$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afd72be9-4c55-3681-a88f-8b9a80d50fcb.roa File: afd72be9-4c55-3681-a88f-8b9a80d50fcb.roa (raw, json) Hash identifier: V8a87uHpGORY8GwemgEZWnNgRDCqaFj1UX4vOaYIWa8= Subject key identifier: 04:16:D2:B6:8D:63:C6:7D:6F:E7:01:9E:C6:7E:29:25:93:04:65:6E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848C2628BA69D598AE87508B100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afd72be9-4c55-3681-a88f-8b9a80d50fcb.roa Signing time: Mon 03 Feb 2025 11:12:16 +0000 ROA not before: Mon 03 Feb 2025 11:12:16 +0000 ROA not after: Sun 04 May 2025 10:12:16 +0000 asID: 20940 IP address blocks: 23.217.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:62:8b:a6:9d:59:8a:e8:75:08:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 3 11:12:16 2025 GMT Not After : May 4 10:12:16 2025 GMT Subject: CN=048b5c10-824a-4f52-ae74-a54909149b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:61:d9:16:18:12:49:86:fc:70:80:a1:16:21: a7:c4:03:4f:5e:c0:28:77:29:17:6b:ba:c6:ce:66: 2c:d2:c2:3e:2b:87:ab:5a:7b:a0:b7:2f:8c:37:43: bb:99:98:45:6a:bc:c9:59:07:fa:7d:2a:10:d8:29: 60:b1:a0:57:92:69:a1:c0:45:fe:13:cf:dd:ca:dc: 68:b3:11:b0:f1:62:9b:c4:d9:06:0e:68:85:5c:44: a9:33:a6:3f:9a:82:90:e8:2c:c2:c7:ec:d6:c9:48: 74:f8:82:58:78:f4:10:35:34:d5:f3:ef:d5:05:c6: e2:05:3c:40:b7:21:07:59:73:1b:37:3c:58:83:d7: 29:e2:15:5f:a0:61:fb:a6:51:2f:ad:2b:ce:2e:06: 43:a2:d1:76:27:53:ba:59:5f:be:ae:43:21:42:0e: d7:3c:59:f6:fc:24:b2:66:7d:ec:5f:d7:ef:95:7d: 2a:ef:ff:4c:fa:ba:3f:65:70:f0:6b:02:46:d0:41: f8:c2:2b:dd:8d:cf:b3:1d:c9:40:99:8d:8c:6c:d0: d4:37:97:42:c0:3a:1c:11:f5:d7:bf:f6:13:ad:ac: bf:6b:02:5d:41:dd:43:ce:d2:84:da:8e:42:aa:9a: 2c:01:db:95:c0:a0:be:fd:8b:11:2a:38:c6:c9:18: af:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:16:D2:B6:8D:63:C6:7D:6F:E7:01:9E:C6:7E:29:25:93:04:65:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afd72be9-4c55-3681-a88f-8b9a80d50fcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:ee:f6:ab:82:1e:d9:d9:56:17:c5:6f:9f:d8:5b:90:7e:20: 66:80:4f:58:37:22:53:ad:b6:83:40:00:73:fb:04:fc:f5:67: 38:d3:11:ea:05:1c:68:80:97:0c:4b:e5:07:6e:07:a7:ac:c8: 38:7b:25:2c:28:b8:e1:00:1a:95:c1:c2:a9:87:cd:b6:7d:76: 5b:e9:22:f5:27:a2:f2:c7:bb:7d:9b:8e:04:f7:07:19:79:f2: 99:39:29:61:a8:63:0a:a4:c9:97:9d:e8:67:6e:ae:8d:df:9c: b7:39:92:be:71:20:4a:42:e9:51:a2:e5:5c:25:05:ab:8f:a0: ea:7c:b2:31:f7:c2:47:47:b8:e0:0f:f4:38:d5:4f:10:33:65: 2b:77:ff:7e:37:08:95:5f:6d:54:2d:98:b0:a2:9a:3f:2d:7e: 57:5c:1a:23:ac:3b:c5:4b:9e:b1:84:02:7d:49:3a:7e:3c:af: ef:07:e0:ed:77:6b:81:ca:e7:90:f8:d8:a1:77:ef:fe:ab:5d: 1d:14:98:24:fe:1f:7b:cc:1f:13:68:c3:23:8c:fd:51:02:32: af:aa:42:86:31:bd:8b:a1:5e:14:8b:b2:88:33:93:c3:b9:fe: 27:ab:26:d5:5e:ae:63:ad:68:0b:5a:7b:b0:ac:36:18:eb:9d: 54:21:33:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYoumnVmK6HUIsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMzExMTIxNloXDTI1MDUwNDEwMTIxNlowLzEtMCsGA1UEAxMk MDQ4YjVjMTAtODI0YS00ZjUyLWFlNzQtYTU0OTA5MTQ5YjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2HZFhgSSYb8cIChFiGnxANPXsAodykXa7rG zmYs0sI+K4erWnugty+MN0O7mZhFarzJWQf6fSoQ2ClgsaBXkmmhwEX+E8/dytxo sxGw8WKbxNkGDmiFXESpM6Y/moKQ6CzCx+zWyUh0+IJYePQQNTTV8+/VBcbiBTxA tyEHWXMbNzxYg9cp4hVfoGH7plEvrSvOLgZDotF2J1O6WV++rkMhQg7XPFn2/CSy Zn3sX9fvlX0q7/9M+ro/ZXDwawJG0EH4wivdjc+zHclAmY2MbNDUN5dCwDocEfXX v/YTray/awJdQd1DztKE2o5CqposAduVwKC+/YsRKjjGyRivIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQW0raNY8Z9b+cBnsZ+KSWTBGVuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWZkNzJiZTktNGM1NS0z NjgxLWE4OGYtOGI5YTgwZDUwZmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9nIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzu9quCHtnZVhfFb5/YW5B+IGaAT1g3IlOttoNAAHP7BPz1ZzjTEeoF HGiAlwxL5QduB6esyDh7JSwouOEAGpXBwqmHzbZ9dlvpIvUnovLHu32bjgT3Bxl5 8pk5KWGoYwqkyZed6Gduro3fnLc5kr5xIEpC6VGi5VwlBauPoOp8sjH3wkdHuOAP 9DjVTxAzZSt3/343CJVfbVQtmLCimj8tfldcGiOsO8VLnrGEAn1JOn48r+8H4O13 a4HK55D42KF37/6rXR0UmCT+H3vMHxNowyOM/VECMq+qQoYxvYuhXhSLsogzk8O5 /ierJtVermOtaAtae7CsNhjrnVQhM54= -----END CERTIFICATE-----Generated at Fri Mar 14 15:03:39 2025 by rpki-client