$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d91578a3-2b08-35ed-944e-d37239e82084.roa File: d91578a3-2b08-35ed-944e-d37239e82084.roa (raw, json) Hash identifier: aHHlr64wHHqoa6x5xLgvnBhP3pV9zalmcHxTYaEHWRE= Subject key identifier: AB:1C:4D:EE:65:59:66:03:4A:D8:54:2C:FA:98:7B:49:83:EE:14:A6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BA564410C77706C17C35F4D0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d91578a3-2b08-35ed-944e-d37239e82084.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.208.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:44:10:c7:77:06:c1:7c:35:f4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=c8689e6a-4d21-4958-a057-bcb0372bb884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:04:63:ec:f9:d8:c0:b3:ca:98:95:e3:56:f2: 09:ec:c5:65:b2:4d:91:a9:45:33:95:28:a4:60:0e: 15:d8:a0:00:41:fa:70:95:5c:0f:2f:16:ff:a3:76: a5:53:ce:37:5c:ba:65:1b:90:fd:6a:6a:fd:5b:3a: a3:d0:7d:24:f4:78:f7:7c:22:28:5a:eb:d1:8a:73: ec:7f:34:54:62:aa:6a:51:0f:c8:ed:b0:a8:61:dc: 09:48:44:08:ae:b1:78:c0:b5:36:a2:fc:38:6b:d9: f3:7a:93:cb:49:a2:5b:41:fb:e9:47:32:0e:aa:cc: 57:34:2a:97:83:45:74:e7:2d:f4:38:e6:63:18:18: 0c:56:db:77:1a:d1:ea:72:59:3d:c1:d5:10:96:ce: da:f9:ea:17:f4:5e:eb:4c:bb:3c:bb:11:aa:e7:5f: 4e:38:68:e4:e1:0d:41:5b:d3:20:c0:b6:91:b4:78: ab:6c:54:ff:51:1b:5a:f0:6b:40:d0:14:47:2f:2d: 7c:fd:03:40:15:28:b4:c6:68:84:5d:e0:23:fa:6b: 71:35:f5:cc:17:f3:84:e5:4c:fb:79:76:ac:c8:d6: 25:91:91:1f:85:d3:9b:16:19:35:f5:9a:f3:ec:e0: a5:b4:d5:84:9c:b0:c1:95:a6:cf:01:59:85:14:c5: 5b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1C:4D:EE:65:59:66:03:4A:D8:54:2C:FA:98:7B:49:83:EE:14:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d91578a3-2b08-35ed-944e-d37239e82084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:47:06:3f:f9:3e:96:d4:c9:ee:7b:c7:c0:5d:09:dd:bb:80: 66:49:92:de:ff:c6:c4:26:18:83:79:0a:3e:5b:76:18:36:c8: a6:46:ef:0e:a9:ca:4d:20:23:dc:0c:94:2c:5c:7e:97:fc:f8: 8f:7a:b7:ab:4f:d5:05:b5:48:38:7e:e1:1b:4c:2c:27:c2:8b: 20:b8:c2:dd:7c:16:55:14:22:51:0d:07:1d:fe:c8:63:f8:73: 5d:30:d0:92:fb:91:1f:c5:8c:a9:bb:c1:f9:97:af:0d:a2:71: a2:5c:83:26:50:4c:37:5e:d4:f7:49:ca:00:54:c9:21:b9:c9: 79:59:df:0b:d9:73:31:85:1c:7e:46:24:a1:57:f9:d4:43:9c: 71:48:c0:b1:80:6c:00:95:2e:90:e2:e6:b8:4c:58:11:2e:f7: 69:33:d9:71:dc:e3:e8:35:a9:94:d9:ef:08:bc:c6:94:e5:80: 1c:92:36:33:3c:2d:f4:b6:b4:26:92:4c:90:ca:0b:5c:06:3e: 2d:03:7b:67:db:3e:b5:47:ee:b6:52:88:1b:79:f7:36:0f:3d: 2c:5a:b9:9a:7c:15:aa:4d:4c:d2:b0:71:95:c2:9e:4a:02:81: 34:20:bf:35:35:5a:b6:c5:ae:3e:58:90:64:2e:a9:49:bf:80: e2:b2:41:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi6VkQQx3cGwXw19NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk Yzg2ODllNmEtNGQyMS00OTU4LWEwNTctYmNiMDM3MmJiODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQRj7PnYwLPKmJXjVvIJ7MVlsk2RqUUzlSik YA4V2KAAQfpwlVwPLxb/o3alU843XLplG5D9amr9Wzqj0H0k9Hj3fCIoWuvRinPs fzRUYqpqUQ/I7bCoYdwJSEQIrrF4wLU2ovw4a9nzepPLSaJbQfvpRzIOqsxXNCqX g0V05y30OOZjGBgMVtt3GtHqclk9wdUQls7a+eoX9F7rTLs8uxGq519OOGjk4Q1B W9MgwLaRtHirbFT/URta8GtA0BRHLy18/QNAFSi0xmiEXeAj+mtxNfXMF/OE5Uz7 eXasyNYlkZEfhdObFhk19Zrz7OCltNWEnLDBlabPAVmFFMVbxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKscTe5lWWYDSthULPqYe0mD7hSmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDkxNTc4YTMtMmIwOC0z NWVkLTk0NGUtZDM3MjM5ZTgyMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9AOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlHBj/5PpbUye57x8BdCd27gGZJkt7/xsQmGIN5Cj5bdhg2yKZG7w6p yk0gI9wMlCxcfpf8+I96t6tP1QW1SDh+4RtMLCfCiyC4wt18FlUUIlENBx3+yGP4 c10w0JL7kR/FjKm7wfmXrw2icaJcgyZQTDde1PdJygBUySG5yXlZ3wvZczGFHH5G JKFX+dRDnHFIwLGAbACVLpDi5rhMWBEu92kz2XHc4+g1qZTZ7wi8xpTlgBySNjM8 LfS2tCaSTJDKC1wGPi0De2fbPrVH7rZSiBt59zYPPSxauZp8FapNTNKwcZXCnkoC gTQgvzU1WrbFrj5YkGQuqUm/gOKyQds= -----END CERTIFICATE-----Generated at Sat Apr 5 11:07:04 2025 by rpki-client