$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d102f301-3e6e-38a7-9a60-cf55407f1cc2.roa File: d102f301-3e6e-38a7-9a60-cf55407f1cc2.roa (raw, json) Hash identifier: 5GOLEhtmHU+cKQ8irxCnCgceTdQwKZlwttm2HBDm7ow= Subject key identifier: B6:4B:A5:F3:E8:2F:32:21:FA:ED:3E:38:64:DC:2B:0B:07:2C:36:8C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BBBB8C89D0234D9138295E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d102f301-3e6e-38a7-9a60-cf55407f1cc2.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.211.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:8c:89:d0:23:4d:91:38:29:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=ddf2baa8-88d4-44ce-a3fa-1773079827e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:74:3c:8c:e7:45:0a:fe:4f:d5:11:32:8a:97: 91:10:73:12:e3:b5:1e:43:9e:40:e4:70:fe:ef:04: f2:cf:9c:02:3e:fd:76:4d:14:f8:7d:17:05:09:ad: aa:e8:58:d5:5d:ec:f6:59:cf:57:53:28:ae:3b:cf: e4:58:2e:27:45:ca:42:7d:fb:c4:a6:e8:8d:13:17: 70:84:27:dc:b3:9e:36:2d:b8:cb:b1:28:0b:b6:49: 3b:da:c7:28:19:1e:21:56:c0:92:c4:1e:97:d8:19: 3a:e9:22:5b:9b:5a:d5:74:cd:f1:8a:94:d3:36:c9: 26:e7:a0:81:d1:18:7e:23:ed:3f:c2:01:19:0f:24: ba:60:12:5d:bd:2e:ad:41:42:7c:f1:04:49:35:05: cf:cc:5c:db:6f:38:eb:64:e5:ba:70:bc:e8:c8:d0: 01:14:bf:4f:3c:c5:ee:fa:2a:ab:e0:1d:ff:92:b1: 85:33:70:6c:4d:a4:02:b4:f0:d3:40:31:31:8c:73: 5e:94:70:c0:f2:d5:e3:12:1e:c6:27:7a:c2:77:6d: 5a:0b:d9:9c:d0:38:2c:4a:27:24:13:28:02:a4:c5: 3a:6e:c7:d0:21:74:3c:c6:19:d0:ea:db:87:e5:c5: 82:89:43:96:0c:5a:79:ef:37:78:c8:53:6f:1d:5e: 80:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4B:A5:F3:E8:2F:32:21:FA:ED:3E:38:64:DC:2B:0B:07:2C:36:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d102f301-3e6e-38a7-9a60-cf55407f1cc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:ae:31:6a:eb:3b:84:36:a0:e0:3f:34:f5:18:21:8d:8c:50: 81:da:43:27:72:d1:3f:0e:a1:e7:61:37:77:dc:4b:a3:c8:9c: de:d6:f4:5c:8f:27:71:8b:7a:f0:b0:f5:91:26:d1:11:8f:f9: 24:05:e0:f1:bf:23:bd:75:4b:8f:b4:78:ce:bc:40:2d:32:cf: a3:16:12:97:ee:c4:93:6f:65:d0:8b:0c:f8:5d:b3:59:be:d4: 7b:a5:1e:35:50:ee:86:fa:3e:fd:1b:34:e7:f3:6f:df:71:e0: 6e:82:bb:6f:d9:e5:c6:52:28:94:7d:63:c4:fc:0e:b7:43:ed: 44:db:cd:fe:aa:9c:75:90:5a:a9:9c:1f:63:17:07:83:48:b8: 17:81:24:63:51:57:18:5d:b4:f3:0f:90:99:69:9b:df:ba:f9: af:d0:8b:b1:70:46:10:db:78:40:2d:68:a2:95:1e:a8:a3:19: 37:5e:0f:00:bc:74:04:af:db:13:ec:27:c5:5a:c5:ad:b7:45: f2:62:e3:2d:ca:5e:82:e2:c8:0b:b8:45:8e:e1:5d:75:36:ab: 73:69:0a:f1:62:19:e7:cf:63:ca:7b:88:3d:86:e4:d1:44:b1: 22:07:ef:64:a8:72:d4:6e:94:18:f5:65:ec:6e:94:2d:80:25: 56:d2:1a:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4yJ0CNNkTgpXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk ZGRmMmJhYTgtODhkNC00NGNlLWEzZmEtMTc3MzA3OTgyN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnQ8jOdFCv5P1REyipeREHMS47UeQ55A5HD+ 7wTyz5wCPv12TRT4fRcFCa2q6FjVXez2Wc9XUyiuO8/kWC4nRcpCffvEpuiNExdw hCfcs542LbjLsSgLtkk72scoGR4hVsCSxB6X2Bk66SJbm1rVdM3xipTTNskm56CB 0Rh+I+0/wgEZDyS6YBJdvS6tQUJ88QRJNQXPzFzbbzjrZOW6cLzoyNABFL9PPMXu +iqr4B3/krGFM3BsTaQCtPDTQDExjHNelHDA8tXjEh7GJ3rCd21aC9mc0DgsSick EygCpMU6bsfQIXQ8xhnQ6tuH5cWCiUOWDFp57zd4yFNvHV6A+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZLpfPoLzIh+u0+OGTcKwsHLDaMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDEwMmYzMDEtM2U2ZS0z OGE3LTlhNjAtY2Y1NTQwN2YxY2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9PkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiuMWrrO4Q2oOA/NPUYIY2MUIHaQydy0T8OoedhN3fcS6PInN7W9FyP J3GLevCw9ZEm0RGP+SQF4PG/I711S4+0eM68QC0yz6MWEpfuxJNvZdCLDPhds1m+ 1HulHjVQ7ob6Pv0bNOfzb99x4G6Cu2/Z5cZSKJR9Y8T8DrdD7UTbzf6qnHWQWqmc H2MXB4NIuBeBJGNRVxhdtPMPkJlpm9+6+a/Qi7FwRhDbeEAtaKKVHqijGTdeDwC8 dASv2xPsJ8Vaxa23RfJi4y3KXoLiyAu4RY7hXXU2q3NpCvFiGefPY8p7iD2G5NFE sSIH72SoctRulBj1ZexulC2AJVbSGoQ= -----END CERTIFICATE-----Generated at Sat Apr 5 10:54:21 2025 by rpki-client