$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f40f43c6-4308-3937-9c5e-2ffc77b862df.roa File: f40f43c6-4308-3937-9c5e-2ffc77b862df.roa (raw, json) Hash identifier: NyxDVzLXkrQ9d7VTOsRI6Xx2DS/+GigJMaLDf4/GF2o= Subject key identifier: 84:9A:C2:8A:D5:8B:5A:39:71:3E:02:56:2F:9F:25:3E:B6:82:78:D9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849E2251EC90187F4C01046F800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f40f43c6-4308-3937-9c5e-2ffc77b862df.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 35994 IP address blocks: 23.207.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:1e:c9:01:87:f4:c0:10:46:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=3b9bd71a-c7d3-47d6-9566-312b4a6a946a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b0:af:23:e1:e7:51:46:f4:16:f5:92:f1:2b: 35:3a:3c:56:b7:53:3d:cc:97:eb:59:a4:ad:45:72: 0e:f0:65:47:06:f2:a9:d9:29:b6:bc:9e:85:70:84: 51:7d:51:8e:ec:c0:32:78:f6:59:f6:3e:67:20:2e: ed:78:0d:ca:99:f8:4f:f3:7f:2a:67:87:64:fa:f7: ef:2f:20:ab:88:ed:58:7b:a5:cd:bc:f6:ab:b3:ef: 11:64:83:45:73:1e:a5:9d:ec:38:bb:71:4a:9e:46: dd:ed:0a:41:2a:f1:c6:7a:a0:38:30:fa:3e:e1:fd: d2:8b:a9:dd:47:ea:84:a5:de:b2:f6:42:6c:3f:d5: b9:00:22:df:aa:73:9c:fc:25:54:fd:ab:8b:8d:65: 78:88:83:1c:5f:67:01:95:e5:b3:33:cc:74:32:3f: fd:83:26:d7:47:74:0f:32:39:fc:09:90:63:0b:2c: c5:7a:64:3c:4f:15:4f:d4:c5:b7:1c:24:2e:ab:62: 6e:16:0c:84:c8:67:fe:9b:28:b7:61:c4:90:8e:9b: f5:b1:cf:47:14:f7:3d:2c:d0:4b:c2:d6:47:1c:2d: fb:16:67:dd:04:a6:66:c5:77:d9:36:73:dc:0b:02: 48:a0:0c:aa:cf:8f:73:26:30:9a:43:13:1b:ab:0f: 27:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9A:C2:8A:D5:8B:5A:39:71:3E:02:56:2F:9F:25:3E:B6:82:78:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f40f43c6-4308-3937-9c5e-2ffc77b862df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:59:91:e6:e2:1c:80:c0:59:12:8d:5f:80:30:64:e4:c5:30: 13:52:c7:97:70:2a:5c:0e:f5:6e:cb:d1:1b:5a:70:cc:ce:84: cd:62:cd:29:f1:b9:f1:15:08:b5:45:a5:22:7f:9a:c3:f9:94: d6:37:bf:ec:e0:8c:51:ad:25:23:51:2e:96:68:f4:d0:99:2a: a4:ca:22:d6:91:c4:af:ed:5b:de:4a:5e:95:a7:c4:8c:91:17: 47:22:41:35:fe:c4:bd:b8:fc:90:46:45:c9:d5:53:72:bf:35: 59:b3:ee:23:5e:5b:91:1f:1c:87:e2:b2:11:2e:f8:8a:d9:78: 57:9b:14:55:25:7c:20:06:0d:88:f0:e8:5c:d2:f6:13:d0:19: c5:42:55:af:13:d5:0b:25:a9:92:34:ea:b0:0e:a3:99:9c:4b: 2a:7e:15:9d:e4:1e:47:14:d8:2e:b5:53:43:4b:41:d0:2a:68: ff:3f:af:14:e4:64:c6:01:c1:af:85:a9:8d:a5:40:f8:1e:2b: d6:e3:a5:78:5a:19:85:10:d6:06:7d:c2:0e:30:a6:26:df:0c: 2d:1f:f1:f9:b4:3d:ed:f3:28:00:8e:dc:dd:43:b4:73:e4:bf: a3:d8:b1:a2:2b:3a:c9:cd:8b:52:11:81:c2:87:bc:2a:67:8a: e6:d3:56:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJR7JAYf0wBBG+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk M2I5YmQ3MWEtYzdkMy00N2Q2LTk1NjYtMzEyYjRhNmE5NDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrCvI+HnUUb0FvWS8Ss1OjxWt1M9zJfrWaSt RXIO8GVHBvKp2Sm2vJ6FcIRRfVGO7MAyePZZ9j5nIC7teA3KmfhP838qZ4dk+vfv LyCriO1Ye6XNvPars+8RZINFcx6lnew4u3FKnkbd7QpBKvHGeqA4MPo+4f3Si6nd R+qEpd6y9kJsP9W5ACLfqnOc/CVU/auLjWV4iIMcX2cBleWzM8x0Mj/9gybXR3QP Mjn8CZBjCyzFemQ8TxVP1MW3HCQuq2JuFgyEyGf+myi3YcSQjpv1sc9HFPc9LNBL wtZHHC37FmfdBKZmxXfZNnPcCwJIoAyqz49zJjCaQxMbqw8nWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISaworVi1o5cT4CVi+fJT62gnjZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjQwZjQzYzYtNDMwOC0z OTM3LTljNWUtMmZmYzc3Yjg2MmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBZkebiHIDAWRKNX4AwZOTFMBNSx5dwKlwO9W7L0RtacMzOhM1izSnx ufEVCLVFpSJ/msP5lNY3v+zgjFGtJSNRLpZo9NCZKqTKItaRxK/tW95KXpWnxIyR F0ciQTX+xL24/JBGRcnVU3K/NVmz7iNeW5EfHIfishEu+IrZeFebFFUlfCAGDYjw 6FzS9hPQGcVCVa8T1QslqZI06rAOo5mcSyp+FZ3kHkcU2C61U0NLQdAqaP8/rxTk ZMYBwa+FqY2lQPgeK9bjpXhaGYUQ1gZ9wg4wpibfDC0f8fm0Pe3zKACO3N1DtHPk v6PYsaIrOsnNi1IRgcKHvCpniubTVnY= -----END CERTIFICATE-----Generated at Sat Jun 7 14:28:16 2025 by rpki-client