$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10a9c0fc-e510-356b-9331-3b41a9ce1e2e.roa File: 10a9c0fc-e510-356b-9331-3b41a9ce1e2e.roa (raw, json) Hash identifier: ho2ZfGpMd3iY3WigUuj6KANMWQfIVEFLNEztZD/L1iA= Subject key identifier: EC:2F:BD:57:45:51:6F:E3:0A:3D:F0:F9:3C:13:29:7D:9F:12:21:FA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4AFF15C48B7D33B7E7760 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10a9c0fc-e510-356b-9331-3b41a9ce1e2e.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.221.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:af:f1:5c:48:b7:d3:3b:7e:77:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=88f71c67-77b1-4337-8d40-54c0b4d35cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:22:b5:a7:39:d7:77:39:9f:35:9e:31:d2:14: 69:9a:d1:64:17:ed:32:9c:49:a5:5b:f1:bb:9b:71: 10:02:e4:8d:48:d5:78:63:af:d4:c3:3c:b2:b4:55: b2:7c:96:fe:78:53:3b:de:11:f6:f6:77:06:b1:e9: a9:f9:15:3b:d3:7a:8c:d9:27:18:ce:fe:3f:a5:87: e1:14:12:bd:11:27:b3:e7:7d:a9:86:9a:42:93:7e: ec:d8:45:45:a0:b8:da:22:43:51:9c:a3:4a:e4:ef: 46:4f:58:71:d8:6b:9f:04:3d:a1:46:21:30:ec:b5: 7e:80:9c:15:7d:29:00:02:17:28:c4:23:8d:9c:61: 15:cf:3f:2b:e2:db:cb:ca:02:e7:7c:cc:cc:51:f3: 27:50:37:93:e4:45:12:12:1c:a5:78:95:e1:e3:45: 06:9b:4e:b4:e0:24:73:04:ed:2e:2b:af:48:60:35: 95:12:37:42:94:af:63:22:dc:7f:5c:59:67:bd:b8: 25:3b:e9:f2:5a:95:d9:f0:9f:6b:ad:4c:ff:68:bb: ed:7b:5b:5a:65:5b:d4:5c:7e:b8:53:cf:05:d6:de: 96:49:d0:da:09:69:41:4f:f9:9a:06:6e:63:d9:fb: c2:91:b0:98:67:09:e3:28:7d:b2:60:cb:46:d0:70: c7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2F:BD:57:45:51:6F:E3:0A:3D:F0:F9:3C:13:29:7D:9F:12:21:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10a9c0fc-e510-356b-9331-3b41a9ce1e2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:02:0d:3b:30:20:7a:c9:e3:20:7d:1a:0a:0e:89:eb:b3:83: 1f:9e:6b:4f:c4:ee:01:80:65:34:be:96:bb:e5:a4:fd:92:ad: 8d:03:3a:f4:9a:ae:78:61:81:88:e8:80:60:73:8c:81:fb:3e: de:7b:74:09:26:24:80:69:5f:f0:d9:21:0a:84:ff:87:db:82: a8:5c:b6:d8:1c:2d:f8:79:1d:11:5f:a2:e8:c9:dc:df:b4:95: 69:ef:b5:56:32:31:83:31:89:fa:8b:1d:a2:dc:85:e8:8a:1e: c2:5d:d0:17:d4:d6:0f:c6:1a:d7:13:b1:7d:c7:2e:b7:10:03: 63:2e:c7:0c:26:ef:0b:5b:72:c4:96:27:f8:70:fe:8d:ec:84: 82:0c:b5:ac:3d:85:84:18:d9:6a:92:81:c9:39:10:3c:fb:aa: de:42:dd:19:45:44:d6:1a:67:57:aa:5a:cc:b0:1d:db:48:32: a5:49:ec:58:10:f5:d7:77:88:26:20:3e:41:93:f3:d2:d4:02: 60:e5:38:1e:5a:38:b4:28:b3:ca:42:55:46:20:b4:34:40:4d: 6c:f8:29:de:d4:46:28:57:bb:45:c9:74:a1:28:91:10:b7:3e: 58:5a:42:25:b7:93:06:41:a1:e6:3b:7c:32:ff:7d:99:ef:e2: 7a:8d:f1:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtK/xXEi30zt+d2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ODhmNzFjNjctNzdiMS00MzM3LThkNDAtNTRjMGI0ZDM1Y2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSK1pznXdzmfNZ4x0hRpmtFkF+0ynEmlW/G7 m3EQAuSNSNV4Y6/UwzyytFWyfJb+eFM73hH29ncGsemp+RU703qM2ScYzv4/pYfh FBK9ESez532phppCk37s2EVFoLjaIkNRnKNK5O9GT1hx2GufBD2hRiEw7LV+gJwV fSkAAhcoxCONnGEVzz8r4tvLygLnfMzMUfMnUDeT5EUSEhyleJXh40UGm0604CRz BO0uK69IYDWVEjdClK9jItx/XFlnvbglO+nyWpXZ8J9rrUz/aLvte1taZVvUXH64 U88F1t6WSdDaCWlBT/maBm5j2fvCkbCYZwnjKH2yYMtG0HDHPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwvvVdFUW/jCj3w+TwTKX2fEiH6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTBhOWMwZmMtZTUxMC0z NTZiLTkzMzEtM2I0MWE5Y2UxZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF91IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8CDTswIHrJ4yB9GgoOieuzgx+ea0/E7gGAZTS+lrvlpP2SrY0DOvSa rnhhgYjogGBzjIH7Pt57dAkmJIBpX/DZIQqE/4fbgqhcttgcLfh5HRFfoujJ3N+0 lWnvtVYyMYMxifqLHaLcheiKHsJd0BfU1g/GGtcTsX3HLrcQA2Muxwwm7wtbcsSW J/hw/o3shIIMtaw9hYQY2WqSgck5EDz7qt5C3RlFRNYaZ1eqWsywHdtIMqVJ7FgQ 9dd3iCYgPkGT89LUAmDlOB5aOLQos8pCVUYgtDRATWz4Kd7URihXu0XJdKEokRC3 PlhaQiW3kwZBoeY7fDL/fZnv4nqN8V8= -----END CERTIFICATE-----Generated at Mon May 5 17:47:19 2025 by rpki-client