$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9caed2e-26c4-36da-af90-3667f35f76fd.roa File: d9caed2e-26c4-36da-af90-3667f35f76fd.roa (raw, json) Hash identifier: /suYXzNBfQYOIQQE1E2ckrp6jJ7q/moJwDfPu7uPIkQ= Subject key identifier: 24:BA:16:DF:0B:F9:2E:A9:55:59:5B:86:97:DA:42:D2:5C:2B:A5:00 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BA564276685A8476A73E9130 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9caed2e-26c4-36da-af90-3667f35f76fd.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.208.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:42:76:68:5a:84:76:a7:3e:91:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=32c1bb56-d5d3-4150-872e-ee3d9c9c1251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fb:0a:36:ed:4e:ac:cd:69:21:6c:33:fc:bc: 02:73:d4:c0:df:24:7b:7b:da:40:85:70:cb:fb:b2: 76:cd:07:b9:9c:e9:d3:51:c2:3c:37:b5:42:90:2f: f7:88:e7:67:1c:82:84:e2:4b:e2:0d:58:87:37:70: 65:39:1a:c5:e6:41:b6:14:75:e1:44:f2:fe:d3:c1: 67:1a:88:db:ca:6d:a0:1d:ae:44:f5:59:bd:fb:1c: 36:ce:57:3a:87:72:84:26:ee:00:cf:45:47:65:a0: a0:d2:67:34:c2:cd:be:3c:bd:06:a4:97:7d:d1:ec: 8c:06:f0:e5:12:2b:45:6e:6d:8c:d9:31:a0:d4:ae: 86:eb:5f:49:6c:4b:b4:d0:0b:92:17:9e:79:d2:9d: 78:49:1c:06:24:74:32:6e:62:1b:86:d5:8e:25:34: 74:f6:17:3b:7e:51:c3:2f:c5:01:a2:1a:f7:b9:38: 1b:59:22:51:96:49:9d:19:73:52:38:8b:e4:e1:eb: 5e:fb:0f:61:8f:1e:0b:12:50:e4:40:cf:21:4d:aa: e0:e3:00:af:3f:1b:22:13:7b:d3:1c:0b:b0:14:6e: 57:0f:37:4d:15:cd:98:40:26:73:25:2e:0e:b5:90: 1d:b9:27:3b:d9:a4:73:46:c8:08:46:ba:a3:17:9e: 70:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BA:16:DF:0B:F9:2E:A9:55:59:5B:86:97:DA:42:D2:5C:2B:A5:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9caed2e-26c4-36da-af90-3667f35f76fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:a2:26:45:00:aa:0f:8e:a8:78:66:79:66:34:bf:ea:65:03: 57:e2:77:c5:1b:85:74:0b:3d:a6:47:5a:56:62:0f:df:9c:b9: 47:ab:f7:02:c6:d7:f6:52:3c:2e:fc:0a:3c:b6:d8:df:4a:8f: 52:4e:14:fb:60:22:15:3f:88:c8:80:dd:92:9e:66:22:39:ab: 68:3f:09:e2:4f:d0:cb:5e:33:42:e7:81:a5:62:58:4d:50:37: 1d:dd:fa:e6:26:bb:7f:9b:a0:71:ca:40:5a:4d:5f:09:19:6a: 9f:1d:3e:3c:8b:a7:0b:23:c0:b4:94:a9:97:92:df:12:7b:8f: 4c:12:bc:58:5d:53:87:8b:a4:8d:84:7f:51:03:a1:af:b3:d0: fd:e8:88:9b:71:09:55:9c:ae:96:37:71:a2:81:68:6e:ce:1a: 1d:de:50:3d:6f:76:b9:be:9c:07:d1:73:3e:f4:92:79:94:ab: 8f:c7:bf:aa:3c:b6:aa:7c:33:87:66:dd:e2:22:64:e3:41:f1: e4:16:31:3e:14:48:3b:d7:82:9d:6e:1a:55:fd:9d:f4:cf:0b: 24:4c:c2:5a:3e:e5:c6:11:0b:8a:d6:1c:55:f4:08:4a:cc:97: 5d:cd:28:6f:c7:af:05:87:5a:bb:16:92:9a:6f:10:5b:82:be: 40:7d:b5:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi6VkJ2aFqEdqc+kTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk MzJjMWJiNTYtZDVkMy00MTUwLTg3MmUtZWUzZDljOWMxMjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPsKNu1OrM1pIWwz/LwCc9TA3yR7e9pAhXDL +7J2zQe5nOnTUcI8N7VCkC/3iOdnHIKE4kviDViHN3BlORrF5kG2FHXhRPL+08Fn Gojbym2gHa5E9Vm9+xw2zlc6h3KEJu4Az0VHZaCg0mc0ws2+PL0GpJd90eyMBvDl EitFbm2M2TGg1K6G619JbEu00AuSF5550p14SRwGJHQybmIbhtWOJTR09hc7flHD L8UBohr3uTgbWSJRlkmdGXNSOIvk4ete+w9hjx4LElDkQM8hTarg4wCvPxsiE3vT HAuwFG5XDzdNFc2YQCZzJS4OtZAduSc72aRzRsgIRrqjF55wTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCS6Ft8L+S6pVVlbhpfaQtJcK6UAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDljYWVkMmUtMjZjNC0z NmRhLWFmOTAtMzY2N2YzNWY3NmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9AUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyiJkUAqg+OqHhmeWY0v+plA1fid8UbhXQLPaZHWlZiD9+cuUer9wLG 1/ZSPC78Cjy22N9Kj1JOFPtgIhU/iMiA3ZKeZiI5q2g/CeJP0MteM0LngaViWE1Q Nx3d+uYmu3+boHHKQFpNXwkZap8dPjyLpwsjwLSUqZeS3xJ7j0wSvFhdU4eLpI2E f1EDoa+z0P3oiJtxCVWcrpY3caKBaG7OGh3eUD1vdrm+nAfRcz70knmUq4/Hv6o8 tqp8M4dm3eIiZONB8eQWMT4USDvXgp1uGlX9nfTPCyRMwlo+5cYRC4rWHFX0CErM l13NKG/HrwWHWrsWkppvEFuCvkB9tXA= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:07 2025 by rpki-client