$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb437e4f-460e-3220-9459-29fa33be76c7.roa File: cb437e4f-460e-3220-9459-29fa33be76c7.roa (raw, json) Hash identifier: wlwr9s6aSbFeTDeWJyAI79bIdi/m3Fs496p9Bl1E864= Subject key identifier: B4:43:87:C6:47:0A:D2:34:6E:A0:1E:A6:68:32:13:C8:4E:C2:3C:68 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848B78B7FC8AC4EE9C779968C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb437e4f-460e-3220-9459-29fa33be76c7.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.219.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:7f:c8:ac:4e:e9:c7:79:96:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=5c5518c0-58ab-4d68-a99f-03278eae5b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:04:1c:9c:9b:22:88:e2:27:30:34:8d:ac:32: cd:ad:a5:a4:68:d8:5a:75:61:5c:56:ea:b5:3c:66: 13:86:cc:f3:3a:75:1b:aa:fe:e2:86:03:dd:a3:59: 1d:41:16:78:7a:d5:1e:2d:0a:c2:3d:9d:ec:39:69: bd:90:88:43:23:1f:2e:d5:a3:ca:11:0f:36:f2:a7: 5d:ac:56:ab:5f:55:42:c4:fb:68:6d:79:be:78:33: 7d:f7:00:21:0c:d1:2d:12:e0:bb:31:c2:1b:d2:e9: 6f:b3:7d:76:ea:a7:56:3b:49:54:44:cc:34:b5:e9: 80:d6:44:79:9c:3a:74:5f:09:bb:0f:0c:e5:24:41: f4:e7:4c:d6:fc:d1:98:be:93:be:f1:ac:1a:f2:57: ce:7a:1f:b9:3b:5c:0e:9c:a8:ad:a4:65:07:73:5d: 09:be:db:8d:3e:03:5c:39:e2:72:d0:c1:8c:83:5c: d9:2f:f8:96:18:a8:3d:82:82:6a:05:16:5f:c3:49: 93:65:54:d2:d9:78:e0:be:5e:b0:5b:53:ca:42:a6: 0c:74:52:c2:95:69:85:78:0b:45:b9:35:92:e0:8d: 47:c2:83:ed:44:7c:2f:ee:18:69:f0:dd:39:4c:26: 18:ce:dc:07:ef:d0:ac:7e:2c:52:c6:f4:37:a4:9b: b8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:43:87:C6:47:0A:D2:34:6E:A0:1E:A6:68:32:13:C8:4E:C2:3C:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb437e4f-460e-3220-9459-29fa33be76c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:7f:6a:52:dd:4a:c5:5b:df:0b:85:d6:a0:19:b7:bb:3b:c6: 98:3f:c3:aa:f7:e1:40:64:58:70:84:37:93:af:30:72:e2:f1: f1:45:6c:72:d0:ff:8b:87:cd:61:8b:d0:b0:29:50:0b:64:90: 74:18:21:35:e6:7b:b6:18:c3:44:b5:d3:d1:4f:dd:ab:35:82: 2e:23:97:81:4d:4c:f4:6e:ed:89:8e:22:9b:c1:45:fe:d0:a2: ac:67:82:8c:a1:e0:e5:84:c8:6a:3a:0c:26:49:45:06:c3:ee: 2e:3d:6f:97:41:bc:14:3d:71:9e:4d:2d:39:87:c3:f3:f8:b8: 77:10:4a:59:90:98:f4:11:6b:9f:fe:2a:82:15:0c:54:b3:4f: 93:e3:51:4e:d8:44:b9:db:9f:2b:a3:32:81:12:af:0a:ea:a4: fc:bc:0d:d3:ee:4d:85:bf:9a:0d:e3:bf:eb:59:07:c7:8e:25: 00:2c:81:a6:84:80:52:46:8b:49:9d:e7:b6:6f:12:04:74:86: 83:cd:4c:88:39:d7:97:bd:05:f4:eb:e9:a2:ed:8c:02:1a:b3: ae:39:53:37:09:12:04:4d:d0:a4:89:dc:d8:0c:be:d0:d2:b8: d8:90:9b:9d:e5:e7:fc:af:58:c0:14:3b:d6:84:30:b6:43:58: d8:57:3b:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i3/IrE7px3mWjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk NWM1NTE4YzAtNThhYi00ZDY4LWE5OWYtMDMyNzhlYWU1YjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQQcnJsiiOInMDSNrDLNraWkaNhadWFcVuq1 PGYThszzOnUbqv7ihgPdo1kdQRZ4etUeLQrCPZ3sOWm9kIhDIx8u1aPKEQ828qdd rFarX1VCxPtobXm+eDN99wAhDNEtEuC7McIb0ulvs3126qdWO0lURMw0temA1kR5 nDp0Xwm7DwzlJEH050zW/NGYvpO+8awa8lfOeh+5O1wOnKitpGUHc10JvtuNPgNc OeJy0MGMg1zZL/iWGKg9goJqBRZfw0mTZVTS2Xjgvl6wW1PKQqYMdFLClWmFeAtF uTWS4I1HwoPtRHwv7hhp8N05TCYYztwH79CsfixSxvQ3pJu40QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRDh8ZHCtI0bqAepmgyE8hOwjxoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2I0MzdlNGYtNDYwZS0z MjIwLTk0NTktMjlmYTMzYmU3NmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9s4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9/alLdSsVb3wuF1qAZt7s7xpg/w6r34UBkWHCEN5OvMHLi8fFFbHLQ /4uHzWGL0LApUAtkkHQYITXme7YYw0S109FP3as1gi4jl4FNTPRu7YmOIpvBRf7Q oqxngoyh4OWEyGo6DCZJRQbD7i49b5dBvBQ9cZ5NLTmHw/P4uHcQSlmQmPQRa5/+ KoIVDFSzT5PjUU7YRLnbnyujMoESrwrqpPy8DdPuTYW/mg3jv+tZB8eOJQAsgaaE gFJGi0md57ZvEgR0hoPNTIg515e9BfTr6aLtjAIas645UzcJEgRN0KSJ3NgMvtDS uNiQm53l5/yvWMAUO9aEMLZDWNhXOxg= -----END CERTIFICATE-----Generated at Sat Apr 5 11:09:18 2025 by rpki-client