$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f00e4241-0f1d-3acd-bdf2-7ea798ffded2.roa File: f00e4241-0f1d-3acd-bdf2-7ea798ffded2.roa (raw, json) Hash identifier: pT5HmicPvG0yDIm0zsr2/NL7v1q9OXHXkGBx1IPAUwI= Subject key identifier: 7D:25:C4:F2:93:C9:96:A4:13:45:72:9E:7C:35:3C:3F:24:FE:1C:8A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849E22520D7F38E756065238B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f00e4241-0f1d-3acd-bdf2-7ea798ffded2.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 35994 IP address blocks: 23.208.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:20:d7:f3:8e:75:60:65:23:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=a9c271f1-ec8f-484d-af4a-4a29567715e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4a:e0:21:91:6d:cf:42:d2:1b:f2:fd:b1:c9: 3c:ed:b5:1d:d1:fb:c3:d2:49:8b:ed:3e:85:5e:70: 14:64:73:51:b5:9c:01:79:58:8a:aa:52:3c:25:f7: cc:88:be:75:f6:36:18:b9:9d:c7:71:9c:0b:ac:c9: 5b:b1:9f:20:91:fe:1a:96:da:d3:4a:41:f3:91:0c: 05:a3:85:2f:d2:fc:64:74:74:5d:c5:f3:00:cc:50: 1c:bd:81:27:b4:96:62:c8:a7:d8:d4:f9:6e:52:af: 00:6e:5d:b3:26:43:66:34:01:bc:aa:a7:7f:fc:b8: c4:39:11:e7:6e:5c:e5:aa:30:bb:0c:60:f9:8f:1b: 47:71:5c:14:28:57:a2:4b:75:35:84:cb:e8:65:26: 16:56:b0:ff:5f:24:98:29:e4:95:e9:44:6f:72:13: 8c:2a:4f:4b:a7:cb:87:bc:fa:1b:7e:3d:64:44:1c: 04:7d:b5:76:d8:a3:54:e9:4b:e3:9b:e6:89:42:fa: 49:e0:f8:53:c4:46:08:04:fc:67:b2:b8:18:28:9e: 04:46:a1:27:d0:00:32:99:d6:b6:51:9f:97:b2:cf: 4f:66:50:4f:9e:3a:42:7b:e5:7a:65:19:a3:6c:d4: 23:f2:d4:bc:90:bc:c7:5a:ad:28:8e:51:3f:32:35: b5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:25:C4:F2:93:C9:96:A4:13:45:72:9E:7C:35:3C:3F:24:FE:1C:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f00e4241-0f1d-3acd-bdf2-7ea798ffded2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:d7:d0:67:70:11:ce:37:ee:04:5d:51:14:2d:1e:7b:68:45: 8f:6d:2b:5c:73:f0:62:02:6d:99:0b:3b:ad:f7:ca:c0:7c:6f: 7e:d5:18:e7:de:83:2d:7e:31:47:f6:7e:be:84:53:85:2a:18: f2:b5:36:5e:71:f9:16:9b:7a:d8:fe:6d:c4:dd:a5:05:ab:5e: cc:7a:3d:82:8d:8c:a7:f7:aa:c5:e2:17:dd:14:56:a5:a7:a0: 25:c2:e8:07:44:9a:3d:30:d9:ef:0a:b3:d3:15:98:d5:f2:3c: 72:25:fe:23:a9:7d:b0:24:dd:bc:ac:6a:7c:86:6e:fb:bf:9d: 45:09:2e:2b:4c:67:0e:e0:a1:74:42:e0:02:17:e2:e2:52:b6: d7:32:5a:83:89:a7:1e:02:02:3b:91:b0:1a:a6:d8:07:58:38: 54:9e:7e:96:31:62:9d:db:7c:53:47:9a:cd:6d:94:4b:e8:14: c4:25:78:7c:95:7f:90:e5:0c:28:46:7c:89:39:07:83:ce:a9: ed:76:c4:11:22:1a:ed:db:51:0c:73:23:c5:19:3a:6e:0c:7b: fd:2b:66:35:a3:23:03:6f:2a:86:5a:24:c6:b3:82:f4:86:bb: 1e:a4:d5:88:1f:d6:56:b4:63:b1:e5:cf:0a:bd:28:e1:2f:fe: 76:80:c3:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJSDX8451YGUji4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk YTljMjcxZjEtZWM4Zi00ODRkLWFmNGEtNGEyOTU2NzcxNWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApErgIZFtz0LSG/L9sck87bUd0fvD0kmL7T6F XnAUZHNRtZwBeViKqlI8JffMiL519jYYuZ3HcZwLrMlbsZ8gkf4altrTSkHzkQwF o4Uv0vxkdHRdxfMAzFAcvYEntJZiyKfY1PluUq8Abl2zJkNmNAG8qqd//LjEORHn blzlqjC7DGD5jxtHcVwUKFeiS3U1hMvoZSYWVrD/XySYKeSV6URvchOMKk9Lp8uH vPobfj1kRBwEfbV22KNU6Uvjm+aJQvpJ4PhTxEYIBPxnsrgYKJ4ERqEn0AAymda2 UZ+Xss9PZlBPnjpCe+V6ZRmjbNQj8tS8kLzHWq0ojlE/MjW1YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0lxPKTyZakE0Vynnw1PD8k/hyKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjAwZTQyNDEtMGYxZC0z YWNkLWJkZjItN2VhNzk4ZmZkZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ARMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3X0GdwEc437gRdURQtHntoRY9tK1xz8GICbZkLO633ysB8b37VGOfe gy1+MUf2fr6EU4UqGPK1Nl5x+Rabetj+bcTdpQWrXsx6PYKNjKf3qsXiF90UVqWn oCXC6AdEmj0w2e8Ks9MVmNXyPHIl/iOpfbAk3bysanyGbvu/nUUJLitMZw7goXRC 4AIX4uJSttcyWoOJpx4CAjuRsBqm2AdYOFSefpYxYp3bfFNHms1tlEvoFMQleHyV f5DlDChGfIk5B4POqe12xBEiGu3bUQxzI8UZOm4Me/0rZjWjIwNvKoZaJMazgvSG ux6k1Ygf1la0Y7Hlzwq9KOEv/naAw0A= -----END CERTIFICATE-----Generated at Sat Jun 7 14:18:33 2025 by rpki-client