$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9673cb91-81c4-38d8-8992-01ab4804e0a1.roa File: 9673cb91-81c4-38d8-8992-01ab4804e0a1.roa (raw, json) Hash identifier: ADGdwKfSB4iiQIymy8fUIbiaijRZcc6rIrxD+m/RFAU= Subject key identifier: 2C:A1:1B:BE:4E:A3:92:2D:8E:A8:AB:84:D4:E9:DD:9A:27:C0:6E:4C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BA5642F65E54836EB36D7440 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9673cb91-81c4-38d8-8992-01ab4804e0a1.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.208.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:42:f6:5e:54:83:6e:b3:6d:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=cb9937bf-72e1-4de6-86ba-5c922f6df5ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:50:40:d0:4a:04:ce:13:7c:bf:49:ac:39:c3: 34:10:fc:b4:73:8f:c7:a3:55:d3:7f:d3:5a:11:c1: 79:cf:ed:bd:00:fb:8f:97:23:43:c5:f1:5e:01:f1: a4:4d:13:ea:41:20:b0:31:ed:29:68:99:5e:00:13: 41:30:74:7d:0a:a4:d2:16:48:cd:73:4a:44:6e:33: a4:77:f4:97:b8:e1:de:13:f4:9d:d1:ef:94:64:ea: a7:b5:98:1f:ac:e7:5b:b0:30:e5:6f:79:51:99:ae: 9f:25:33:c2:95:34:19:9d:00:80:dc:3e:df:da:ae: a3:41:41:d4:06:be:ac:f8:e6:18:79:ab:f1:2a:ca: 96:af:51:db:e1:b8:46:ac:af:7c:ac:fe:13:03:1a: 6a:2d:d1:c2:4c:a0:94:12:8f:61:d9:c2:72:90:33: 3f:f7:33:cb:f8:9a:c5:1b:11:11:8d:d6:8c:b9:46: 87:73:a6:a8:55:46:be:aa:ce:3d:2f:28:95:ef:80: 32:44:a6:9d:7f:4b:10:2c:bd:3d:e8:27:1b:e8:4c: 9f:0e:d3:fd:6b:f5:7f:5e:bb:be:3c:c8:8c:4f:44: 6b:36:0a:67:b5:92:8d:1e:25:9a:1a:f9:a2:17:f2: 1e:d3:80:6c:40:03:c7:45:cb:93:88:da:e1:dd:92: 67:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A1:1B:BE:4E:A3:92:2D:8E:A8:AB:84:D4:E9:DD:9A:27:C0:6E:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9673cb91-81c4-38d8-8992-01ab4804e0a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a2:28:b3:e4:e9:73:8e:e9:8c:9f:19:56:51:4e:7a:a5:14: de:32:52:f7:cc:fe:93:77:a0:b1:bb:43:d9:30:88:42:dd:16: 42:d2:d4:d5:f7:00:01:e3:10:02:7b:ad:d4:49:b1:da:b5:04: de:4d:54:62:7b:82:1e:61:65:dd:f8:3d:d0:45:c7:91:8b:34: ea:2e:d5:b4:ef:65:44:db:20:83:7f:c7:48:67:2c:01:1b:4c: 24:11:91:b2:20:fe:01:5f:a0:bd:1f:9e:0e:ad:77:7c:6b:81: 57:9b:8e:33:54:3c:5b:3e:80:b1:a2:6f:1e:8c:1a:13:4d:84: b1:73:37:8f:92:88:39:bb:42:11:18:ca:ba:55:08:1b:48:9d: 06:36:3b:d1:19:da:d0:5f:98:7c:0c:56:99:1e:a9:b1:e9:b6: 02:12:46:8c:2c:82:90:a5:d5:48:36:82:d4:c9:d4:52:ea:e9: fb:53:cb:38:58:9a:6d:57:a5:79:6e:18:b0:77:c2:4a:ed:73: 34:4e:6a:62:6e:00:40:34:7a:76:5d:c0:b6:18:90:b0:37:bb: 03:1a:ac:8f:87:e9:86:b0:b1:59:31:ba:87:0b:86:47:f2:f9: 57:9f:75:7b:42:dd:5c:50:41:fc:c4:e5:09:46:2c:26:f6:82: ee:7d:6d:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi6VkL2XlSDbrNtdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk Y2I5OTM3YmYtNzJlMS00ZGU2LTg2YmEtNWM5MjJmNmRmNWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlBA0EoEzhN8v0msOcM0EPy0c4/Ho1XTf9Na EcF5z+29APuPlyNDxfFeAfGkTRPqQSCwMe0paJleABNBMHR9CqTSFkjNc0pEbjOk d/SXuOHeE/Sd0e+UZOqntZgfrOdbsDDlb3lRma6fJTPClTQZnQCA3D7f2q6jQUHU Br6s+OYYeavxKsqWr1Hb4bhGrK98rP4TAxpqLdHCTKCUEo9h2cJykDM/9zPL+JrF GxERjdaMuUaHc6aoVUa+qs49LyiV74AyRKadf0sQLL096Ccb6EyfDtP9a/V/Xru+ PMiMT0RrNgpntZKNHiWaGvmiF/Ie04BsQAPHRcuTiNrh3ZJnJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyhG75Oo5ItjqirhNTp3ZonwG5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTY3M2NiOTEtODFjNC0z OGQ4LTg5OTItMDFhYjQ4MDRlMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9BkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGiKLPk6XOO6YyfGVZRTnqlFN4yUvfM/pN3oLG7Q9kwiELdFkLS1NX3 AAHjEAJ7rdRJsdq1BN5NVGJ7gh5hZd34PdBFx5GLNOou1bTvZUTbIIN/x0hnLAEb TCQRkbIg/gFfoL0fng6td3xrgVebjjNUPFs+gLGibx6MGhNNhLFzN4+SiDm7QhEY yrpVCBtInQY2O9EZ2tBfmHwMVpkeqbHptgISRowsgpCl1Ug2gtTJ1FLq6ftTyzhY mm1XpXluGLB3wkrtczROamJuAEA0enZdwLYYkLA3uwMarI+H6YawsVkxuocLhkfy +VefdXtC3VxQQfzE5QlGLCb2gu59bao= -----END CERTIFICATE-----Generated at Sat Apr 5 11:11:49 2025 by rpki-client