$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0a49e57-2b3d-31f5-b990-cc5db9d67bed.roa File: b0a49e57-2b3d-31f5-b990-cc5db9d67bed.roa (raw, json) Hash identifier: cQveRF6hGSTwl9sI7qlS7is6lZJGe5O33Gs3cXfl900= Subject key identifier: 17:3C:A3:79:BB:90:8A:E1:F5:2A:20:B9:6C:6A:08:92:11:69:39:CD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849A8E9E6062779F74452B13300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0a49e57-2b3d-31f5-b990-cc5db9d67bed.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.218.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:e6:06:27:79:f7:44:52:b1:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=2ff0daa3-1349-4c82-a8ba-cfd19ef7c37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cc:e1:65:f3:a0:c0:81:b4:22:4f:23:17:3f: d1:f6:90:4c:df:01:12:a9:f4:2c:4c:58:64:44:3e: 5a:d2:63:77:53:79:a2:27:b3:75:aa:c3:17:86:05: 3a:13:1c:b3:58:cd:7f:13:26:2e:2b:da:03:0a:35: 80:5d:00:c3:e9:46:89:f8:d4:51:96:f4:de:0e:e8: 2d:aa:6e:de:70:e5:e4:c7:c1:16:6f:b6:6f:00:78: 30:d5:4c:49:54:8e:ff:23:e2:60:06:c0:cd:ee:01: fa:7d:6f:f9:c8:4d:3f:30:e4:45:31:2e:c6:60:49: d5:98:4c:37:a0:3f:f7:55:78:f5:66:f8:e7:e4:c4: 4f:67:a6:6d:ca:17:cc:1c:0f:cd:53:ca:97:7e:4a: 82:bd:65:43:57:ba:e3:29:cf:ba:26:5f:05:83:21: f7:8f:ed:00:14:44:a5:2f:81:03:bf:24:0f:f4:39: 44:db:83:bf:a9:23:04:df:18:b4:36:8a:a3:15:cf: 37:87:b3:b1:73:5d:cc:90:c3:0b:99:8f:18:e5:ec: 3f:ab:02:7e:4c:f8:f5:a7:3f:62:27:60:c4:b0:43: 9d:90:1b:35:e8:43:97:5e:6d:b9:a3:9d:8e:35:52: 0c:77:8f:b2:5c:f4:cd:d4:8a:05:96:3a:66:bf:fa: 2c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:3C:A3:79:BB:90:8A:E1:F5:2A:20:B9:6C:6A:08:92:11:69:39:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0a49e57-2b3d-31f5-b990-cc5db9d67bed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:bc:fe:bb:bb:96:40:25:a0:21:03:3f:7e:ab:7f:56:62:9e: be:7b:37:13:bb:16:eb:9d:e7:81:5c:2d:a2:b0:d4:b4:c7:82: d1:59:ee:8f:5b:a6:23:7e:28:ff:f0:0f:9b:91:cc:75:bd:6f: 0e:24:c2:c9:fa:f5:6e:00:4b:02:3a:62:a0:fa:55:8c:d4:4a: 40:24:71:bb:fd:8f:a6:16:f6:da:18:1e:e0:f8:49:8f:f0:24: 9a:2c:cd:7a:2d:fd:dc:04:4e:31:13:cd:1c:cc:75:1a:c6:0a: 64:f0:2d:e9:fb:f6:84:a7:8e:ce:cd:ee:44:60:97:a4:18:35: 7d:4d:5b:e0:12:1e:68:b7:68:29:83:b5:80:6f:e4:1d:7c:1e: c2:fd:a8:38:9d:32:a6:30:aa:6f:55:12:63:0c:e3:34:14:3f: b0:40:3a:7b:49:80:cc:4e:b5:e2:0a:03:9c:2f:80:3e:c9:d0: 7f:4a:27:0c:d7:29:90:c2:b3:91:a7:7c:50:22:be:c8:eb:c6: 81:7d:2a:ec:fb:6d:12:b6:d8:e2:e4:4a:43:e1:9f:b8:20:b4: ca:54:16:d2:c3:63:57:d9:73:a3:d9:d9:b1:90:b5:7a:20:9f: f4:8a:b5:77:6f:e5:87:6d:e5:7b:26:b2:19:4d:ac:54:99:d7: 4e:24:ce:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6eYGJ3n3RFKxMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk MmZmMGRhYTMtMTM0OS00YzgyLWE4YmEtY2ZkMTllZjdjMzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApczhZfOgwIG0Ik8jFz/R9pBM3wESqfQsTFhk RD5a0mN3U3miJ7N1qsMXhgU6ExyzWM1/EyYuK9oDCjWAXQDD6UaJ+NRRlvTeDugt qm7ecOXkx8EWb7ZvAHgw1UxJVI7/I+JgBsDN7gH6fW/5yE0/MORFMS7GYEnVmEw3 oD/3VXj1Zvjn5MRPZ6ZtyhfMHA/NU8qXfkqCvWVDV7rjKc+6Jl8FgyH3j+0AFESl L4EDvyQP9DlE24O/qSME3xi0NoqjFc83h7Oxc13MkMMLmY8Y5ew/qwJ+TPj1pz9i J2DEsEOdkBs16EOXXm25o52ONVIMd4+yXPTN1IoFljpmv/osGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBc8o3m7kIrh9SoguWxqCJIRaTnNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjBhNDllNTctMmIzZC0z MWY1LWI5OTAtY2M1ZGI5ZDY3YmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9rvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEu8/ru7lkAloCEDP36rf1Zinr57NxO7Fuud54FcLaKw1LTHgtFZ7o9b piN+KP/wD5uRzHW9bw4kwsn69W4ASwI6YqD6VYzUSkAkcbv9j6YW9toYHuD4SY/w JJoszXot/dwETjETzRzMdRrGCmTwLen79oSnjs7N7kRgl6QYNX1NW+ASHmi3aCmD tYBv5B18HsL9qDidMqYwqm9VEmMM4zQUP7BAOntJgMxOteIKA5wvgD7J0H9KJwzX KZDCs5GnfFAivsjrxoF9Kuz7bRK22OLkSkPhn7ggtMpUFtLDY1fZc6PZ2bGQtXog n/SKtXdv5Ydt5XsmshlNrFSZ104kzjA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:25:13 2025 by rpki-client