$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2859ec2-312e-3155-83f0-593e6003e8e4.roa File: b2859ec2-312e-3155-83f0-593e6003e8e4.roa (raw, json) Hash identifier: mKcn2OZh0OyEYNtByJl0UyPNWxlaNqhkolK0Rs83RgE= Subject key identifier: CC:85:FF:79:52:3D:FF:15:18:AA:77:69:0E:3F:B1:C1:DD:FB:71:17 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BBBB977B5E467B7C09DA60C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2859ec2-312e-3155-83f0-593e6003e8e4.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.212.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:97:7b:5e:46:7b:7c:09:da:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=045eaaa3-a252-4d48-9d95-a03facc7f2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:56:cd:d8:f3:c4:02:89:1e:c3:6d:7d:e1:2e: 5d:a2:17:2d:b9:86:d7:60:51:71:1d:fd:3b:e1:d9: a6:c2:d6:ef:00:cb:3e:1c:fe:48:ad:85:af:38:2e: 3b:5b:99:2e:4f:e3:b3:5c:4b:44:25:11:9a:af:6f: 50:d8:29:d2:e8:1d:ff:2b:17:b2:48:c1:3e:f5:1b: bd:bf:6e:d2:17:b1:86:d2:dc:fd:ac:37:a1:17:6e: 03:eb:63:8d:d1:84:fb:ba:a4:da:97:ff:d7:52:22: b2:b1:c6:52:fb:48:10:22:ff:17:ee:e9:44:74:c0: 0b:fa:fc:5e:09:a6:7e:5d:57:b8:d3:b7:05:57:66: 6e:19:c2:f9:ed:ce:b3:92:22:39:02:2d:17:a3:40: 6e:8a:06:1d:d2:2b:78:51:0b:a2:30:39:db:60:d5: c1:9f:a7:e6:72:72:b8:c8:b8:3c:0c:07:68:5f:96: dc:cc:57:bb:1d:54:67:ec:a8:71:c2:02:5c:d0:3c: 65:e7:24:d5:c7:e1:2c:65:d0:95:2b:61:ae:7f:16: a5:73:7f:08:a9:27:dd:bb:11:0e:fa:ac:a7:eb:28: e2:7e:45:43:18:bd:ae:bd:31:15:3b:96:4f:46:85: d4:9f:47:e4:79:9f:b3:3a:47:90:d6:f4:fd:6c:41: 1d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:85:FF:79:52:3D:FF:15:18:AA:77:69:0E:3F:B1:C1:DD:FB:71:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2859ec2-312e-3155-83f0-593e6003e8e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:3f:d6:5c:3e:13:01:ec:3b:91:40:7e:dc:0a:41:b7:46:dc: 5a:75:6e:bd:e3:d0:ba:17:9c:3c:55:34:f4:b0:0c:b5:af:1c: 5a:df:2f:f9:19:58:fb:66:f0:b4:aa:8d:44:67:96:25:78:a9: 29:ff:97:be:13:b5:f4:d3:a8:53:88:87:27:49:6b:4a:e6:51: cc:1a:7f:78:d8:2d:7a:0a:75:5f:03:49:51:4e:6b:fb:d6:46: d8:fb:cc:23:46:52:d3:08:d6:39:10:ef:45:db:15:0e:3e:74: 8c:8e:fb:34:84:07:69:dd:22:3c:08:14:0b:4d:f2:1b:53:46: e2:be:eb:70:ac:3d:2b:ba:71:35:fd:c1:d2:00:15:35:2e:4b: c1:7d:1e:44:f3:92:8a:10:32:de:a6:a7:b2:c3:9b:ce:1e:1b: 1e:7a:7b:fc:7a:90:8b:ff:2e:78:4a:bb:90:c0:1c:70:43:51: 0d:d1:01:b2:19:2e:0c:52:e5:8c:77:5e:86:a2:6a:12:2f:4e: 4e:83:2e:47:9f:13:11:29:83:ac:fc:fa:c1:e1:2c:2a:95:36: ff:7b:3e:23:1c:48:36:cb:e2:03:8e:c3:12:6f:3f:8f:ee:18: 89:90:ce:e9:02:57:68:48:04:87:fe:e2:2d:28:9c:52:be:c1: ed:83:5f:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u5d7XkZ7fAnaYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk MDQ1ZWFhYTMtYTI1Mi00ZDQ4LTlkOTUtYTAzZmFjYzdmMmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1bN2PPEAokew2194S5dohctuYbXYFFxHf07 4dmmwtbvAMs+HP5IrYWvOC47W5kuT+OzXEtEJRGar29Q2CnS6B3/KxeySME+9Ru9 v27SF7GG0tz9rDehF24D62ON0YT7uqTal//XUiKyscZS+0gQIv8X7ulEdMAL+vxe CaZ+XVe407cFV2ZuGcL57c6zkiI5Ai0Xo0BuigYd0it4UQuiMDnbYNXBn6fmcnK4 yLg8DAdoX5bczFe7HVRn7KhxwgJc0Dxl5yTVx+EsZdCVK2Gufxalc38IqSfduxEO +qyn6yjifkVDGL2uvTEVO5ZPRoXUn0fkeZ+zOkeQ1vT9bEEd7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyF/3lSPf8VGKp3aQ4/scHd+3EXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjI4NTllYzItMzEyZS0z MTU1LTgzZjAtNTkzZTYwMDNlOGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9SQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY/1lw+EwHsO5FAftwKQbdG3Fp1br3j0LoXnDxVNPSwDLWvHFrfL/kZ WPtm8LSqjURnliV4qSn/l74TtfTTqFOIhydJa0rmUcwaf3jYLXoKdV8DSVFOa/vW Rtj7zCNGUtMI1jkQ70XbFQ4+dIyO+zSEB2ndIjwIFAtN8htTRuK+63CsPSu6cTX9 wdIAFTUuS8F9HkTzkooQMt6mp7LDm84eGx56e/x6kIv/LnhKu5DAHHBDUQ3RAbIZ LgxS5Yx3XoaiahIvTk6DLkefExEpg6z8+sHhLCqVNv97PiMcSDbL4gOOwxJvP4/u GImQzukCV2hIBIf+4i0onFK+we2DX+k= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:48 2025 by rpki-client