$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8163f664-9fc9-33d5-b7ea-5e9161e67e42.roa File: 8163f664-9fc9-33d5-b7ea-5e9161e67e42.roa (raw, json) Hash identifier: Fj9t7b0BXigNyHI+vOD96lhw9I/rs1oNzNG1w+90mjM= Subject key identifier: B6:6E:FA:C8:73:3C:0A:E2:64:AC:7F:7C:1F:48:D5:C3:69:BD:F8:D8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848B8F0D67837FDE6328A553CC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8163f664-9fc9-33d5-b7ea-5e9161e67e42.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.206.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:d6:78:37:fd:e6:32:8a:55:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=f3e9946b-0501-41fa-a0f1-cdccdd832ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:84:a1:26:62:77:51:d7:67:13:36:90:e5:8a: 5b:2e:cb:27:90:d1:2c:8c:ed:69:92:0d:73:8b:b8: 81:9e:8d:e1:96:6d:8a:65:0a:94:22:4e:d9:89:27: f2:16:d5:dd:57:02:c6:eb:86:41:3f:e4:40:91:79: cd:be:f7:76:d3:aa:a7:d9:11:35:1f:cc:e9:a9:c0: cb:42:25:90:6c:82:78:bc:f3:b5:d5:67:de:ee:b2: 1c:4e:48:b5:db:9e:fa:1a:c6:98:68:03:81:78:fc: 61:60:97:33:d1:56:dc:dc:b6:e4:91:32:7c:d3:c9: 14:e1:49:12:82:5a:5d:23:9c:fc:ec:54:f8:e4:13: 89:71:39:c7:c1:6e:fe:95:a1:bb:7c:e7:82:28:79: d6:40:71:6d:b0:c1:01:41:97:68:cd:4b:7c:67:44: 74:ba:c8:7e:42:13:b0:26:27:07:f4:b4:8b:b4:3c: cc:9f:60:0d:87:f2:f6:45:da:a8:a3:99:3c:50:2d: 65:5e:1a:b6:56:84:8e:c9:b1:f4:61:c5:60:2d:70: 7b:12:f1:4c:6b:50:3c:ed:90:fe:34:c3:f7:ce:be: 21:0a:7f:4d:80:38:4b:c7:34:a1:f0:ba:6c:3e:f9: 3c:ca:21:d9:07:46:53:31:9a:c4:9c:60:6a:e8:fb: bd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6E:FA:C8:73:3C:0A:E2:64:AC:7F:7C:1F:48:D5:C3:69:BD:F8:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8163f664-9fc9-33d5-b7ea-5e9161e67e42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:dd:5b:74:1a:b5:92:4e:5a:2e:9e:d5:1e:e7:0c:c2:aa:ef: 5c:de:d0:89:f1:df:99:4a:27:45:21:3c:cb:83:3b:c9:ed:20: 7b:a9:e6:63:10:8f:04:14:34:1f:46:c1:6b:a9:c6:df:42:6d: 49:a9:9d:3e:46:5a:34:aa:23:7d:e2:cd:3c:bc:e0:ab:c5:d1: 13:3c:ff:9d:03:5f:78:15:2f:59:79:a3:97:cb:69:a5:87:a2: 86:b2:22:ba:5b:74:0b:15:93:dd:58:ad:d6:ea:75:ab:5f:5e: ba:45:01:7f:12:da:77:ca:e3:0d:50:21:79:9a:97:3b:b2:b6: ac:9d:bc:25:74:13:73:ab:fe:90:9e:37:f5:09:c6:17:f5:07: 68:94:0a:63:f7:86:12:8d:77:20:7d:88:3a:38:f9:a1:8c:db: dd:6c:c0:d7:88:e1:09:32:62:e2:ac:61:8e:20:3f:9d:7e:c9: c4:08:32:d3:32:d3:bf:aa:1a:db:59:b7:e8:7f:da:d3:e2:29: e0:7b:e5:05:76:e3:d0:d4:bd:e1:d1:c9:b0:e5:62:bd:47:a4: a0:cb:ac:cc:54:2b:3c:4d:9f:ec:20:34:02:c7:1f:a0:6c:d9: 06:e5:b6:e7:52:91:7b:93:98:4b:ea:40:96:dd:e6:a2:a8:bc: 60:5c:66:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48NZ4N/3mMopVPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk ZjNlOTk0NmItMDUwMS00MWZhLWEwZjEtY2RjY2RkODMyZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4ShJmJ3UddnEzaQ5YpbLssnkNEsjO1pkg1z i7iBno3hlm2KZQqUIk7ZiSfyFtXdVwLG64ZBP+RAkXnNvvd206qn2RE1H8zpqcDL QiWQbIJ4vPO11Wfe7rIcTki12576GsaYaAOBePxhYJcz0Vbc3LbkkTJ808kU4UkS glpdI5z87FT45BOJcTnHwW7+laG7fOeCKHnWQHFtsMEBQZdozUt8Z0R0ush+QhOw JicH9LSLtDzMn2ANh/L2Rdqoo5k8UC1lXhq2VoSOybH0YcVgLXB7EvFMa1A87ZD+ NMP3zr4hCn9NgDhLxzSh8LpsPvk8yiHZB0ZTMZrEnGBq6Pu9nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZu+shzPAriZKx/fB9I1cNpvfjYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODE2M2Y2NjQtOWZjOS0z M2Q1LWI3ZWEtNWU5MTYxZTY3ZTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF85IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzdW3QatZJOWi6e1R7nDMKq71ze0Inx35lKJ0UhPMuDO8ntIHup5mMQ jwQUNB9GwWupxt9CbUmpnT5GWjSqI33izTy84KvF0RM8/50DX3gVL1l5o5fLaaWH ooayIrpbdAsVk91YrdbqdatfXrpFAX8S2nfK4w1QIXmalzuytqydvCV0E3Or/pCe N/UJxhf1B2iUCmP3hhKNdyB9iDo4+aGM291swNeI4QkyYuKsYY4gP51+ycQIMtMy 07+qGttZt+h/2tPiKeB75QV249DUveHRybDlYr1HpKDLrMxUKzxNn+wgNALHH6Bs 2QbltudSkXuTmEvqQJbd5qKovGBcZh8= -----END CERTIFICATE-----Generated at Sat Apr 5 11:07:11 2025 by rpki-client