwOC4Kx3PjwM1AUDbWib+9GN8EJ1xCNNGHaBiJJIx0rrQHST2lkVLOTd2s KOB/mrRyh6e5oUp0sqUUBZxq9/iqPZOqJb9TVyVGHUgINVOGgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2jlEJSw2fYNePsos6I0XJKi9EvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzRjYzg2OTQtZGU3Zi0z ZTMxLTg5YWMtZjE0NTVmOGI3ZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9UTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwM1K4OGrJo7A77WzsS9BUG0j7zSLMXJ0gA9HssNrLla/z3LfcrJa0A Q5u3B+NFpf7SCKh8xO5dlcg/b/WbHxn0jxxaKt8QjsvI4JM+xURCbOE+OrXue1RD NA9OIbysKw6CxLXccu9VlaPC3hejPxflzX4tCiCAIAswjlyXtUQ2BUVV/xouyWaM GG69JZGGEK0pj9FM+k2dcA9LXrS4n55eSfYGDYQL5sIxVH0a0pFcqzkzo5+PgZpK Teg0AKp/kSPim3F9GDsVob0yDvwkYMOv8zzxap8EPGQ9S5LXernpYTV4U9r36dTR vUpVowL9E75DY50FEq85BtBYJtKyd+M= -----END CERTIFICATE-----Generated at Sat Apr 5 11:07:27 2025 by rpki-client