$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e9b6e0b-8959-3939-ae9d-c802adac750d.roa File: 8e9b6e0b-8959-3939-ae9d-c802adac750d.roa (raw, json) Hash identifier: PLOQubaH53mx0qUVok/O/nDTrHrBTp4T+t0yFwsdx+o= Subject key identifier: 33:80:7C:16:AA:F6:29:67:39:79:43:C3:39:50:03:1F:B5:18:73:6A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848960B636D4E0FA3D48C7EAEE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e9b6e0b-8959-3939-ae9d-c802adac750d.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.221.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:63:6d:4e:0f:a3:d4:8c:7e:ae:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=a037f050-1b5b-4537-9c1e-53dbb5651418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9f:60:1f:5e:40:67:06:3b:72:32:fd:38:80: 6b:5d:ae:7e:e0:f9:e5:4e:d2:7f:ac:75:ab:0d:d2: 88:84:6c:0a:84:8b:6f:35:d6:52:9b:e3:00:aa:7f: 38:23:ec:13:71:a9:54:9b:9a:64:d0:49:1e:47:79: d9:b3:9e:2f:9b:35:0e:15:67:85:fb:23:97:e7:18: 6c:c9:5e:5d:64:57:c7:82:8e:5d:13:c9:53:9b:69: e3:31:d2:64:bc:c4:95:92:b1:37:20:e6:0f:7b:7c: 22:f5:88:d5:65:7b:53:8b:f0:fe:4f:1c:57:9d:16: ca:49:00:50:1e:fa:7c:a5:7b:9e:52:9e:7f:a1:93: c7:8a:31:51:9e:08:05:e5:de:90:94:13:c0:20:22: 29:0c:3b:04:1a:89:47:4a:bd:2d:5e:00:60:ab:35: bf:23:59:7f:75:56:7e:1a:60:2d:b4:a4:18:b7:13: 64:97:96:08:f9:a3:75:eb:21:a9:8a:c7:9c:3f:07: fc:a5:64:32:03:23:66:2a:21:79:18:ba:27:94:c2: bc:24:2e:7b:ff:b2:c0:64:96:cd:b1:fa:4e:0b:41: 06:d3:be:64:bd:c3:e3:fc:1f:27:2f:fc:d2:10:c9: 0e:96:12:59:0f:c1:a1:28:d8:52:78:91:24:9d:f0: 9a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:80:7C:16:AA:F6:29:67:39:79:43:C3:39:50:03:1F:B5:18:73:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e9b6e0b-8959-3939-ae9d-c802adac750d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:1c:86:79:57:36:f6:28:cd:83:50:35:4b:ac:96:b3:f4:fd: 10:71:2a:f5:45:33:a7:f2:05:6c:87:85:e8:ed:ec:8a:ac:fb: ca:4a:59:54:52:81:ac:65:bb:8f:db:b0:50:53:b7:92:35:96: 86:2f:8b:48:6d:44:53:a8:a1:9d:bf:0a:b6:73:c6:76:da:e6: b6:06:e0:39:3d:d1:9a:07:90:e2:ca:43:48:d8:30:3d:4c:93: e2:c1:10:b5:86:ae:5e:57:f7:71:b5:ae:65:d6:54:1b:29:81: 6b:36:37:1a:58:71:72:93:10:b8:a2:30:88:50:5c:c5:d1:9f: e1:20:e6:e7:21:ad:4c:bf:59:eb:3c:aa:d5:80:e5:8b:46:6a: 8f:8f:e2:83:ee:11:6a:65:c8:bf:fc:9b:21:70:6a:0a:e4:77: 56:2b:0a:85:c3:1e:a5:1d:50:20:53:22:0e:3a:06:13:c1:ea: 55:43:6d:f0:cd:fd:ec:26:79:56:5e:eb:6e:4e:f2:0c:a9:d9: 97:4f:17:76:a2:af:fa:02:69:d3:c2:c3:26:d0:99:97:8b:7e: 3e:2d:61:bc:0d:03:ce:f6:8e:ae:b1:86:e4:28:40:45:29:3a: 68:38:34:21:d6:e8:53:f6:27:0d:8e:23:98:00:84:61:23:15: 1f:9f:44:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC2NtTg+j1Ix+ruAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk YTAzN2YwNTAtMWI1Yi00NTM3LTljMWUtNTNkYmI1NjUxNDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ9gH15AZwY7cjL9OIBrXa5+4PnlTtJ/rHWr DdKIhGwKhItvNdZSm+MAqn84I+wTcalUm5pk0EkeR3nZs54vmzUOFWeF+yOX5xhs yV5dZFfHgo5dE8lTm2njMdJkvMSVkrE3IOYPe3wi9YjVZXtTi/D+TxxXnRbKSQBQ Hvp8pXueUp5/oZPHijFRnggF5d6QlBPAICIpDDsEGolHSr0tXgBgqzW/I1l/dVZ+ GmAttKQYtxNkl5YI+aN16yGpisecPwf8pWQyAyNmKiF5GLonlMK8JC57/7LAZJbN sfpOC0EG075kvcPj/B8nL/zSEMkOlhJZD8GhKNhSeJEknfCauwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOAfBaq9ilnOXlDwzlQAx+1GHNqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGU5YjZlMGItODk1OS0z OTM5LWFlOWQtYzgwMmFkYWM3NTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF93MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEchnlXNvYozYNQNUuslrP0/RBxKvVFM6fyBWyHhejt7Iqs+8pKWVRS gaxlu4/bsFBTt5I1loYvi0htRFOooZ2/CrZzxnba5rYG4Dk90ZoHkOLKQ0jYMD1M k+LBELWGrl5X93G1rmXWVBspgWs2NxpYcXKTELiiMIhQXMXRn+Eg5uchrUy/Wes8 qtWA5YtGao+P4oPuEWplyL/8myFwagrkd1YrCoXDHqUdUCBTIg46BhPB6lVDbfDN /ewmeVZe625O8gyp2ZdPF3air/oCadPCwybQmZeLfj4tYbwNA872jq6xhuQoQEUp Omg4NCHW6FP2Jw2OI5gAhGEjFR+fRHE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:41 2025 by rpki-client