$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/143ff501-dd75-3ce0-b814-efa6331916a5.roa File: 143ff501-dd75-3ce0-b814-efa6331916a5.roa (raw, json) Hash identifier: rQ1Uci0KrnVgkXiCpTKzrGcvkHJF7IRaA5gVhrSft7A= Subject key identifier: 2A:62:A8:C8:34:B9:67:5F:9F:3F:60:A6:CF:E3:C0:C4:48:77:2E:44 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B2C1D04382A10525B4B0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/143ff501-dd75-3ce0-b814-efa6331916a5.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 16625 IP address blocks: 23.223.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b2:c1:d0:43:82:a1:05:25:b4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=7cf693a6-3c07-4856-ae25-524d569f1f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c1:f9:15:7b:47:d1:d2:af:28:53:2e:9b:03: a7:13:3e:af:0c:2a:d4:4d:ae:1d:8d:26:c4:b3:e8: 5f:e8:b5:a0:ad:26:f0:1b:20:7b:41:dd:d8:8d:f7: 75:ad:91:59:bb:03:fe:48:00:68:86:fe:8c:04:f5: f0:c9:b7:22:e7:b5:6a:a2:46:f8:b6:74:dd:ab:86: 08:0f:5b:06:7c:4c:13:53:80:83:b3:95:35:31:9a: 87:75:d9:25:f9:8e:1e:e3:18:77:35:92:df:fb:58: f6:8b:e6:fd:e1:c5:d8:f1:28:d7:2d:e8:c8:bf:a8: 28:c8:5b:65:22:95:96:96:db:b8:1c:11:08:ea:ba: 01:c1:a2:49:67:2b:be:3f:16:92:70:5a:69:ca:bf: 83:e1:ce:53:f2:a9:16:f2:07:52:31:c6:4e:05:39: 05:99:59:be:b5:48:3e:07:b7:bc:58:f7:7e:35:53: f6:c1:a4:3b:5e:a7:74:ad:e7:aa:e9:f6:29:4e:83: d0:55:3f:40:b4:ac:50:ac:f7:63:de:b1:b6:0c:20: bd:3a:44:76:d9:a3:e3:54:1e:04:24:f4:62:7d:8a: c1:b3:f5:47:de:3f:32:25:17:f3:f7:48:73:6a:73: 15:0f:35:3a:fa:f1:11:36:1b:21:80:76:c4:a0:05: 1f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:62:A8:C8:34:B9:67:5F:9F:3F:60:A6:CF:E3:C0:C4:48:77:2E:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/143ff501-dd75-3ce0-b814-efa6331916a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:df:f2:b8:96:fc:9e:19:1c:db:a3:d4:c1:b3:c2:4a:21:f4: 10:fe:43:ce:59:1b:29:1c:6b:8b:8e:77:35:54:40:c6:41:f5: 89:7b:4d:42:f4:9d:7c:3c:ab:c1:bd:45:eb:31:65:7d:45:66: 64:4c:83:1c:ca:77:98:00:1a:9d:3d:e5:13:e7:15:2a:24:38: 5d:eb:82:5c:5c:c7:dd:6d:4f:6c:f7:5f:e2:bc:08:32:ee:c4: b4:94:e1:18:ab:b3:2c:25:fc:5c:41:88:2e:12:63:ea:bc:77: e9:c9:6d:e3:94:0f:db:00:c0:e8:b2:a8:53:20:23:c0:ad:1d: 3c:99:12:ab:81:e6:8a:19:6f:98:5e:c0:d2:a4:52:7f:3f:30: e2:ad:99:e8:81:92:72:88:7b:44:2f:90:37:f4:a4:e0:5a:51: db:6c:1d:92:fe:80:7e:9f:ad:db:8c:41:74:9d:e6:c1:31:41: 33:4b:76:fb:73:7c:b7:3b:fe:1f:b7:1c:6c:74:15:5f:06:b4: 15:39:ca:05:9a:83:75:c7:b6:4d:64:ab:84:04:0d:70:cc:5b: 0a:1a:7d:0e:b2:55:78:ea:c6:e8:5e:30:aa:81:0e:f2:31:c7: 15:7f:cd:e7:c8:ee:c4:b4:a1:c4:2b:b7:de:1c:d4:da:3a:b5: 6d:55:4a:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLLB0EOCoQUltLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk N2NmNjkzYTYtM2MwNy00ODU2LWFlMjUtNTI0ZDU2OWYxZjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMH5FXtH0dKvKFMumwOnEz6vDCrUTa4djSbE s+hf6LWgrSbwGyB7Qd3Yjfd1rZFZuwP+SABohv6MBPXwybci57Vqokb4tnTdq4YI D1sGfEwTU4CDs5U1MZqHddkl+Y4e4xh3NZLf+1j2i+b94cXY8SjXLejIv6goyFtl IpWWltu4HBEI6roBwaJJZyu+PxaScFppyr+D4c5T8qkW8gdSMcZOBTkFmVm+tUg+ B7e8WPd+NVP2waQ7Xqd0reeq6fYpToPQVT9AtKxQrPdj3rG2DCC9OkR22aPjVB4E JPRifYrBs/VH3j8yJRfz90hzanMVDzU6+vERNhshgHbEoAUf7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpiqMg0uWdfnz9gps/jwMRIdy5EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTQzZmY1MDEtZGQ3NS0z Y2UwLWI4MTQtZWZhNjMzMTkxNmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF99QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzf8riW/J4ZHNuj1MGzwkoh9BD+Q85ZGykca4uOdzVUQMZB9Yl7TUL0 nXw8q8G9ResxZX1FZmRMgxzKd5gAGp095RPnFSokOF3rglxcx91tT2z3X+K8CDLu xLSU4Rirsywl/FxBiC4SY+q8d+nJbeOUD9sAwOiyqFMgI8CtHTyZEquB5ooZb5he wNKkUn8/MOKtmeiBknKIe0QvkDf0pOBaUdtsHZL+gH6frduMQXSd5sExQTNLdvtz fLc7/h+3HGx0FV8GtBU5ygWag3XHtk1kq4QEDXDMWwoafQ6yVXjqxuheMKqBDvIx xxV/zefI7sS0ocQrt94c1No6tW1VSkA= -----END CERTIFICATE-----Generated at Sun May 11 01:12:19 2025 by rpki-client