$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d728645b-ab80-3ba2-827a-d2ab88082ab0.roa File: d728645b-ab80-3ba2-827a-d2ab88082ab0.roa (raw, json) Hash identifier: BOotSiP2oV11Z7JvlQUd9AR7n9GcEdb1pPQnzNM7vqw= Subject key identifier: E3:C8:16:BA:B9:6A:30:87:94:7E:DE:0D:A6:D2:11:B1:D3:52:24:4C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858491D716DE8302C1E566310C600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d728645b-ab80-3ba2-827a-d2ab88082ab0.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.217.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:6d:e8:30:2c:1e:56:63:10:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=05bdbe53-461e-4009-ab7e-8d150dc2a614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5e:ce:87:c8:e1:71:7a:10:27:77:2d:c0:5f: 96:99:00:26:f5:62:32:10:0f:04:c9:7b:6d:e6:79: 79:cc:8e:94:6e:23:1d:c7:f6:39:e0:e5:aa:e9:a0: 47:0f:f0:53:42:77:7d:48:32:b5:e0:2c:59:5c:78: 46:1d:64:46:93:30:75:61:04:67:d6:b8:e9:9b:47: 3a:7b:5f:0c:fd:b8:b6:94:26:4b:7a:18:4c:4e:d9: fa:62:89:60:b2:c1:21:f7:fd:8a:40:13:28:c1:78: 0a:63:ed:82:84:3f:23:d8:64:4d:93:37:8b:f2:de: c1:31:4f:c0:7b:12:b3:3d:b8:35:0f:3a:40:e5:77: 0d:bb:f4:21:c9:0c:f0:59:62:a8:b8:48:fd:ae:d8: 23:18:d0:5e:ae:e0:be:c1:94:cd:d7:5f:84:60:a5: 49:7c:2b:5f:ad:29:97:e4:10:2e:8c:9b:60:4a:d7: 31:a7:ce:fe:20:b7:15:2f:34:d6:d7:e6:b8:af:90: 11:21:71:e0:40:3a:4d:dc:ee:2a:2b:04:67:2f:b4: 76:6a:4d:aa:98:a7:a8:27:4f:37:a4:a4:bf:b8:af: c8:13:1f:3f:53:33:85:d0:b6:eb:43:d9:9a:f3:96: 6f:50:de:d8:d6:cc:3e:91:7b:fa:da:d6:77:e9:72: 0a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C8:16:BA:B9:6A:30:87:94:7E:DE:0D:A6:D2:11:B1:D3:52:24:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d728645b-ab80-3ba2-827a-d2ab88082ab0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:3a:3a:e6:2e:1d:ea:aa:3c:16:67:86:81:f9:55:15:cb:4e: f0:6d:33:b6:bb:df:49:53:04:16:8c:1c:5b:74:bb:d0:aa:47: c5:71:7e:f6:a3:04:24:15:e1:cb:f5:0e:4b:d9:14:a6:b4:f5: e0:55:19:44:3a:66:44:8b:dc:04:69:67:98:e3:f3:da:c7:c1: cf:33:fd:7f:bf:3b:85:d8:47:01:34:38:2b:a7:6c:69:20:93: 77:6c:ec:4d:b5:55:31:7f:ca:f5:7e:ba:9d:c3:c1:fa:cf:8f: 6e:fa:66:b1:75:dc:67:5d:ad:c3:b5:04:93:dc:03:72:ac:6b: 4c:ad:ae:10:b1:6f:d2:2d:ea:d0:c9:af:dc:8a:69:0f:46:a5: a6:7e:7d:32:11:3c:e3:f4:38:5e:6b:65:5b:7f:b0:ed:ab:1c: cb:d3:b9:95:16:55:e0:1c:31:24:2d:ea:eb:3e:6d:f3:6d:ad: eb:67:4f:0d:41:44:50:8e:d7:91:4d:bd:36:8b:7a:7a:48:a5: b0:c6:92:40:1e:78:2f:be:6d:36:99:55:c2:19:9a:76:5c:d6: e8:b2:4e:03:d4:7b:fd:27:d9:27:92:66:cd:12:3d:cb:85:ef: 49:1b:f4:cb:ac:30:cf:b5:50:75:d4:b9:6e:d7:ee:c8:bf:86: c2:5b:80:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcW3oMCweVmMQxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MDViZGJlNTMtNDYxZS00MDA5LWFiN2UtOGQxNTBkYzJhNjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA317Oh8jhcXoQJ3ctwF+WmQAm9WIyEA8EyXtt 5nl5zI6UbiMdx/Y54OWq6aBHD/BTQnd9SDK14CxZXHhGHWRGkzB1YQRn1rjpm0c6 e18M/bi2lCZLehhMTtn6YolgssEh9/2KQBMowXgKY+2ChD8j2GRNkzeL8t7BMU/A exKzPbg1DzpA5XcNu/QhyQzwWWKouEj9rtgjGNBeruC+wZTN11+EYKVJfCtfrSmX 5BAujJtgStcxp87+ILcVLzTW1+a4r5ARIXHgQDpN3O4qKwRnL7R2ak2qmKeoJ083 pKS/uK/IEx8/UzOF0LbrQ9ma85ZvUN7Y1sw+kXv62tZ36XIK8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPIFrq5ajCHlH7eDabSEbHTUiRMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDcyODY0NWItYWI4MC0z YmEyLTgyN2EtZDJhYjg4MDgyYWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9loMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHA6OuYuHeqqPBZnhoH5VRXLTvBtM7a730lTBBaMHFt0u9CqR8Vxfvaj BCQV4cv1DkvZFKa09eBVGUQ6ZkSL3ARpZ5jj89rHwc8z/X+/O4XYRwE0OCunbGkg k3ds7E21VTF/yvV+up3DwfrPj276ZrF13GddrcO1BJPcA3Ksa0ytrhCxb9It6tDJ r9yKaQ9GpaZ+fTIRPOP0OF5rZVt/sO2rHMvTuZUWVeAcMSQt6us+bfNtretnTw1B RFCO15FNvTaLenpIpbDGkkAeeC++bTaZVcIZmnZc1uiyTgPUe/0n2SeSZs0SPcuF 70kb9MusMM+1UHXUuW7X7si/hsJbgEY= -----END CERTIFICATE-----Generated at Sat Apr 5 12:23:31 2025 by rpki-client