$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31a13aef-7569-3ab3-bdb2-0807db406a8e.roa File: 31a13aef-7569-3ab3-bdb2-0807db406a8e.roa (raw, json) Hash identifier: fTahgXM82DbP2+gEZmhEHIjCPFReN4tA+c4vT3pyHxo= Subject key identifier: D7:99:96:87:C4:FF:10:E4:C7:74:CD:F2:7E:C2:5A:D4:BC:BA:0D:93 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B766A674B9368D15D3C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31a13aef-7569-3ab3-bdb2-0807db406a8e.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.220.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b7:66:a6:74:b9:36:8d:15:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=4a0f79b4-c579-40cd-abe2-ba3b39694564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6f:39:54:94:65:84:c7:d2:c7:fa:5e:74:c3: ee:e6:a5:77:50:a5:a8:a0:e8:b9:10:12:9a:be:60: aa:02:75:c1:27:64:75:27:94:c9:6a:95:1e:47:15: 4c:48:d0:f0:1a:e9:01:30:99:41:8f:05:42:19:f3: 98:c5:e6:d9:ff:6a:80:ce:6c:ab:f4:bb:bd:d9:37: 9b:31:1f:7b:13:89:17:1f:b6:0b:30:c3:5a:7b:84: bd:13:94:0b:91:e5:24:7f:fd:d2:80:d0:d0:24:3a: 1a:29:84:86:20:0c:4d:d6:d0:3d:01:36:a4:41:8c: fb:db:1e:72:c6:41:b8:d0:86:0c:4c:1d:f9:9a:55: 13:10:78:f5:0f:7c:6d:b7:51:b8:45:0b:9c:08:d7: b8:de:3b:bc:19:e8:76:1a:4a:61:2b:08:65:8b:c8: ce:04:27:c7:ec:17:eb:1e:b5:0a:a3:9c:c4:38:e6: fe:08:25:93:ea:ae:f5:0b:49:0c:1b:36:55:9f:12: 0b:94:27:5b:be:30:1c:b3:85:9e:a1:4c:b9:73:5c: 96:aa:65:c7:24:ce:d5:7c:8a:e1:c4:7f:c8:97:43: 87:e2:9d:b2:f8:b8:7c:35:a3:c2:7a:d4:ca:a0:80: a2:56:9a:57:81:bf:4e:82:4e:58:ed:d0:f3:77:70: 70:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:99:96:87:C4:FF:10:E4:C7:74:CD:F2:7E:C2:5A:D4:BC:BA:0D:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31a13aef-7569-3ab3-bdb2-0807db406a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:0f:35:aa:84:44:ad:ec:28:b9:58:14:e4:e5:29:03:26:ca: 77:99:a8:48:18:54:17:30:3d:11:dd:bb:19:b3:9c:57:e0:a6: cd:29:08:0c:53:d7:8c:05:b3:8a:05:71:e0:55:fd:87:72:5c: dc:61:14:6d:9e:25:cb:97:54:f3:d1:e7:98:18:4f:c2:e1:84: d4:c7:c9:ed:d4:27:4b:f3:3c:c2:b2:15:b2:0a:07:92:cf:06: ea:2f:ef:5f:33:e6:1a:9d:a2:9b:2c:44:52:e5:f9:ef:bf:2e: 6a:ef:ab:d5:bd:9f:ed:a8:ca:87:47:34:d1:58:0f:27:f5:6a: a3:32:77:d5:9a:8d:f4:fc:11:5c:f3:02:0c:94:3e:b3:07:05: 22:3d:41:df:67:91:fa:98:0f:19:55:c0:fd:eb:48:90:3d:9d: db:fc:f4:2f:0e:6a:c9:4d:36:20:2d:c7:a8:d8:01:57:a0:59: bd:03:87:f5:cf:75:63:a1:6b:54:0e:8a:0d:d6:b5:9e:a6:36: 84:b3:10:3d:8b:e8:05:85:37:76:14:d5:3f:04:f1:e5:48:13: c3:f3:a6:8f:fb:01:50:06:61:52:07:c7:4a:89:a3:03:d5:a7: 9d:d1:10:a1:68:2a:a9:dd:a3:d5:a3:b2:d9:55:7f:35:61:dd: e0:84:cb:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLdmpnS5No0V08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NGEwZjc5YjQtYzU3OS00MGNkLWFiZTItYmEzYjM5Njk0NTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW85VJRlhMfSx/pedMPu5qV3UKWooOi5EBKa vmCqAnXBJ2R1J5TJapUeRxVMSNDwGukBMJlBjwVCGfOYxebZ/2qAzmyr9Lu92Teb MR97E4kXH7YLMMNae4S9E5QLkeUkf/3SgNDQJDoaKYSGIAxN1tA9ATakQYz72x5y xkG40IYMTB35mlUTEHj1D3xtt1G4RQucCNe43ju8Geh2GkphKwhli8jOBCfH7Bfr HrUKo5zEOOb+CCWT6q71C0kMGzZVnxILlCdbvjAcs4WeoUy5c1yWqmXHJM7VfIrh xH/Il0OH4p2y+Lh8NaPCetTKoICiVppXgb9Ogk5Y7dDzd3Bw3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNeZlofE/xDkx3TN8n7CWtS8ug2TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzFhMTNhZWYtNzU2OS0z YWIzLWJkYjItMDgwN2RiNDA2YThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9z3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMPNaqERK3sKLlYFOTlKQMmyneZqEgYVBcwPRHduxmznFfgps0pCAxT 14wFs4oFceBV/YdyXNxhFG2eJcuXVPPR55gYT8LhhNTHye3UJ0vzPMKyFbIKB5LP Buov718z5hqdopssRFLl+e+/Lmrvq9W9n+2oyodHNNFYDyf1aqMyd9WajfT8EVzz AgyUPrMHBSI9Qd9nkfqYDxlVwP3rSJA9ndv89C8OaslNNiAtx6jYAVegWb0Dh/XP dWOha1QOig3WtZ6mNoSzED2L6AWFN3YU1T8E8eVIE8Pzpo/7AVAGYVIHx0qJowPV p53REKFoKqndo9WjstlVfzVh3eCEyy4= -----END CERTIFICATE-----Generated at Mon May 5 14:49:51 2025 by rpki-client