$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7da2d404-3d2a-3f91-945a-890dfa73775b.roa File: 7da2d404-3d2a-3f91-945a-890dfa73775b.roa (raw, json) Hash identifier: aVKk1XxJt3zwr3TUqkIi+M+7/I/X7TBYAIAxfJVAuhM= Subject key identifier: 35:9F:5B:49:F9:EB:FB:79:28:52:F2:37:16:DF:A7:D1:44:94:4E:5A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BE8642FC6A3A2D49A338A480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7da2d404-3d2a-3f91-945a-890dfa73775b.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.217.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:42:fc:6a:3a:2d:49:a3:38:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=8c5a902d-ce6c-446f-8e3c-f254a197196e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f7:83:d1:44:a0:01:b6:80:4b:0f:87:12:87: b4:37:4b:7e:63:08:52:a1:66:a8:38:91:54:02:3e: 12:be:d2:f5:bf:26:53:33:fa:04:75:fc:b1:d8:83: 5e:11:d6:59:4f:af:37:fa:dd:02:1a:ce:e5:e9:72: 3e:9b:97:81:00:47:66:3b:56:10:88:89:81:d2:30: 20:f6:0d:75:11:9a:aa:33:5b:2a:36:b3:fe:3e:5a: ed:d5:8b:1e:d1:cf:ed:fa:d9:1d:b1:da:bc:3a:2f: dc:5a:85:c8:e4:89:5f:bf:d8:ec:99:4f:4e:e6:bc: d5:c0:df:7d:b3:ca:33:fe:9b:31:f8:6d:dd:de:f9: bc:29:f4:88:e2:d3:1c:3a:95:11:06:4e:32:29:0d: 84:78:08:07:79:7d:b1:9a:61:77:d8:f7:e5:a4:86: e2:db:1c:4f:bd:dc:14:5d:13:13:92:7d:46:a2:af: d7:7f:6e:2b:35:78:50:9b:0e:7b:16:46:3f:f6:07: fd:2a:16:21:4d:99:92:29:49:76:11:ba:4d:2e:eb: 99:89:33:f1:f5:40:fb:50:28:db:92:29:26:a9:ea: 4a:6f:63:0e:49:1b:6d:18:3a:74:e4:48:c7:87:db: e1:4f:52:3e:ec:e1:6b:2b:5e:6a:1b:c9:52:a6:78: aa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9F:5B:49:F9:EB:FB:79:28:52:F2:37:16:DF:A7:D1:44:94:4E:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7da2d404-3d2a-3f91-945a-890dfa73775b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:ca:97:0b:af:bc:45:49:d1:dc:c5:67:5c:94:72:53:78:2a: 47:c8:4c:bf:e3:37:c4:68:24:09:af:51:ab:3f:0b:78:49:f5: 33:09:9f:73:e7:7b:49:3d:7a:72:ac:97:95:c9:72:35:ab:6b: 73:88:d4:62:df:ee:14:e4:0e:cc:63:c7:95:aa:ac:12:f6:53: f5:4c:b1:e0:65:e5:d9:18:ae:5a:46:1c:85:ea:12:a7:89:77: b8:16:09:1f:ff:8e:c0:be:17:f4:1d:53:31:d5:73:bc:04:ad: 2c:57:29:62:80:cc:15:d5:39:40:c3:db:90:c7:be:4d:e2:73: 58:2d:aa:a4:c8:5b:18:44:24:e5:dd:9f:1f:8c:6f:01:6a:1b: 61:de:15:a3:aa:d1:be:52:e7:75:5b:10:59:4d:de:6f:64:be: 72:8f:5b:50:5c:45:bf:5e:3a:b8:07:3b:c5:31:88:6b:4b:3d: 21:65:d3:d1:ba:c2:bd:49:4d:7d:35:65:eb:0d:04:9a:e1:e2: 30:2f:d4:85:3f:8f:45:f9:a9:ca:8d:f7:19:ea:d5:9c:2c:27: 8b:58:b1:ad:09:c8:ab:8d:87:2e:cd:47:8a:64:3a:16:3f:bc: 60:4d:88:f1:9e:05:ff:6d:c5:6a:1c:25:f3:6d:46:37:d6:91: 73:ac:db:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hkL8ajotSaM4pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk OGM1YTkwMmQtY2U2Yy00NDZmLThlM2MtZjI1NGExOTcxOTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfeD0USgAbaASw+HEoe0N0t+YwhSoWaoOJFU Aj4SvtL1vyZTM/oEdfyx2INeEdZZT683+t0CGs7l6XI+m5eBAEdmO1YQiImB0jAg 9g11EZqqM1sqNrP+Plrt1Yse0c/t+tkdsdq8Oi/cWoXI5Ilfv9jsmU9O5rzVwN99 s8oz/psx+G3d3vm8KfSI4tMcOpURBk4yKQ2EeAgHeX2xmmF32PflpIbi2xxPvdwU XRMTkn1Goq/Xf24rNXhQmw57FkY/9gf9KhYhTZmSKUl2EbpNLuuZiTPx9UD7UCjb kikmqepKb2MOSRttGDp05EjHh9vhT1I+7OFrK15qG8lSpniqtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWfW0n56/t5KFLyNxbfp9FElE5aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2RhMmQ0MDQtM2QyYS0z ZjkxLTk0NWEtODkwZGZhNzM3NzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9nQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHKlwuvvEVJ0dzFZ1yUclN4KkfITL/jN8RoJAmvUas/C3hJ9TMJn3Pn e0k9enKsl5XJcjWra3OI1GLf7hTkDsxjx5WqrBL2U/VMseBl5dkYrlpGHIXqEqeJ d7gWCR//jsC+F/QdUzHVc7wErSxXKWKAzBXVOUDD25DHvk3ic1gtqqTIWxhEJOXd nx+MbwFqG2HeFaOq0b5S53VbEFlN3m9kvnKPW1BcRb9eOrgHO8UxiGtLPSFl09G6 wr1JTX01ZesNBJrh4jAv1IU/j0X5qcqN9xnq1ZwsJ4tYsa0JyKuNhy7NR4pkOhY/ vGBNiPGeBf9txWocJfNtRjfWkXOs2xc= -----END CERTIFICATE-----Generated at Sat Apr 5 10:58:22 2025 by rpki-client