$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee261c21-7707-39b0-a2d6-e5b897bffb5b.roa File: ee261c21-7707-39b0-a2d6-e5b897bffb5b.roa (raw, json) Hash identifier: o0+QybzVheo1UiJ14sgrjbNAueh+nnwXOHTWXzghxJ0= Subject key identifier: 0F:3D:A2:4E:39:9D:9C:DF:DB:31:92:37:3C:6F:35:A3:3F:8D:04:D1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858489340BC40E6623173218A1980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee261c21-7707-39b0-a2d6-e5b897bffb5b.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 16625 IP address blocks: 23.209.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:bc:40:e6:62:31:73:21:8a:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=dc8eb273-88a8-4ba1-82ae-db63f324f783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4d:d2:46:d4:31:e9:cd:1a:e0:e4:65:ff:3f: da:40:a9:a9:af:a8:fe:29:0e:23:90:35:c2:97:50: 43:32:76:c7:35:28:2c:74:ff:d4:29:58:97:ec:51: 64:52:96:35:16:d6:bd:36:ba:e8:2f:29:a1:aa:1d: 44:66:07:62:88:b5:39:39:e1:5c:cb:75:c3:5a:0a: 64:21:b6:57:04:03:65:3a:16:3f:61:74:1a:a9:d7: 76:6c:c6:db:e6:37:48:e8:20:10:25:5b:29:e4:fd: 18:c6:56:e3:1f:d6:de:eb:9b:f0:44:a9:d4:a6:e0: 49:08:98:9e:c4:38:ee:ad:49:08:94:b7:50:a6:c5: 2e:0e:0c:45:c9:67:d6:4c:a5:08:2e:94:d3:d7:7e: 18:35:af:1d:13:2a:fb:f0:99:96:fc:81:8f:8c:ea: 3f:1f:1d:63:d5:a4:ea:53:74:d8:b2:a1:14:e5:b7: aa:64:40:f3:62:69:22:6b:cc:df:13:80:42:58:24: 7f:3d:cb:8a:4c:b3:2e:e9:e1:17:ad:1a:a1:ff:25: 37:12:42:db:5a:43:cf:e1:9e:07:5e:79:c6:f5:07: a9:fa:10:d5:36:7f:ce:12:cc:dc:e2:39:82:fe:cc: 71:ba:4d:fb:ec:31:ae:d8:d7:ab:59:a5:ba:6a:c8: 45:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3D:A2:4E:39:9D:9C:DF:DB:31:92:37:3C:6F:35:A3:3F:8D:04:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee261c21-7707-39b0-a2d6-e5b897bffb5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:a7:9b:11:c9:d8:fa:dd:dd:eb:4f:ca:c3:03:f7:96:5a:59: 32:fd:99:09:8b:8e:88:8b:fa:92:65:ab:80:1e:a0:b5:bc:ed: ea:96:67:fa:4d:40:1e:b1:13:73:15:8b:96:92:49:da:40:fd: 1a:5b:03:ae:0f:9b:fd:30:6d:7a:e8:77:c1:2c:4d:4b:3a:50: fe:5d:3e:a8:0b:32:b0:71:7b:d3:a6:54:46:d3:02:ec:58:c1: ed:e9:65:76:fa:5a:87:ff:4c:f2:11:00:e3:b6:ee:55:56:12: bb:7f:0a:a3:9f:4c:e1:af:02:86:7a:5c:31:92:e3:60:70:4c: f4:98:32:e8:e8:ec:91:70:0e:e4:2c:4d:81:15:f0:6e:99:dd: cf:ab:07:bb:89:c8:2b:da:3c:85:ce:bc:97:d8:1c:cd:1e:d8: 34:f2:d8:2a:79:b3:f8:fd:3d:01:6d:36:0f:b2:b7:b3:bb:08: 17:f5:ca:a3:e6:af:86:eb:29:67:ad:77:5b:45:3b:44:7b:7e: e6:3c:fa:14:3b:41:77:06:64:93:e8:e7:7a:49:1c:7e:64:82: 4e:db:7e:d6:15:cc:d2:ef:40:25:9f:9f:97:33:45:64:ba:a6: a8:7a:2c:1d:52:eb:12:5a:4c:2e:f3:37:95:2a:5c:44:df:b5: c8:f5:1b:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQLxA5mIxcyGKGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk ZGM4ZWIyNzMtODhhOC00YmExLTgyYWUtZGI2M2YzMjRmNzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6U3SRtQx6c0a4ORl/z/aQKmpr6j+KQ4jkDXC l1BDMnbHNSgsdP/UKViX7FFkUpY1Fta9NrroLymhqh1EZgdiiLU5OeFcy3XDWgpk IbZXBANlOhY/YXQaqdd2bMbb5jdI6CAQJVsp5P0YxlbjH9be65vwRKnUpuBJCJie xDjurUkIlLdQpsUuDgxFyWfWTKUILpTT134YNa8dEyr78JmW/IGPjOo/Hx1j1aTq U3TYsqEU5beqZEDzYmkia8zfE4BCWCR/PcuKTLMu6eEXrRqh/yU3EkLbWkPP4Z4H XnnG9Qep+hDVNn/OEszc4jmC/sxxuk377DGu2NerWaW6ashFjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA89ok45nZzf2zGSNzxvNaM/jQTRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWUyNjFjMjEtNzcwNy0z OWIwLWEyZDYtZTViODk3YmZmYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9FGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACynmxHJ2Prd3etPysMD95ZaWTL9mQmLjoiL+pJlq4AeoLW87eqWZ/pN QB6xE3MVi5aSSdpA/RpbA64Pm/0wbXrod8EsTUs6UP5dPqgLMrBxe9OmVEbTAuxY we3pZXb6Wof/TPIRAOO27lVWErt/CqOfTOGvAoZ6XDGS42BwTPSYMujo7JFwDuQs TYEV8G6Z3c+rB7uJyCvaPIXOvJfYHM0e2DTy2Cp5s/j9PQFtNg+yt7O7CBf1yqPm r4brKWetd1tFO0R7fuY8+hQ7QXcGZJPo53pJHH5kgk7bftYVzNLvQCWfn5czRWS6 pqh6LB1S6xJaTC7zN5UqXETftcj1G/A= -----END CERTIFICATE-----Generated at Sat Apr 5 12:23:31 2025 by rpki-client