$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d908316d-0bdd-329e-a3e1-cc1fe57cc50e.roa File: d908316d-0bdd-329e-a3e1-cc1fe57cc50e.roa (raw, json) Hash identifier: XLuhuqxwZbsc4CHKableo1GCT+Y1N7+J6tZQyjdhSBA= Subject key identifier: B8:8B:19:57:62:65:C8:EB:94:15:C9:B0:61:1F:6D:DE:AD:0E:26:36 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BA5643073088A35B5CF71800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d908316d-0bdd-329e-a3e1-cc1fe57cc50e.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.208.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:43:07:30:88:a3:5b:5c:f7:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=1e62774e-a9f6-447e-8fea-40cf7cdcfbf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e6:ce:20:62:40:fa:85:24:dd:79:04:af:75: 1d:a7:9a:57:f5:0c:81:ee:0b:47:30:6d:8d:68:83: 16:a2:d2:46:89:06:72:ec:e7:7c:6b:97:cf:8c:51: da:9e:4e:b3:d5:59:11:86:d0:67:ea:c7:f0:77:23: 65:9f:6a:62:4f:e2:7f:dc:eb:89:80:25:39:21:46: 6e:9f:09:34:fe:8c:39:e5:b7:5a:1b:d6:0e:0a:7a: d8:e9:1e:6d:2c:00:ba:5e:d1:8f:54:df:2f:ec:37: f6:c4:69:b9:c7:79:f7:91:c3:24:98:ed:48:2c:0f: f5:ce:12:bc:02:35:05:1e:6e:5d:93:7f:a7:ca:98: 17:dc:c0:99:73:bf:b6:cf:15:94:14:f0:37:89:0c: f5:d8:8b:49:2e:5d:12:62:fa:8d:4b:aa:8a:1d:3c: fe:e2:34:87:2e:a5:f9:95:1b:03:32:a5:0a:29:ba: ec:8f:4f:86:e7:23:2c:c1:de:17:a3:9e:05:5f:60: 7c:d2:ae:f5:ae:16:53:ef:0b:38:f1:4e:4f:cb:35: 0f:cb:f3:04:bc:e1:74:37:63:ac:da:07:8d:06:cd: df:b7:23:d5:44:fb:e4:ed:1a:be:26:ff:7b:52:27: 80:33:76:26:d6:bd:38:43:03:0e:72:14:d4:5d:de: ce:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8B:19:57:62:65:C8:EB:94:15:C9:B0:61:1F:6D:DE:AD:0E:26:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d908316d-0bdd-329e-a3e1-cc1fe57cc50e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:81:51:e3:35:7f:db:3f:b4:73:83:a3:a5:1c:a9:3b:a9:2c: b0:11:58:3c:06:ab:d5:8a:15:a0:72:03:5b:d6:79:c4:61:fb: 15:80:f9:e9:e3:5e:23:79:23:74:00:ca:a2:7f:01:b8:5a:f6: 57:83:ca:b6:68:df:2b:f1:b8:48:b7:fa:04:2e:cb:85:1a:87: 64:e1:a0:a9:65:dd:fb:14:f7:6b:98:58:82:25:63:93:38:2c: 70:18:4c:34:a1:f8:72:96:f0:e3:9e:c0:45:4a:5a:ae:e0:b7: 9e:d8:c8:d9:07:df:6b:b9:b4:73:d3:9b:c5:4e:61:73:8c:44: f6:87:c1:84:e5:c7:5c:74:71:08:f3:89:6b:2d:ac:ec:8a:94: dc:58:e2:48:d5:ab:4b:dd:51:a6:f7:5e:a5:9e:cf:11:21:eb: 27:7e:36:86:87:3f:5e:07:f1:ac:c6:66:19:89:89:e6:35:22: 75:ab:8d:d2:b9:91:a4:80:fa:11:c7:fa:38:04:c2:a6:e7:0f: 85:aa:cb:18:13:73:1c:fb:db:87:7f:4b:56:c8:8d:fe:f7:a9: 38:1a:ef:f7:e9:4c:46:ba:7d:2e:88:67:8e:90:22:6e:73:ac: e5:c8:9a:aa:3b:6d:de:06:02:18:3b:42:90:9e:1b:f9:17:82: 7d:67:79:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi6VkMHMIijW1z3GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk MWU2Mjc3NGUtYTlmNi00NDdlLThmZWEtNDBjZjdjZGNmYmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgubOIGJA+oUk3XkEr3Udp5pX9QyB7gtHMG2N aIMWotJGiQZy7Od8a5fPjFHank6z1VkRhtBn6sfwdyNln2piT+J/3OuJgCU5IUZu nwk0/ow55bdaG9YOCnrY6R5tLAC6XtGPVN8v7Df2xGm5x3n3kcMkmO1ILA/1zhK8 AjUFHm5dk3+nypgX3MCZc7+2zxWUFPA3iQz12ItJLl0SYvqNS6qKHTz+4jSHLqX5 lRsDMqUKKbrsj0+G5yMswd4Xo54FX2B80q71rhZT7ws48U5PyzUPy/MEvOF0N2Os 2geNBs3ftyPVRPvk7Rq+Jv97UieAM3Ym1r04QwMOchTUXd7OzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiLGVdiZcjrlBXJsGEfbd6tDiY2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDkwODMxNmQtMGJkZC0z MjllLWEzZTEtY2MxZmU1N2NjNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9B4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyBUeM1f9s/tHODo6UcqTupLLARWDwGq9WKFaByA1vWecRh+xWA+enj XiN5I3QAyqJ/Abha9leDyrZo3yvxuEi3+gQuy4Uah2ThoKll3fsU92uYWIIlY5M4 LHAYTDSh+HKW8OOewEVKWq7gt57YyNkH32u5tHPTm8VOYXOMRPaHwYTlx1x0cQjz iWstrOyKlNxY4kjVq0vdUab3XqWezxEh6yd+NoaHP14H8azGZhmJieY1InWrjdK5 kaSA+hHH+jgEwqbnD4WqyxgTcxz724d/S1bIjf73qTga7/fpTEa6fS6IZ46QIm5z rOXImqo7bd4GAhg7QpCeG/kXgn1neZI= -----END CERTIFICATE-----Generated at Sat Apr 5 10:54:34 2025 by rpki-client