$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6b8df6b-ed9f-3cef-8804-b04f299c6a4d.roa File: e6b8df6b-ed9f-3cef-8804-b04f299c6a4d.roa (raw, json) Hash identifier: FuM+LPzLes0miFgKdUw+QYF9OroW5Wd/+R4HRY83wlk= Subject key identifier: F8:53:9B:FF:13:2A:B4:F0:A1:B5:26:8D:C6:E6:62:8D:AD:C0:3A:7D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BE8642D21971BA4757F286A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6b8df6b-ed9f-3cef-8804-b04f299c6a4d.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.217.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:42:d2:19:71:ba:47:57:f2:86:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=d4fedb93-d492-4e44-8d41-be8b467ba9bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:47:b2:d8:5e:0d:e5:78:b0:76:02:52:d4:b5: be:2a:7f:9f:d4:d9:15:0b:93:bf:a1:37:09:63:9f: 35:c3:e5:54:38:36:b1:8c:a4:60:00:28:48:49:98: 3c:a5:09:d4:d0:54:a3:ab:ef:44:fd:b0:76:f1:de: a0:2f:38:82:92:c2:8f:a0:d2:f9:a6:6d:c0:ee:80: c2:48:02:7e:11:07:ae:22:89:84:bc:35:b9:46:bb: 40:16:7a:e2:16:f5:f4:f9:3a:5b:c1:6f:02:a7:82: 59:eb:72:74:3f:c2:d6:92:ee:6b:0a:ce:72:df:c9: f6:04:5d:dc:53:1a:db:ff:b3:e0:dd:8b:e7:8c:61: 53:3a:3e:5a:de:8a:63:e2:af:69:90:82:ba:55:a4: a5:e6:fe:2a:89:e8:bc:9c:cc:93:93:a6:59:9a:39: 72:ba:fa:ae:12:a6:ee:e8:af:53:f8:a2:b5:bb:7d: ab:ef:e4:48:d0:a7:9b:c8:f8:b0:fd:1b:3e:ee:1d: fd:63:d0:8b:74:0c:d2:97:3f:09:55:55:c9:46:83: d6:b0:3a:ad:fb:0b:67:85:06:a8:44:74:7c:4e:4b: 33:eb:3e:5a:58:66:ab:9b:2c:ab:f3:42:c5:b9:07: 62:98:a5:f9:e2:72:c2:cb:7e:99:1b:f8:21:e5:c5: aa:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:53:9B:FF:13:2A:B4:F0:A1:B5:26:8D:C6:E6:62:8D:AD:C0:3A:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6b8df6b-ed9f-3cef-8804-b04f299c6a4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:8b:32:0d:19:c0:88:4a:8d:77:fc:04:4f:37:95:46:80:6d: 8b:22:0c:b9:d8:c1:fc:43:39:11:ef:01:d7:5c:ab:67:fd:cb: 65:6d:c7:44:6d:88:29:71:c3:a5:6c:35:3e:f5:fb:74:0f:52: 6f:23:d8:91:9e:0a:6c:1c:1c:65:4a:8c:43:b9:62:04:f3:85: 0e:6c:44:25:0d:e5:81:6c:5a:eb:69:d9:00:97:4d:27:fa:e1: 4d:94:e5:c7:b5:96:81:97:2a:8b:a5:6b:15:56:8d:8f:55:f0: 87:bf:20:0d:13:08:1a:d6:26:95:eb:02:64:c7:3e:60:9c:5f: 6c:fd:d2:f1:3f:5a:14:b1:42:e8:62:18:e2:90:e0:9b:c6:e5: df:30:cf:d7:d6:6e:90:9e:f6:6c:e5:36:25:94:6b:a1:e2:63: 06:d3:1d:70:db:ba:96:4f:40:66:44:dd:84:3b:41:bc:eb:fa: 8f:35:00:e7:81:38:61:e3:ec:df:f3:a2:da:2d:b9:f9:23:f5: a5:42:73:d2:6b:e4:01:4b:81:b4:f1:b3:2b:f7:a7:4d:2a:a8: b8:ef:e5:e9:da:97:8b:2d:3a:53:16:87:7c:d4:fb:1b:c9:7f: 24:d3:fa:25:19:60:63:3e:14:02:34:6a:a3:55:08:06:f3:6e: f0:cb:3e:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hkLSGXG6R1fyhqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk ZDRmZWRiOTMtZDQ5Mi00ZTQ0LThkNDEtYmU4YjQ2N2JhOWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0ey2F4N5XiwdgJS1LW+Kn+f1NkVC5O/oTcJ Y581w+VUODaxjKRgAChISZg8pQnU0FSjq+9E/bB28d6gLziCksKPoNL5pm3A7oDC SAJ+EQeuIomEvDW5RrtAFnriFvX0+TpbwW8Cp4JZ63J0P8LWku5rCs5y38n2BF3c Uxrb/7Pg3YvnjGFTOj5a3opj4q9pkIK6VaSl5v4qiei8nMyTk6ZZmjlyuvquEqbu 6K9T+KK1u32r7+RI0KebyPiw/Rs+7h39Y9CLdAzSlz8JVVXJRoPWsDqt+wtnhQao RHR8Tksz6z5aWGarmyyr80LFuQdimKX54nLCy36ZG/gh5cWqoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhTm/8TKrTwobUmjcbmYo2twDp9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTZiOGRmNmItZWQ5Zi0z Y2VmLTg4MDQtYjA0ZjI5OWM2YTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9moMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCLMg0ZwIhKjXf8BE83lUaAbYsiDLnYwfxDORHvAddcq2f9y2Vtx0Rt iClxw6VsNT71+3QPUm8j2JGeCmwcHGVKjEO5YgTzhQ5sRCUN5YFsWutp2QCXTSf6 4U2U5ce1loGXKoulaxVWjY9V8Ie/IA0TCBrWJpXrAmTHPmCcX2z90vE/WhSxQuhi GOKQ4JvG5d8wz9fWbpCe9mzlNiWUa6HiYwbTHXDbupZPQGZE3YQ7Qbzr+o81AOeB OGHj7N/zototufkj9aVCc9Jr5AFLgbTxsyv3p00qqLjv5enal4stOlMWh3zU+xvJ fyTT+iUZYGM+FAI0aqNVCAbzbvDLPtc= -----END CERTIFICATE-----Generated at Sat Apr 5 10:55:52 2025 by rpki-client