$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22e666b7-b4f8-3bc0-aca0-e3e65e46187a.roa File: 22e666b7-b4f8-3bc0-aca0-e3e65e46187a.roa (raw, json) Hash identifier: Lr0AnTMC6lYGk5LTmOci+4zNJ3rQ8v7674yQj/5tueQ= Subject key identifier: FE:EA:30:0B:A9:1A:E8:62:1D:5A:34:2B:02:55:60:70:43:1C:7C:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829DEE0CFBC8BEE4BF6E940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22e666b7-b4f8-3bc0-aca0-e3e65e46187a.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.222.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:de:e0:cf:bc:8b:ee:4b:f6:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=f5fa67df-4935-4379-abea-e4e43d3b47b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:53:70:7f:72:84:d2:f9:51:7d:1a:c5:ec:3a: fe:f9:60:f4:9e:36:02:5e:79:3f:e0:04:33:b9:24: 98:e4:4e:c1:b2:de:94:75:1a:cb:74:9e:f2:03:3b: 34:ff:5c:0b:63:44:2c:cb:db:22:55:bc:2a:80:f3: 6e:ad:24:5e:ad:d7:f5:f1:dd:eb:1e:ee:8e:da:3d: 0e:9d:d5:1a:eb:e5:a9:20:3d:58:34:84:1d:80:3f: 1e:db:f5:19:3b:f9:b0:58:5c:14:51:56:ce:1e:6a: 18:8c:14:e6:12:f1:9a:ed:b5:6c:92:21:fd:3c:7c: 49:bc:6c:95:e9:db:1a:73:ab:ee:ee:10:94:09:ca: 50:20:09:53:ac:fb:b7:89:f6:9e:70:c4:fb:53:cc: 5e:bd:34:0b:a4:88:8e:2c:da:a5:38:1d:d8:60:b1: 52:8c:c7:6b:9d:1e:bc:df:53:44:79:01:b0:c8:ce: 23:a5:f9:7e:c6:78:a4:0f:3d:d9:61:0e:03:de:5f: d9:e6:fb:1b:a6:14:85:22:6e:89:b2:39:6a:15:15: cc:26:8e:f1:64:24:c9:bd:6c:74:b2:26:e3:cc:89: 39:6c:0b:7f:ae:84:12:78:5d:52:d0:db:19:13:cb: a6:60:63:43:a1:d0:a0:04:a9:43:0a:2f:73:de:75: a9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EA:30:0B:A9:1A:E8:62:1D:5A:34:2B:02:55:60:70:43:1C:7C:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22e666b7-b4f8-3bc0-aca0-e3e65e46187a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:36:55:24:ef:f5:f4:01:3a:9c:bc:c4:35:82:95:bf:bb:6a: 22:2a:ce:f3:f9:e4:06:53:2e:7a:02:0c:7b:97:b0:c8:20:a6: 48:44:d2:9a:f5:86:f9:1e:26:d5:9b:ee:6c:85:89:7d:3f:9a: bf:75:7d:b2:66:b1:73:a6:97:cf:ec:8b:02:65:b0:9d:7b:ad: d4:39:43:f8:3b:ba:6e:21:f8:7a:c2:a0:c8:27:a8:8c:cf:4b: 9f:1a:26:f6:23:df:bb:12:50:0c:e1:f2:05:59:3c:ac:ce:85: c4:23:0e:0b:be:1a:40:40:cd:c5:8e:a6:4f:0c:dd:b7:13:96: 6d:1b:06:48:77:80:3f:3e:02:a6:98:b5:7c:e5:8b:0a:71:cc: 97:ff:fa:46:00:64:9b:d6:e3:b6:bd:a0:26:07:e5:2b:e2:fb: 7b:38:3a:75:79:e5:9c:dc:fa:5b:d7:df:39:d9:8c:ff:ba:5a: 86:f1:b6:e6:92:e8:64:7e:cb:9a:c8:7d:5a:6f:43:71:37:20: 5c:f1:0d:1f:f1:61:71:2e:31:bf:bf:de:93:40:85:ae:67:62: 63:31:ed:72:0a:fd:03:8f:72:d3:2b:66:fc:0c:42:78:e1:b1: 41:73:ca:19:36:43:d3:68:6f:b2:e6:9b:be:c9:19:1c:ae:40: 6f:0e:19:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKd7gz7yL7kv26UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk ZjVmYTY3ZGYtNDkzNS00Mzc5LWFiZWEtZTRlNDNkM2I0N2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9lNwf3KE0vlRfRrF7Dr++WD0njYCXnk/4AQz uSSY5E7Bst6UdRrLdJ7yAzs0/1wLY0Qsy9siVbwqgPNurSRerdf18d3rHu6O2j0O ndUa6+WpID1YNIQdgD8e2/UZO/mwWFwUUVbOHmoYjBTmEvGa7bVskiH9PHxJvGyV 6dsac6vu7hCUCcpQIAlTrPu3ifaecMT7U8xevTQLpIiOLNqlOB3YYLFSjMdrnR68 31NEeQGwyM4jpfl+xnikDz3ZYQ4D3l/Z5vsbphSFIm6JsjlqFRXMJo7xZCTJvWx0 sibjzIk5bAt/roQSeF1S0NsZE8umYGNDodCgBKlDCi9z3nWpfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7qMAupGuhiHVo0KwJVYHBDHHz7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjJlNjY2YjctYjRmOC0z YmMwLWFjYTAtZTNlNjVlNDYxODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF94UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIY2VSTv9fQBOpy8xDWClb+7aiIqzvP55AZTLnoCDHuXsMggpkhE0pr1 hvkeJtWb7myFiX0/mr91fbJmsXOml8/siwJlsJ17rdQ5Q/g7um4h+HrCoMgnqIzP S58aJvYj37sSUAzh8gVZPKzOhcQjDgu+GkBAzcWOpk8M3bcTlm0bBkh3gD8+AqaY tXzliwpxzJf/+kYAZJvW47a9oCYH5Svi+3s4OnV55Zzc+lvX3znZjP+6WobxtuaS 6GR+y5rIfVpvQ3E3IFzxDR/xYXEuMb+/3pNAha5nYmMx7XIK/QOPctMrZvwMQnjh sUFzyhk2Q9Nob7Lmm77JGRyuQG8OGb0= -----END CERTIFICATE-----Generated at Mon May 5 06:55:26 2025 by rpki-client