$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08825d7a-816d-305d-8e50-8167b3827d91.roa File: 08825d7a-816d-305d-8e50-8167b3827d91.roa (raw, json) Hash identifier: DfFOLJ+YFVsp8otAdWYqB1cJRUuXdrVpCNmvJZw5ibU= Subject key identifier: D3:B7:61:0E:AD:2F:12:76:60:DA:30:AE:9C:9F:6A:46:DA:06:66:17 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849B57A2D0F2ADD9EC1F0682900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08825d7a-816d-305d-8e50-8167b3827d91.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 20940 IP address blocks: 23.221.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:2d:0f:2a:dd:9e:c1:f0:68:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=bfe2aae0-6025-4c74-9469-746a96147cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:20:d1:37:28:2f:62:a9:f4:02:10:c6:d8:e8: 7a:3a:2e:d2:42:63:5e:94:bc:60:3b:f3:dd:ed:23: 06:8a:dd:47:89:25:69:7a:fd:c2:75:a0:93:83:9d: 7d:1c:50:dc:76:90:64:04:93:90:7d:e3:81:22:f5: 8f:1e:31:58:e9:ba:9a:6b:02:9d:2a:39:6c:df:8f: 9f:68:02:1f:36:bb:13:94:3f:52:ee:f0:57:9b:08: 85:c3:92:6a:12:e8:e2:12:e8:6c:a3:5e:3f:f3:ab: dc:d0:4e:3f:f0:ec:f2:43:49:b1:ca:56:b9:a7:22: 89:42:9c:ee:f4:52:7e:b6:6d:f5:19:dc:94:df:83: b1:09:e9:31:24:9c:07:75:eb:61:c9:c9:b9:3d:a7: 13:f0:29:b3:ba:ab:8d:03:0b:04:d7:5f:09:43:67: 05:70:9c:fc:ce:dd:1a:9d:d1:18:5b:b8:37:d2:c3: 98:5b:5c:a0:6f:9c:70:40:46:d7:25:c5:24:b4:9f: f9:21:37:bd:65:69:29:2e:3b:9c:f5:1b:8a:01:60: a4:ce:a1:b2:fe:54:b3:26:2a:aa:db:ac:6a:e8:a9: 50:f0:12:01:86:8a:64:bd:b7:bb:20:a6:da:d5:ea: 90:e6:98:7b:59:5a:1a:5b:a4:af:7a:e9:69:92:de: fc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B7:61:0E:AD:2F:12:76:60:DA:30:AE:9C:9F:6A:46:DA:06:66:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08825d7a-816d-305d-8e50-8167b3827d91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:75:85:da:8b:b9:10:1e:2d:df:ab:4e:05:b3:a7:c7:d9:5c: 74:12:2d:0f:9d:5d:5e:11:59:64:c0:21:dd:12:88:24:51:55: f6:a1:fa:01:77:3b:c3:e5:3f:00:c1:a8:d2:09:f1:32:47:3a: ff:86:c0:e9:19:39:39:b9:a5:1f:da:0a:8f:20:f2:78:58:d8: e1:e3:49:52:b4:4f:77:e4:6d:9f:aa:db:26:9f:ca:31:eb:93: 5c:2a:57:55:6a:84:23:b7:75:cd:84:9f:cc:e4:ca:9b:ea:4d: 60:6a:d8:3f:3a:b8:e9:14:6f:c8:d2:52:8f:2e:e7:7f:68:35: bc:1b:02:26:f2:33:58:ed:2d:8a:0a:b0:3a:e7:8f:28:6d:6d: 86:e2:df:4b:04:48:bb:c4:34:14:7d:20:20:f6:c2:6b:07:da: ed:87:94:bb:38:78:e8:6b:c3:19:3b:24:5d:68:27:38:6b:3c: 11:0e:e0:a2:11:28:e7:bd:09:3f:63:eb:40:31:68:3b:66:d3: 83:be:22:27:82:7b:d4:92:08:c0:43:06:77:b6:9d:25:12:1f: b7:2b:be:3e:25:45:5d:7d:93:46:c1:70:ab:e5:f4:03:08:32: d7:67:fb:d8:ea:dd:a5:6f:c7:2a:ed:ce:49:45:0e:1c:3b:5d: 1e:08:5c:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ei0PKt2ewfBoKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk YmZlMmFhZTAtNjAyNS00Yzc0LTk0NjktNzQ2YTk2MTQ3Y2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiDRNygvYqn0AhDG2Oh6Oi7SQmNelLxgO/Pd 7SMGit1HiSVpev3CdaCTg519HFDcdpBkBJOQfeOBIvWPHjFY6bqaawKdKjls34+f aAIfNrsTlD9S7vBXmwiFw5JqEujiEuhso14/86vc0E4/8OzyQ0mxyla5pyKJQpzu 9FJ+tm31GdyU34OxCekxJJwHdethycm5PacT8CmzuquNAwsE118JQ2cFcJz8zt0a ndEYW7g30sOYW1ygb5xwQEbXJcUktJ/5ITe9ZWkpLjuc9RuKAWCkzqGy/lSzJiqq 26xq6KlQ8BIBhopkvbe7IKba1eqQ5ph7WVoaW6Sveulpkt78OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNO3YQ6tLxJ2YNowrpyfakbaBmYXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDg4MjVkN2EtODE2ZC0z MDVkLThlNTAtODE2N2IzODI3ZDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF90pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF11hdqLuRAeLd+rTgWzp8fZXHQSLQ+dXV4RWWTAId0SiCRRVfah+gF3 O8PlPwDBqNIJ8TJHOv+GwOkZOTm5pR/aCo8g8nhY2OHjSVK0T3fkbZ+q2yafyjHr k1wqV1VqhCO3dc2En8zkypvqTWBq2D86uOkUb8jSUo8u539oNbwbAibyM1jtLYoK sDrnjyhtbYbi30sESLvENBR9ICD2wmsH2u2HlLs4eOhrwxk7JF1oJzhrPBEO4KIR KOe9CT9j60AxaDtm04O+IieCe9SSCMBDBne2nSUSH7crvj4lRV19k0bBcKvl9AMI Mtdn+9jq3aVvxyrtzklFDhw7XR4IXEo= -----END CERTIFICATE-----Generated at Sat May 10 05:10:02 2025 by rpki-client