$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9cc8f44-44d2-34ea-84c8-df3c2143a4ee.roa File: a9cc8f44-44d2-34ea-84c8-df3c2143a4ee.roa (raw, json) Hash identifier: 3CA05cxWjaH6Gd1818g1OMfuQk7n8f/OdNorMpWtVgs= Subject key identifier: 7C:66:25:08:9D:57:FE:F9:30:B9:AF:F9:D0:E2:9A:26:48:F9:9D:8A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E57B0EAB6919F98BC200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9cc8f44-44d2-34ea-84c8-df3c2143a4ee.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.206.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e5:7b:0e:ab:69:19:f9:8b:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=26745d1f-46ed-4668-82be-286f75a95018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6e:31:05:bd:05:62:08:40:c9:26:63:85:63: 5a:77:1c:8c:9a:98:ef:cc:30:3a:e1:9a:21:4e:05: b5:9f:d6:fd:48:7a:aa:ec:7a:ab:79:a8:46:e3:3a: 9d:24:73:98:cb:1d:1a:14:e7:67:ba:81:f2:ce:ea: 98:25:9b:17:e1:da:cb:d5:67:9a:43:ca:4b:9c:3a: f2:2d:81:6b:ec:ce:7a:81:bf:bb:89:63:8d:e0:87: 00:cf:35:85:2a:bc:58:48:5c:fe:f6:05:0d:0f:b5: e2:01:38:be:ea:5f:95:d1:88:d2:99:40:0d:39:bc: 1e:99:22:a9:f6:e1:54:88:f7:b5:f2:a5:42:8e:7b: 33:e9:fa:06:c1:38:50:95:a7:0b:3b:3f:d8:1d:b0: 35:e2:6c:78:4b:7b:93:ef:6b:d0:b1:5b:f0:45:c2: 2d:be:d1:00:56:e3:ad:e8:01:f9:92:ee:13:11:b7: ef:a1:39:47:aa:2e:93:ff:53:de:59:d6:55:4f:58: 86:64:60:9d:07:c1:39:86:4f:e8:99:ed:e7:70:fb: 3c:e7:c0:c1:55:85:2e:6e:5f:0f:e1:0e:17:93:98: 34:d3:6e:11:44:64:fb:a4:a4:af:c1:8a:b2:9c:b2: 40:04:b1:be:0b:1b:f5:db:28:e5:1a:d5:95:53:dd: f6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:66:25:08:9D:57:FE:F9:30:B9:AF:F9:D0:E2:9A:26:48:F9:9D:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9cc8f44-44d2-34ea-84c8-df3c2143a4ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:e3:3b:ec:c4:0b:ba:d1:d8:eb:50:c1:4a:99:ca:30:11:55: 9d:66:54:55:6c:ee:6d:05:9a:ac:39:6d:b2:2e:81:ee:4e:08: 6d:80:9f:6b:51:1d:8f:85:8d:ab:34:d2:e1:bc:02:fc:f3:4e: df:de:19:3e:f9:ec:5a:e6:87:44:5c:d1:1f:9b:60:92:61:71: 09:28:88:cb:76:e5:7b:df:ef:b2:aa:87:f2:ce:43:a6:4e:1d: 45:80:09:3f:9f:8e:26:16:49:a5:09:42:ca:a5:25:01:e7:da: 46:cb:bd:e8:96:6b:5a:2f:ed:25:72:f9:b9:bf:2b:c9:eb:8b: 32:9e:64:0c:db:d8:c4:6a:41:48:06:5d:6e:4a:24:a8:4a:5d: f5:ff:74:64:be:c6:fd:10:35:65:81:27:8b:22:54:9e:ea:60: a3:49:6b:32:88:33:00:68:0a:00:e0:ac:df:80:ac:69:34:c4: c8:97:d4:75:0c:74:e4:d6:c3:ea:a8:46:5c:0a:75:52:03:ff: ac:37:91:24:2f:61:27:22:e1:b8:68:83:04:f7:6d:a5:0b:5c: d6:59:ca:9f:51:33:85:7e:d9:4c:19:12:98:a8:a9:af:a7:06: f4:7d:a0:70:b9:8f:08:1c:e7:53:a2:72:5d:8b:ca:69:73:56: 34:4b:95:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKeV7DqtpGfmLwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MjY3NDVkMWYtNDZlZC00NjY4LTgyYmUtMjg2Zjc1YTk1MDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW4xBb0FYghAySZjhWNadxyMmpjvzDA64Zoh TgW1n9b9SHqq7HqreahG4zqdJHOYyx0aFOdnuoHyzuqYJZsX4drL1WeaQ8pLnDry LYFr7M56gb+7iWON4IcAzzWFKrxYSFz+9gUND7XiATi+6l+V0YjSmUANObwemSKp 9uFUiPe18qVCjnsz6foGwThQlacLOz/YHbA14mx4S3uT72vQsVvwRcItvtEAVuOt 6AH5ku4TEbfvoTlHqi6T/1PeWdZVT1iGZGCdB8E5hk/ome3ncPs858DBVYUubl8P 4Q4Xk5g0024RRGT7pKSvwYqynLJABLG+Cxv12yjlGtWVU932AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxmJQidV/75MLmv+dDimiZI+Z2KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTljYzhmNDQtNDRkMi0z NGVhLTg0YzgtZGYzYzIxNDNhNGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF855MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3jO+zEC7rR2OtQwUqZyjARVZ1mVFVs7m0Fmqw5bbIuge5OCG2An2tR HY+Fjas00uG8AvzzTt/eGT757Frmh0Rc0R+bYJJhcQkoiMt25Xvf77Kqh/LOQ6ZO HUWACT+fjiYWSaUJQsqlJQHn2kbLveiWa1ov7SVy+bm/K8nrizKeZAzb2MRqQUgG XW5KJKhKXfX/dGS+xv0QNWWBJ4siVJ7qYKNJazKIMwBoCgDgrN+ArGk0xMiX1HUM dOTWw+qoRlwKdVID/6w3kSQvYSci4bhogwT3baULXNZZyp9RM4V+2UwZEpioqa+n BvR9oHC5jwgc51Oicl2LymlzVjRLlUI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:19:34 2025 by rpki-client