$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3448e7a0-ec93-3c68-841f-6bf50913d5df.roa File: 3448e7a0-ec93-3c68-841f-6bf50913d5df.roa (raw, json) Hash identifier: X4JIGK7Y82NdQiAYlk0F78tIMpqOfNtQJjrl7Q/LCeo= Subject key identifier: F5:71:21:01:85:FB:05:C9:D9:B3:4B:FC:AF:59:7E:15:39:76:E0:B2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B9BF4BD1A4F1D200D1C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3448e7a0-ec93-3c68-841f-6bf50913d5df.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.222.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b9:bf:4b:d1:a4:f1:d2:00:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=484ef0b6-7e0a-441c-9bac-246bd2164160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:84:80:b0:ce:2c:bf:98:7a:de:c3:f4:d0:b1: 95:44:24:43:de:5e:d4:f7:3f:19:bf:84:06:9b:ed: d3:a6:cc:fb:9e:11:2e:54:15:4e:54:28:bc:cf:2e: 91:ea:ed:e1:ed:4f:b8:56:21:3d:d7:67:aa:92:6b: 27:b3:97:94:18:69:88:7e:69:e3:e8:06:1e:55:0e: 35:67:d1:8f:ef:86:ba:19:90:99:a6:57:cb:21:b1: 1c:72:14:d0:44:a1:cc:90:c5:f2:85:9d:71:48:7c: 93:43:aa:93:44:c5:ae:22:cf:e7:2e:31:88:c9:bf: 8e:98:08:8c:1b:03:8c:f6:44:4c:02:7d:6b:ef:ba: 2e:a7:ff:17:7a:56:6c:34:25:ba:14:f5:80:5d:07: 52:4f:9a:85:da:a4:c4:7e:45:03:00:68:94:88:50: b6:1e:4f:fb:87:00:4c:9b:c6:22:2c:86:01:e2:0d: c3:76:9b:4e:e2:52:eb:41:8f:bd:46:52:45:17:1b: 47:e2:11:2c:06:c0:55:e1:94:fb:bf:99:f6:07:48: 20:4a:7d:50:62:cc:4c:df:01:2f:9d:d2:12:17:70: 55:ee:48:93:49:30:4a:2e:d5:3f:de:46:bc:fc:d2: 41:e2:af:6c:2d:2d:d3:43:1a:2b:27:6b:89:0b:f0: 17:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:71:21:01:85:FB:05:C9:D9:B3:4B:FC:AF:59:7E:15:39:76:E0:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3448e7a0-ec93-3c68-841f-6bf50913d5df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:60:85:c6:0e:1e:10:f7:9a:6f:1e:9d:c6:e9:2d:29:95:b9: b4:09:6b:7a:b6:50:57:d5:25:52:b4:03:40:32:b2:e3:db:95: 3c:d8:a7:47:43:44:59:c2:ab:9d:b0:c1:c1:36:74:7a:51:b7: 14:94:1c:bd:93:09:74:3e:6c:8e:cd:6b:6f:63:b7:22:de:3a: 0f:b4:6b:08:46:2b:8e:4e:08:95:a2:ca:ee:3e:00:73:17:90: dd:c8:a1:4c:ab:b3:eb:70:76:b2:bf:99:d2:73:ba:14:03:36: 47:ef:7c:cc:65:46:01:ca:23:d7:28:5e:cd:23:bb:75:f9:14: 6c:20:e6:8f:17:f8:a9:72:88:7f:27:92:4b:fa:66:d1:97:c1: 46:03:70:53:cd:2a:e4:e1:ca:98:21:02:00:a3:ba:f2:cf:4f: a9:7d:be:f8:f3:f7:88:33:aa:97:9d:c8:69:64:6c:65:da:ab: ef:69:5f:56:23:5e:6b:f6:ce:7d:b5:16:36:9c:68:e4:54:75: d3:6f:1a:5f:8d:e8:48:ec:30:3a:db:2b:3d:5c:18:b0:e1:32: b7:10:c3:72:5f:e7:eb:a5:ed:98:f7:d6:31:43:db:23:fd:75: 71:51:f1:26:b5:95:70:60:47:d0:a0:80:77:34:2e:52:89:79: e5:05:02:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLm/S9Gk8dIA0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NDg0ZWYwYjYtN2UwYS00NDFjLTliYWMtMjQ2YmQyMTY0MTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYSAsM4sv5h63sP00LGVRCRD3l7U9z8Zv4QG m+3Tpsz7nhEuVBVOVCi8zy6R6u3h7U+4ViE912eqkmsns5eUGGmIfmnj6AYeVQ41 Z9GP74a6GZCZplfLIbEcchTQRKHMkMXyhZ1xSHyTQ6qTRMWuIs/nLjGIyb+OmAiM GwOM9kRMAn1r77oup/8XelZsNCW6FPWAXQdST5qF2qTEfkUDAGiUiFC2Hk/7hwBM m8YiLIYB4g3DdptO4lLrQY+9RlJFFxtH4hEsBsBV4ZT7v5n2B0ggSn1QYsxM3wEv ndISF3BV7kiTSTBKLtU/3ka8/NJB4q9sLS3TQxorJ2uJC/AXRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVxIQGF+wXJ2bNL/K9ZfhU5duCyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzQ0OGU3YTAtZWM5My0z YzY4LTg0MWYtNmJmNTA5MTNkNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF95MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZghcYOHhD3mm8encbpLSmVubQJa3q2UFfVJVK0A0AysuPblTzYp0dD RFnCq52wwcE2dHpRtxSUHL2TCXQ+bI7Na29jtyLeOg+0awhGK45OCJWiyu4+AHMX kN3IoUyrs+twdrK/mdJzuhQDNkfvfMxlRgHKI9coXs0ju3X5FGwg5o8X+KlyiH8n kkv6ZtGXwUYDcFPNKuThypghAgCjuvLPT6l9vvjz94gzqpedyGlkbGXaq+9pX1Yj Xmv2zn21FjacaORUddNvGl+N6EjsMDrbKz1cGLDhMrcQw3Jf5+ul7Zj31jFD2yP9 dXFR8Sa1lXBgR9CggHc0LlKJeeUFAr8= -----END CERTIFICATE-----Generated at Mon May 5 20:53:33 2025 by rpki-client