$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76c1d4c7-6064-3024-864f-e47606ba333b.roa File: 76c1d4c7-6064-3024-864f-e47606ba333b.roa (raw, json) Hash identifier: gNZAyxiiI5LZxf/o3VNfLYCTvTBJ4IzKb3FyWH60JMw= Subject key identifier: 15:B5:C2:E3:37:F9:25:41:76:62:18:8D:86:79:78:16:A9:EC:1E:63 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858491ED6D3E0AAF9AF332D67DC40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76c1d4c7-6064-3024-864f-e47606ba333b.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.209.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:d3:e0:aa:f9:af:33:2d:67:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=30b73f52-9875-434e-b05b-c9bc4b74d89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a2:b7:d9:fb:1a:a5:52:82:c5:f7:54:c3:f5: 23:78:2d:d2:3b:9c:f2:87:f0:e1:70:32:5f:28:bf: db:9a:a9:57:49:5c:da:a5:a4:17:78:1a:0b:74:a9: f1:e3:57:ca:b9:5a:35:35:67:79:03:8f:0e:72:11: d3:97:f2:5c:40:30:76:aa:e9:b3:d6:1f:1f:d3:70: 3a:3e:47:d0:65:9c:3c:6e:0f:6f:6a:a3:6f:fe:4e: d1:ed:12:ce:45:12:31:fa:99:f9:29:7b:7d:ad:aa: 73:62:3a:ec:e3:d6:19:50:58:38:05:f1:f7:c4:8d: 4b:d0:6c:00:a7:28:94:e9:3b:2b:62:4b:4f:7a:62: 6a:1c:b5:19:21:1c:5f:01:3b:6a:e6:bc:bf:46:aa: ce:47:52:03:83:81:75:28:30:94:68:f8:db:72:34: 46:1d:cc:fa:98:0a:65:55:46:d7:e2:ae:df:d7:c5: 55:c6:84:00:5e:f4:e0:71:f5:bb:d8:0c:a8:6d:3a: af:cb:e3:2d:33:09:4d:04:a8:94:49:ec:90:b7:74: 2f:13:59:aa:9e:d4:35:a0:4a:db:31:b2:8c:8d:71: 89:d6:33:a9:1c:c4:5c:13:33:aa:bd:17:79:9b:34: ce:2d:6c:02:94:06:a4:81:3d:7b:f9:3b:27:d4:67: 90:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B5:C2:E3:37:F9:25:41:76:62:18:8D:86:79:78:16:A9:EC:1E:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76c1d4c7-6064-3024-864f-e47606ba333b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:a1:2f:83:c8:b1:a0:78:f9:9a:86:5e:4c:e1:2d:74:bb:76: bb:80:f6:2e:ad:06:fb:44:d8:8c:ed:2e:7b:da:57:f2:2b:fa: 8e:15:5e:46:bd:1f:bb:b4:a4:e7:c1:82:7a:46:b7:f6:34:8a: 5e:a1:72:80:9e:0d:af:fb:4b:d8:98:57:05:aa:48:7c:7c:b5: b3:16:79:a0:eb:25:27:26:96:68:b5:f3:1b:ea:27:dd:bc:e6: d5:7c:6d:1b:e4:1f:5c:4a:ec:0b:e2:a3:6c:26:20:23:54:6a: 6f:98:e8:0b:df:75:43:3a:3b:ac:ca:38:d4:04:eb:70:87:a0: 66:e9:49:51:44:28:3d:4d:75:31:28:e8:74:aa:f8:c7:89:c0: eb:f1:d8:26:97:a3:b9:4a:c3:cc:65:bc:2e:cb:3a:fd:d6:58: 0a:ee:72:d9:3a:c4:5f:0e:09:10:e6:94:88:19:52:33:26:d9: ad:fc:d1:ff:7d:48:ba:03:e7:ed:34:72:b2:b5:da:6b:0b:9f: 2e:b1:cf:66:74:20:2b:65:4a:57:8b:53:a1:cf:4f:6f:41:bb: 07:fa:22:21:b9:2c:fe:00:3d:ad:0e:d0:5b:fe:5f:d9:8b:6d: 71:46:73:d9:27:02:02:22:21:a7:bb:19:32:fc:72:30:96:78: 2f:98:1f:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1tPgqvmvMy1n3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk MzBiNzNmNTItOTg3NS00MzRlLWIwNWItYzliYzRiNzRkODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaK32fsapVKCxfdUw/UjeC3SO5zyh/DhcDJf KL/bmqlXSVzapaQXeBoLdKnx41fKuVo1NWd5A48OchHTl/JcQDB2qumz1h8f03A6 PkfQZZw8bg9vaqNv/k7R7RLORRIx+pn5KXt9rapzYjrs49YZUFg4BfH3xI1L0GwA pyiU6TsrYktPemJqHLUZIRxfATtq5ry/RqrOR1IDg4F1KDCUaPjbcjRGHcz6mApl VUbX4q7f18VVxoQAXvTgcfW72AyobTqvy+MtMwlNBKiUSeyQt3QvE1mqntQ1oErb MbKMjXGJ1jOpHMRcEzOqvRd5mzTOLWwClAakgT17+Tsn1GeQewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBW1wuM3+SVBdmIYjYZ5eBap7B5jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzZjMWQ0YzctNjA2NC0z MDI0LTg2NGYtZTQ3NjA2YmEzMzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9HMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOhL4PIsaB4+ZqGXkzhLXS7druA9i6tBvtE2IztLnvaV/Ir+o4VXka9 H7u0pOfBgnpGt/Y0il6hcoCeDa/7S9iYVwWqSHx8tbMWeaDrJScmlmi18xvqJ928 5tV8bRvkH1xK7Avio2wmICNUam+Y6AvfdUM6O6zKONQE63CHoGbpSVFEKD1NdTEo 6HSq+MeJwOvx2CaXo7lKw8xlvC7LOv3WWAructk6xF8OCRDmlIgZUjMm2a380f99 SLoD5+00crK12msLny6xz2Z0ICtlSleLU6HPT29Buwf6IiG5LP4APa0O0Fv+X9mL bXFGc9knAgIiIae7GTL8cjCWeC+YH0M= -----END CERTIFICATE-----Generated at Fri Mar 14 15:03:54 2025 by rpki-client