$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be877652-7e80-3798-bfd1-e0babca3a9b8.roa File: be877652-7e80-3798-bfd1-e0babca3a9b8.roa (raw, json) Hash identifier: 4AO8+9fH/UrypTS9C78MrXqmrww8KKQCKqtC+OBQfZc= Subject key identifier: DD:73:65:DC:78:F8:9C:56:BC:C8:10:EA:37:67:B5:8D:F6:03:46:75 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858491D718B635501C6DC12236080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be877652-7e80-3798-bfd1-e0babca3a9b8.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.206.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:8b:63:55:01:c6:dc:12:23:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=dfd0f95c-6086-4e09-ac11-49ac54915895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d5:e0:79:9e:72:07:d8:d1:c0:61:37:89:2c: 61:1b:e1:4b:ca:d3:57:2c:8e:62:08:44:42:57:ed: 70:65:98:6e:30:56:2c:87:92:ec:9b:b9:de:a8:4a: 8b:1e:4c:80:23:02:9f:72:19:10:ca:0c:1d:7d:8b: 8c:ac:8c:14:21:26:e4:bd:40:81:61:68:81:53:29: fe:f3:99:29:d5:f5:5e:f0:d8:90:64:50:36:5f:91: fa:1f:e3:19:cf:9b:f7:cb:cb:76:97:57:0d:a7:52: 6b:5d:c9:b7:33:30:c4:f7:36:be:f8:54:15:69:fe: ea:d0:75:1f:0f:42:fd:e3:40:59:c3:82:02:2e:91: ca:32:81:88:fb:07:4c:27:5d:f7:c3:24:8a:27:eb: f6:51:2b:02:47:4d:77:a1:87:12:13:98:09:96:a6: 11:a8:ba:4d:aa:91:3a:b6:c0:28:83:26:5b:8d:48: 96:ba:c1:07:85:34:6d:dd:7a:3f:61:4e:b5:1b:33: 46:bc:42:f8:90:22:97:4f:97:57:92:18:20:c9:66: 2d:70:98:8d:42:72:e1:06:2a:4f:2a:4e:35:5c:a7: d7:8e:8f:76:95:42:01:a1:1e:84:f0:58:be:b3:43: 28:3e:79:7b:10:2d:61:65:64:d0:25:bf:f7:1e:2b: c5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:73:65:DC:78:F8:9C:56:BC:C8:10:EA:37:67:B5:8D:F6:03:46:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be877652-7e80-3798-bfd1-e0babca3a9b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:50:ee:8c:e3:e5:b3:31:84:70:66:d3:40:08:52:8c:cf:5f: 2f:26:12:2f:f7:6c:04:1a:9d:72:c8:55:98:f1:86:af:ee:2b: d4:f6:64:29:d3:fb:05:ab:f0:1a:ee:f0:42:a6:14:6c:b6:d5: 6a:b7:c5:3d:49:b3:6a:cf:56:d5:53:9e:bd:3c:1b:eb:d4:d5: 9c:2e:09:81:94:5f:9d:c1:c6:15:31:78:31:93:76:1b:31:d7: ae:5c:f1:ea:19:12:11:aa:54:4b:5e:5e:50:44:f3:86:d3:bd: 6e:23:4a:ac:91:5b:a0:f6:2e:ce:cb:15:6a:56:9e:40:65:89: 9a:b3:a3:f7:ae:dd:c1:88:14:0d:5e:05:37:c1:51:f0:c7:c6: c3:41:c3:9b:fc:dc:63:0a:ab:14:e0:3c:ee:9d:d7:13:5b:08: bd:35:15:79:1b:b7:f2:d8:88:fe:e8:4a:42:34:d7:4a:7a:49: 30:18:5a:c7:9a:ce:ab:ba:d1:86:77:11:26:26:7e:a7:13:0e: bc:d4:4f:81:f0:f9:9c:d2:6e:f6:79:1f:9a:fb:54:b2:3e:b3: 1a:de:f7:1e:70:46:31:29:83:ee:54:dd:75:f1:15:3c:40:9d: 48:9a:22:92:90:08:cc:c9:28:bd:7e:ec:6a:34:99:7a:d5:62: d8:02:13:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYtjVQHG3BIjYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ZGZkMGY5NWMtNjA4Ni00ZTA5LWFjMTEtNDlhYzU0OTE1ODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztXgeZ5yB9jRwGE3iSxhG+FLytNXLI5iCERC V+1wZZhuMFYsh5Lsm7neqEqLHkyAIwKfchkQygwdfYuMrIwUISbkvUCBYWiBUyn+ 85kp1fVe8NiQZFA2X5H6H+MZz5v3y8t2l1cNp1JrXcm3MzDE9za++FQVaf7q0HUf D0L940BZw4ICLpHKMoGI+wdMJ133wySKJ+v2USsCR013oYcSE5gJlqYRqLpNqpE6 tsAogyZbjUiWusEHhTRt3Xo/YU61GzNGvEL4kCKXT5dXkhggyWYtcJiNQnLhBipP Kk41XKfXjo92lUIBoR6E8Fi+s0MoPnl7EC1hZWTQJb/3HivFiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1zZdx4+JxWvMgQ6jdntY32A0Z1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmU4Nzc2NTItN2U4MC0z Nzk4LWJmZDEtZTBiYWJjYTNhOWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF87pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRQ7ozj5bMxhHBm00AIUozPXy8mEi/3bAQanXLIVZjxhq/uK9T2ZCnT +wWr8Bru8EKmFGy21Wq3xT1Js2rPVtVTnr08G+vU1ZwuCYGUX53BxhUxeDGTdhsx 165c8eoZEhGqVEteXlBE84bTvW4jSqyRW6D2Ls7LFWpWnkBliZqzo/eu3cGIFA1e BTfBUfDHxsNBw5v83GMKqxTgPO6d1xNbCL01FXkbt/LYiP7oSkI010p6STAYWsea zqu60YZ3ESYmfqcTDrzUT4Hw+ZzSbvZ5H5r7VLI+sxre9x5wRjEpg+5U3XXxFTxA nUiaIpKQCMzJKL1+7Go0mXrVYtgCE6M= -----END CERTIFICATE-----Generated at Sat Apr 5 13:12:52 2025 by rpki-client