$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/100a6100-3fa2-3242-a041-39e01be55093.roa File: 100a6100-3fa2-3242-a041-39e01be55093.roa (raw, json) Hash identifier: 0+AOF2JIdVgizqpWkQThtT0eAO7XcRH/60qd7GTUP+s= Subject key identifier: AE:60:02:D8:A8:A1:A7:27:B6:E0:56:7A:0F:76:39:53:94:0C:5A:E8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849A8E9E56A8F72812B1CB16A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/100a6100-3fa2-3242-a041-39e01be55093.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.218.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:e5:6a:8f:72:81:2b:1c:b1:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=626c1968-e892-459c-8d09-d4a5756a160c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3f:45:ec:87:4b:23:26:fb:cc:49:83:2d:20: 3e:9d:24:8f:9f:41:2f:87:fa:5e:07:e2:f7:7a:ee: 4d:2a:7d:c4:b7:15:82:34:51:44:4e:f9:f5:d2:7f: b5:6f:40:eb:ae:79:ae:db:b2:c2:9c:48:0b:f7:94: fb:6f:32:b4:f0:85:d6:09:2c:49:bf:6b:59:17:0c: f6:d1:de:d9:74:ae:45:48:5a:7d:f6:77:22:2b:ea: 3f:9f:4c:cd:db:a5:81:db:ed:e3:a6:9c:fe:e8:0d: b2:4a:fe:81:10:7e:97:43:e7:c0:b2:e0:16:6a:e1: 07:12:f5:89:ed:3d:09:a8:c3:1d:83:35:7d:78:2b: fd:7f:e3:4d:2f:c5:80:e2:41:cb:04:0e:3d:42:76: e2:70:41:c3:0b:0b:73:da:f4:ce:3b:f2:26:b0:02: c0:4a:74:bd:4d:08:2b:aa:bc:61:da:7a:69:81:75: 6a:67:5e:d7:f6:c4:60:68:2e:b3:50:40:7c:3a:f7: 08:be:03:fd:75:e1:35:e3:75:97:8c:49:10:4d:fb: cc:21:88:22:72:f2:52:5e:a8:c2:21:8e:f8:97:18: 80:c6:2d:85:ab:ae:ab:66:5e:fa:76:2b:7e:20:6a: 94:73:a0:57:bb:16:c1:a1:7b:4e:d3:db:aa:66:45: f3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:60:02:D8:A8:A1:A7:27:B6:E0:56:7A:0F:76:39:53:94:0C:5A:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/100a6100-3fa2-3242-a041-39e01be55093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:df:b6:fc:79:12:fb:77:f1:5d:83:af:73:3f:9c:98:ef:13: af:fd:a9:31:81:c6:36:35:cf:2f:df:e8:87:90:a3:0e:c8:ae: 5a:31:85:c4:92:1c:42:19:50:25:51:6f:3f:96:65:d9:f1:a1: 2a:b7:e1:b6:42:66:69:c9:b3:3d:b1:56:38:e4:79:33:54:f4: d8:0f:4f:19:17:de:7a:8f:69:17:44:4e:f1:09:d7:8e:24:87: 7e:b1:53:3b:16:87:de:04:71:c2:94:8e:66:f8:c6:87:f4:b8: a8:8e:e0:9a:c6:f6:af:e1:f2:08:f0:2b:71:e5:d5:b3:11:3a: 69:3b:53:66:76:a3:a9:14:b4:35:bf:87:27:7d:97:f3:5c:c6: 82:38:11:79:8b:0a:46:6e:e4:b3:de:58:73:95:8a:79:24:32: 8c:ef:04:9c:ac:ad:67:b6:fe:07:b1:00:3e:93:fb:b1:5e:f3: 3e:0c:a0:a2:78:3c:60:db:54:94:84:95:43:b4:e6:a4:e2:cf: ed:28:a4:01:42:d1:92:61:d8:31:a3:3e:b9:d7:16:a2:c1:30: eb:e5:61:b7:8b:4c:1e:43:8e:16:a7:c0:dd:67:f9:55:f4:a4: 7d:a1:4d:d5:ff:fd:07:90:e2:50:c4:5f:b0:8b:b2:5f:09:5a: 45:a6:bc:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6eVqj3KBKxyxagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk NjI2YzE5NjgtZTg5Mi00NTljLThkMDktZDRhNTc1NmExNjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT9F7IdLIyb7zEmDLSA+nSSPn0Evh/peB+L3 eu5NKn3EtxWCNFFETvn10n+1b0Drrnmu27LCnEgL95T7bzK08IXWCSxJv2tZFwz2 0d7ZdK5FSFp99nciK+o/n0zN26WB2+3jppz+6A2ySv6BEH6XQ+fAsuAWauEHEvWJ 7T0JqMMdgzV9eCv9f+NNL8WA4kHLBA49QnbicEHDCwtz2vTOO/ImsALASnS9TQgr qrxh2nppgXVqZ17X9sRgaC6zUEB8OvcIvgP9deE143WXjEkQTfvMIYgicvJSXqjC IY74lxiAxi2Fq66rZl76dit+IGqUc6BXuxbBoXtO09uqZkXzuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5gAtiooacntuBWeg92OVOUDFroMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTAwYTYxMDAtM2ZhMi0z MjQyLWEwNDEtMzllMDFiZTU1MDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9rcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHftvx5Evt38V2Dr3M/nJjvE6/9qTGBxjY1zy/f6IeQow7IrloxhcSS HEIZUCVRbz+WZdnxoSq34bZCZmnJsz2xVjjkeTNU9NgPTxkX3nqPaRdETvEJ144k h36xUzsWh94EccKUjmb4xof0uKiO4JrG9q/h8gjwK3Hl1bMROmk7U2Z2o6kUtDW/ hyd9l/NcxoI4EXmLCkZu5LPeWHOVinkkMozvBJysrWe2/gexAD6T+7Fe8z4MoKJ4 PGDbVJSElUO05qTiz+0opAFC0ZJh2DGjPrnXFqLBMOvlYbeLTB5DjhanwN1n+VX0 pH2hTdX//QeQ4lDEX7CLsl8JWkWmvKQ= -----END CERTIFICATE-----Generated at Fri May 9 18:45:12 2025 by rpki-client