$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f63a7ef8-b075-3ab3-a26b-7ddd7072e9f9.roa File: f63a7ef8-b075-3ab3-a26b-7ddd7072e9f9.roa (raw, json) Hash identifier: LxvGtR/IBj1oPsMUcsJlc7PguZlc6nxNMBTEbRc1R4w= Subject key identifier: 22:A5:6D:07:B8:EF:34:C0:DE:9A:72:56:0F:CF:C5:B3:79:DE:2A:99 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BE863C2B6741F64A31425C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f63a7ef8-b075-3ab3-a26b-7ddd7072e9f9.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.217.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:3c:2b:67:41:f6:4a:31:42:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=335d4040-d330-4bdd-a763-68c1c0804916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cd:66:e0:83:d2:d6:e1:81:68:30:03:04:c3: c1:aa:3e:6a:e6:b7:6d:e6:92:2a:68:57:53:51:12: c8:61:13:69:2d:85:37:db:e2:18:c3:e0:c3:8a:ce: 0c:97:fc:46:18:bd:0a:4a:dc:c6:a7:41:29:71:b4: b2:db:ab:ad:b9:48:83:c9:19:eb:e3:e4:dd:41:a7: 35:c5:bf:aa:fb:01:79:fe:da:7d:66:2e:06:47:b0: 65:a8:7e:3f:00:e5:a7:1d:6a:40:26:eb:55:be:be: b7:fb:bb:11:00:80:47:52:40:2c:e9:bf:e5:25:ab: eb:32:6e:da:bd:e0:28:3e:09:5b:b0:22:cb:53:20: 2f:00:47:0b:d2:c4:d5:6f:8d:a6:69:1c:85:54:fc: 58:77:03:a4:7b:b3:f0:4f:68:ab:46:60:93:40:87: bd:6d:ff:69:2c:d3:48:6d:5a:7c:a5:2e:7f:e5:e8: 4d:a5:e4:ea:af:0c:c8:15:1f:35:a3:59:45:04:2f: 46:a7:41:e9:4b:51:94:47:61:ca:ea:3b:cd:7a:f8: 27:34:0a:b7:2a:1d:d7:70:63:3b:aa:ef:54:f7:4a: 4d:4b:95:07:9d:73:cb:78:95:b4:fd:12:83:97:4d: e8:49:44:28:a0:5d:c7:b7:a4:e6:d5:54:d9:a6:0a: 5e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A5:6D:07:B8:EF:34:C0:DE:9A:72:56:0F:CF:C5:B3:79:DE:2A:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f63a7ef8-b075-3ab3-a26b-7ddd7072e9f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:0f:b9:4b:94:e4:b7:25:c2:67:40:9c:d0:07:1f:c2:04:59: 8a:1f:c9:da:40:a1:80:45:1a:42:be:04:01:ee:05:09:8c:85: 2f:6a:12:85:5c:78:a5:56:6a:24:11:af:72:48:17:df:ac:c9: fa:df:87:44:5e:05:40:25:d7:67:c9:d5:bc:c2:05:62:9f:5e: 76:0c:50:ac:55:80:04:c4:cd:ae:13:0f:43:eb:d7:3e:f6:76: b7:75:63:fd:10:32:3e:30:70:78:a8:74:53:66:c5:86:06:f9: 69:ca:3f:17:41:2a:ca:52:49:77:78:73:bb:ab:63:1b:6c:6f: 88:19:42:c0:f4:bd:68:a2:80:4d:5a:be:20:07:21:6c:84:e5: f9:68:6d:54:c1:17:c3:6c:a4:24:d2:e3:4d:e6:bd:9b:2a:9a: 0f:1b:1b:a6:d4:63:44:98:da:92:2f:42:27:7c:21:f3:20:e4: 17:ed:68:d5:ff:9c:90:94:76:3f:f5:13:2f:4f:00:30:64:c9: 40:34:5a:a5:51:75:82:6e:d5:d6:d9:79:75:e2:8a:1c:e6:37: a3:49:0b:ee:47:f7:09:40:0a:1e:dd:da:b4:1d:95:00:31:f3: 86:63:15:40:9d:9c:a4:57:5a:8b:4e:cd:f3:02:b0:66:ea:f1: 21:0f:d1:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hjwrZ0H2SjFCXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk MzM1ZDQwNDAtZDMzMC00YmRkLWE3NjMtNjhjMWMwODA0OTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs1m4IPS1uGBaDADBMPBqj5q5rdt5pIqaFdT URLIYRNpLYU32+IYw+DDis4Ml/xGGL0KStzGp0EpcbSy26utuUiDyRnr4+TdQac1 xb+q+wF5/tp9Zi4GR7BlqH4/AOWnHWpAJutVvr63+7sRAIBHUkAs6b/lJavrMm7a veAoPglbsCLLUyAvAEcL0sTVb42maRyFVPxYdwOke7PwT2irRmCTQIe9bf9pLNNI bVp8pS5/5ehNpeTqrwzIFR81o1lFBC9Gp0HpS1GUR2HK6jvNevgnNAq3Kh3XcGM7 qu9U90pNS5UHnXPLeJW0/RKDl03oSUQooF3Ht6Tm1VTZpgpeYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKlbQe47zTA3ppyVg/PxbN53iqZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjYzYTdlZjgtYjA3NS0z YWIzLWEyNmItN2RkZDcwNzJlOWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9mOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgPuUuU5LclwmdAnNAHH8IEWYofydpAoYBFGkK+BAHuBQmMhS9qEoVc eKVWaiQRr3JIF9+syfrfh0ReBUAl12fJ1bzCBWKfXnYMUKxVgATEza4TD0Pr1z72 drd1Y/0QMj4wcHiodFNmxYYG+WnKPxdBKspSSXd4c7urYxtsb4gZQsD0vWiigE1a viAHIWyE5flobVTBF8NspCTS403mvZsqmg8bG6bUY0SY2pIvQid8IfMg5BftaNX/ nJCUdj/1Ey9PADBkyUA0WqVRdYJu1dbZeXXiihzmN6NJC+5H9wlACh7d2rQdlQAx 84ZjFUCdnKRXWotOzfMCsGbq8SEP0aw= -----END CERTIFICATE-----Generated at Sat Apr 5 10:56:11 2025 by rpki-client