$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52b7f17a-1a4f-30b2-aa32-605cee7cdaca.roa File: 52b7f17a-1a4f-30b2-aa32-605cee7cdaca.roa (raw, json) Hash identifier: Xs3Y8LoiDT/VSd245n5sncut6PgiXT+mSFxr+EjMN1s= Subject key identifier: 66:58:BD:D5:DC:2E:2B:43:33:29:2C:B7:2A:E4:A7:67:71:09:6F:36 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B68CBA2B4CE977C2DD40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52b7f17a-1a4f-30b2-aa32-605cee7cdaca.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.220.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b6:8c:ba:2b:4c:e9:77:c2:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=e0cc2564-e078-4e00-9b94-ce01ae05558a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4b:f3:80:8f:d1:87:44:b6:0d:25:ca:7b:21: ae:f9:b5:ff:4e:0c:00:c8:3a:b5:c3:af:74:16:95: ec:4c:4b:d2:c4:bc:c0:4a:62:20:9d:76:8b:61:06: 1a:0c:f6:c5:47:ab:d0:d5:7e:09:e0:91:e9:1c:7b: f9:fd:e8:8c:04:83:98:75:76:0a:de:09:2a:c7:1f: c6:ac:23:2b:b4:2e:3c:0c:04:b8:56:1b:b2:88:b5: c1:cd:43:04:07:4e:b9:55:6d:78:1a:0a:71:dd:b9: 87:2a:a3:a6:3c:6b:b1:39:59:61:a2:15:7b:7f:bf: fe:cf:3c:10:37:f1:5f:81:7e:9c:45:16:09:97:c4: 66:ad:16:5d:ba:fa:8b:f9:58:c2:7c:cd:df:ad:f3: ba:35:d0:da:ea:15:98:36:4f:97:45:c2:cc:39:e5: 4e:6c:cc:f2:08:ec:74:26:cb:7e:b7:bd:ad:8a:4a: db:b0:3b:ed:c8:af:b4:d8:95:66:d2:46:ff:5a:8e: d1:cf:10:21:ce:9a:61:48:47:96:21:9e:a7:c3:66: 1f:f6:f4:83:70:49:cf:10:8b:62:3e:c3:35:d4:7a: 2b:76:31:82:c4:96:f3:f8:46:6d:c3:e1:44:d1:4f: e7:5f:ad:55:c8:45:be:e8:27:62:cb:75:a1:d0:04: b2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:58:BD:D5:DC:2E:2B:43:33:29:2C:B7:2A:E4:A7:67:71:09:6F:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52b7f17a-1a4f-30b2-aa32-605cee7cdaca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:01:28:14:00:e6:79:ef:f9:0e:c6:89:52:8a:95:72:7d:b0: 47:01:2d:60:cf:0d:32:4a:63:77:dd:c5:bd:06:dd:05:2f:16: 4c:61:29:8a:8a:2b:3c:12:d0:e1:2f:72:d9:e6:16:fd:dd:3c: f6:48:9b:f9:33:84:99:05:3e:d2:14:bc:89:09:96:1c:a7:72: 8f:2d:22:59:8e:15:4b:1e:36:5f:f5:0b:ae:29:25:c3:f1:bd: e8:43:05:73:75:87:9b:d1:f0:75:2c:67:87:e9:69:7c:2f:ae: 50:32:5c:b1:66:be:47:d0:0d:8c:96:bc:11:0b:fd:8c:78:77: a0:de:a6:2e:31:9a:03:3c:6b:c9:cd:b8:df:9a:30:08:1a:1f: 07:d8:cc:28:68:64:7e:aa:69:5f:c7:74:b0:af:77:04:85:7a: 63:3b:df:ee:7a:35:c4:6f:86:62:1f:86:e3:09:d6:e6:67:9a: 41:bb:d0:17:a3:7d:7b:ec:de:a7:1e:f6:61:68:60:13:25:ec: 14:17:b4:79:fe:f2:ee:7c:f3:65:2f:02:43:30:b4:15:c8:46: 79:99:07:df:02:6c:a3:b8:4b:db:f4:1e:97:8f:53:35:9c:39: a5:80:18:e4:6e:2e:05:50:8e:3d:48:13:64:15:89:20:1e:c8: bc:71:33:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLaMuitM6XfC3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ZTBjYzI1NjQtZTA3OC00ZTAwLTliOTQtY2UwMWFlMDU1NThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUvzgI/Rh0S2DSXKeyGu+bX/TgwAyDq1w690 FpXsTEvSxLzASmIgnXaLYQYaDPbFR6vQ1X4J4JHpHHv5/eiMBIOYdXYK3gkqxx/G rCMrtC48DAS4VhuyiLXBzUMEB065VW14Ggpx3bmHKqOmPGuxOVlhohV7f7/+zzwQ N/FfgX6cRRYJl8RmrRZduvqL+VjCfM3frfO6NdDa6hWYNk+XRcLMOeVObMzyCOx0 Jst+t72tikrbsDvtyK+02JVm0kb/Wo7RzxAhzpphSEeWIZ6nw2Yf9vSDcEnPEIti PsM11HordjGCxJbz+EZtw+FE0U/nX61VyEW+6Cdiy3Wh0ASyYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZYvdXcLitDMykstyrkp2dxCW82MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTJiN2YxN2EtMWE0Zi0z MGIyLWFhMzItNjA1Y2VlN2NkYWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9yjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8BKBQA5nnv+Q7GiVKKlXJ9sEcBLWDPDTJKY3fdxb0G3QUvFkxhKYqK KzwS0OEvctnmFv3dPPZIm/kzhJkFPtIUvIkJlhynco8tIlmOFUseNl/1C64pJcPx vehDBXN1h5vR8HUsZ4fpaXwvrlAyXLFmvkfQDYyWvBEL/Yx4d6Depi4xmgM8a8nN uN+aMAgaHwfYzChoZH6qaV/HdLCvdwSFemM73+56NcRvhmIfhuMJ1uZnmkG70Bej fXvs3qce9mFoYBMl7BQXtHn+8u5882UvAkMwtBXIRnmZB98CbKO4S9v0HpePUzWc OaWAGORuLgVQjj1IE2QViSAeyLxxM2k= -----END CERTIFICATE-----Generated at Wed May 7 01:33:17 2025 by rpki-client