$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95ad31de-fea9-3363-9f29-6dfb7f1e3056.roa File: 95ad31de-fea9-3363-9f29-6dfb7f1e3056.roa (raw, json) Hash identifier: KhIqcfBTJXzxCfuNDvK6+pl2dU7Wv+rwGUzlyYztzCk= Subject key identifier: 0B:43:D1:E7:99:FD:7E:98:65:08:4E:2C:BB:8B:A6:B1:38:6E:74:C6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858489340BBB8D56717E127DD4200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95ad31de-fea9-3363-9f29-6dfb7f1e3056.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 16625 IP address blocks: 23.208.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:bb:b8:d5:67:17:e1:27:dd:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=6540064c-e11d-40ef-a678-ad9ed50dcf48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bc:09:a9:2e:9a:57:27:37:79:0e:07:c8:7e: 17:42:c8:4b:15:5a:a7:c2:8d:b1:29:e5:a3:1d:06: 0c:19:30:4e:c9:9b:d9:6e:6f:70:53:3a:36:b2:7a: 81:e2:99:ba:14:2d:7f:3f:a6:13:4a:18:f8:87:e4: cb:48:97:99:da:74:f8:fe:b4:e0:21:3d:26:55:3a: f5:93:6b:3b:56:44:ed:39:74:b4:22:d6:63:11:48: bb:86:e7:2e:cf:b2:71:8f:0f:4c:fb:e0:59:6c:68: 6b:b3:7b:c5:d9:1e:8c:5a:34:39:ba:8a:c8:c5:e2: ef:0c:25:1f:73:78:4c:88:78:d6:3c:89:7f:46:d0: 9f:18:26:89:43:f3:00:cc:32:dd:b9:72:60:09:82: e2:ec:ce:42:6e:4b:5b:ba:4c:c4:f9:e3:f0:fc:8b: 2e:22:ee:20:75:b9:56:8d:1d:ce:5a:8f:aa:e4:47: 0f:7c:df:ba:c2:a1:36:b4:53:cd:0a:27:a9:4e:3c: 11:fb:70:c2:08:f4:aa:ba:0b:d9:11:82:f8:b5:cb: ff:03:6b:11:5c:f5:c9:a8:75:55:2e:e7:0c:99:5a: da:d7:d6:16:7d:09:c6:34:6c:a0:f2:85:4f:34:b5: 81:96:26:a4:a1:60:ca:b3:d4:ec:9a:5f:df:54:80: 80:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:43:D1:E7:99:FD:7E:98:65:08:4E:2C:BB:8B:A6:B1:38:6E:74:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95ad31de-fea9-3363-9f29-6dfb7f1e3056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:10:94:67:43:f0:95:ce:08:9f:0e:ed:52:0e:2f:70:d7:fb: 59:89:05:ce:0a:54:3f:6a:a6:f0:62:ac:e9:0d:27:84:32:af: 53:43:df:79:57:ef:6a:40:6f:05:a8:ac:50:0e:d8:a2:7d:23: ab:92:04:4c:51:ed:90:e1:e4:74:5e:ec:a8:a6:83:ca:54:87: fc:e2:bc:e0:f5:5e:43:3a:bc:83:e3:39:be:dd:dd:cd:cd:07: a8:2d:2a:e7:58:c4:4a:ca:02:1a:07:0a:a1:c2:a0:53:d5:e2: 88:03:57:15:57:2a:76:73:f3:60:4e:19:49:e2:28:c6:eb:64: 12:68:49:08:0c:43:7f:13:79:0e:d1:4f:ab:4c:77:c0:33:c7: 46:1a:55:24:6b:80:3b:bf:14:f9:bb:19:dc:fa:5f:ff:06:0b: 09:c9:e2:8e:3d:61:44:1b:dc:30:df:2d:33:c0:54:b7:6a:81: a7:f4:5a:bc:2e:d2:ce:1b:4e:c8:2c:6f:ff:c1:11:6c:78:25: b4:c3:d8:38:de:82:39:eb:c7:d3:b5:f0:ca:ff:b0:cf:d5:b0: 88:1b:56:31:78:1a:86:ec:fd:06:b6:57:29:ed:4f:24:b6:dd: df:6f:9c:0f:4d:0c:29:30:31:20:dc:86:f5:f4:23:c1:e6:c7: ca:21:1e:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQLu41WcX4SfdQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk NjU0MDA2NGMtZTExZC00MGVmLWE2NzgtYWQ5ZWQ1MGRjZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrwJqS6aVyc3eQ4HyH4XQshLFVqnwo2xKeWj HQYMGTBOyZvZbm9wUzo2snqB4pm6FC1/P6YTShj4h+TLSJeZ2nT4/rTgIT0mVTr1 k2s7VkTtOXS0ItZjEUi7hucuz7Jxjw9M++BZbGhrs3vF2R6MWjQ5uorIxeLvDCUf c3hMiHjWPIl/RtCfGCaJQ/MAzDLduXJgCYLi7M5CbktbukzE+ePw/IsuIu4gdblW jR3OWo+q5EcPfN+6wqE2tFPNCiepTjwR+3DCCPSqugvZEYL4tcv/A2sRXPXJqHVV LucMmVra19YWfQnGNGyg8oVPNLWBliakoWDKs9Tsml/fVICA+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtD0eeZ/X6YZQhOLLuLprE4bnTGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTVhZDMxZGUtZmVhOS0z MzYzLTlmMjktNmRmYjdmMWUzMDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9DeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIQlGdD8JXOCJ8O7VIOL3DX+1mJBc4KVD9qpvBirOkNJ4Qyr1ND33lX 72pAbwWorFAO2KJ9I6uSBExR7ZDh5HRe7Kimg8pUh/zivOD1XkM6vIPjOb7d3c3N B6gtKudYxErKAhoHCqHCoFPV4ogDVxVXKnZz82BOGUniKMbrZBJoSQgMQ38TeQ7R T6tMd8Azx0YaVSRrgDu/FPm7Gdz6X/8GCwnJ4o49YUQb3DDfLTPAVLdqgaf0Wrwu 0s4bTsgsb//BEWx4JbTD2Djegjnrx9O18Mr/sM/VsIgbVjF4Gobs/Qa2VyntTyS2 3d9vnA9NDCkwMSDchvX0I8Hmx8ohHkc= -----END CERTIFICATE-----Generated at Sat Apr 5 12:33:16 2025 by rpki-client