$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f8f250e-84a5-3cef-8bc6-875320b27539.roa File: 3f8f250e-84a5-3cef-8bc6-875320b27539.roa (raw, json) Hash identifier: +URYQfOzxiYF5r42PClAUlloprI11mVHyZJDpsBhmw0= Subject key identifier: 0E:97:5B:11:BF:E7:9F:68:9A:A2:8C:3A:83:88:C0:18:74:F5:31:36 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B5D09DD623879EBB4240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f8f250e-84a5-3cef-8bc6-875320b27539.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 852 IP address blocks: 23.220.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b5:d0:9d:d6:23:87:9e:bb:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=aa9941d1-11ea-402a-bca3-9021a009f2ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5f:05:72:aa:82:a0:58:18:e3:1a:2b:3f:1a: 4d:46:7a:fe:3b:b3:56:dd:68:e9:26:54:5a:c8:0a: bf:99:ee:ab:d9:9d:11:4e:83:63:e3:eb:1b:45:cc: b8:b3:d8:53:09:af:85:e5:fb:f2:e9:6a:02:9c:40: 99:2b:39:ed:84:e4:fd:73:2a:45:dd:dd:93:31:20: db:d3:1f:53:c3:b7:09:40:94:76:1b:9f:3d:f1:f6: 22:5b:76:93:c5:59:32:92:94:56:b0:c7:b8:e9:ae: cd:17:ac:55:82:5d:e5:7b:61:e4:b6:d4:c3:40:98: 0c:e7:39:7f:6b:b3:01:c6:c6:90:f7:06:94:cb:b7: 78:2e:b8:0d:84:23:42:b3:14:8c:32:5f:c5:e7:8e: fe:c2:74:86:d5:ab:1d:7e:a0:e1:1b:9d:8b:ff:a1: 68:3f:ae:ff:81:7b:c3:e3:0a:6d:42:ea:c0:8f:05: 12:8a:e6:fd:fd:95:22:53:37:2e:81:a0:e7:13:69: c5:ba:2d:80:6b:d5:ba:32:82:16:3a:d6:c1:3c:be: 56:17:da:c2:ab:3f:fc:b6:19:64:5c:1d:72:cf:d1: 51:bb:9b:1d:1c:cb:d2:ca:b2:96:fa:6a:b6:e5:6e: 32:52:62:fc:57:bd:1b:32:f6:21:31:80:2d:67:cf: dd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:97:5B:11:BF:E7:9F:68:9A:A2:8C:3A:83:88:C0:18:74:F5:31:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f8f250e-84a5-3cef-8bc6-875320b27539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:61:6b:70:52:04:ec:a1:cc:de:10:c2:32:c1:bf:d4:ee:d6: f2:cf:53:58:51:af:ad:d6:24:f1:09:af:cc:8d:3b:b0:aa:8e: 76:39:ca:b8:ef:4c:2b:37:45:ce:d1:1d:cf:9e:33:a8:04:ed: 90:ca:ba:be:53:93:d3:7b:37:19:8d:7c:11:5c:52:e1:2c:8a: 51:7c:51:d9:b3:2c:6b:11:f3:2e:26:ba:bc:55:97:83:39:cf: e6:3b:47:32:d2:ce:e2:92:24:25:f0:be:9a:f7:a5:0d:dd:d4: 74:4e:0f:53:c0:55:07:59:e7:e1:07:a0:d2:25:99:0d:3f:5c: 30:08:dc:41:24:77:1d:27:ee:b0:9f:f7:27:1b:f0:dc:0c:75: 56:a1:2d:52:33:36:7a:75:cc:a0:8f:43:57:fa:b0:b5:6d:a7: 63:74:d2:45:36:58:3a:cb:5d:21:08:5c:25:5b:33:83:47:bf: 42:7b:1b:e9:43:8f:18:43:81:b7:6f:03:9e:77:b8:fa:bb:01: 49:d8:9e:50:ae:82:95:5d:88:b7:58:ef:dc:5f:51:11:d2:2e: b3:a1:44:b0:fa:a5:4d:1d:4e:6c:4f:50:00:de:80:e7:08:5c: 93:11:74:24:00:a7:93:66:2e:6a:1e:63:12:ce:6b:bb:ea:d0: 75:76:c6:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLXQndYjh567QkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YWE5OTQxZDEtMTFlYS00MDJhLWJjYTMtOTAyMWEwMDlmMmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkV8FcqqCoFgY4xorPxpNRnr+O7NW3WjpJlRa yAq/me6r2Z0RToNj4+sbRcy4s9hTCa+F5fvy6WoCnECZKznthOT9cypF3d2TMSDb 0x9Tw7cJQJR2G5898fYiW3aTxVkykpRWsMe46a7NF6xVgl3le2HkttTDQJgM5zl/ a7MBxsaQ9waUy7d4LrgNhCNCsxSMMl/F547+wnSG1asdfqDhG52L/6FoP67/gXvD 4wptQurAjwUSiub9/ZUiUzcugaDnE2nFui2Aa9W6MoIWOtbBPL5WF9rCqz/8thlk XB1yz9FRu5sdHMvSyrKW+mq25W4yUmL8V70bMvYhMYAtZ8/deQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6XWxG/559omqKMOoOIwBh09TE2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Y4ZjI1MGUtODRhNS0z Y2VmLThiYzYtODc1MzIwYjI3NTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9xcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxha3BSBOyhzN4QwjLBv9Tu1vLPU1hRr63WJPEJr8yNO7CqjnY5yrjv TCs3Rc7RHc+eM6gE7ZDKur5Tk9N7NxmNfBFcUuEsilF8UdmzLGsR8y4murxVl4M5 z+Y7RzLSzuKSJCXwvpr3pQ3d1HROD1PAVQdZ5+EHoNIlmQ0/XDAI3EEkdx0n7rCf 9ycb8NwMdVahLVIzNnp1zKCPQ1f6sLVtp2N00kU2WDrLXSEIXCVbM4NHv0J7G+lD jxhDgbdvA553uPq7AUnYnlCugpVdiLdY79xfURHSLrOhRLD6pU0dTmxPUADegOcI XJMRdCQAp5NmLmoeYxLOa7vq0HV2xjg= -----END CERTIFICATE-----Generated at Mon May 5 12:34:12 2025 by rpki-client