$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/570fa2ee-4545-386c-8e3e-0e705c81742d.roa File: 570fa2ee-4545-386c-8e3e-0e705c81742d.roa (raw, json) Hash identifier: dg0oQMyXbkJ3fzQZYm2AmoRpUbMVK//JRO6TarKmIYI= Subject key identifier: D9:B3:EE:7E:ED:2E:F8:F2:31:F0:3D:DC:00:B0:F1:7C:77:7B:E6:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4AE9187E5761699088FC3 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/570fa2ee-4545-386c-8e3e-0e705c81742d.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 16625 IP address blocks: 23.220.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:ae:91:87:e5:76:16:99:08:8f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=1f0c2db8-77f6-4bb1-b329-db652bc560c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:25:1e:27:a4:d1:c0:2b:55:15:3f:64:ae:cb: 90:78:26:a1:2f:89:8a:09:7c:60:5e:65:c6:63:1e: 35:db:47:d5:5a:93:dd:cf:dc:d9:3b:b3:34:0a:fb: 26:86:c8:a3:77:ac:ef:75:ff:3a:55:1f:92:b5:a9: 32:90:ff:f1:88:48:ab:1e:cc:60:a1:f2:96:7d:3d: 8d:c5:8a:87:6c:98:55:13:3c:42:cf:f2:bd:8c:07: 77:75:fb:10:dd:08:b5:39:cc:8c:74:c6:a8:5a:f3: 40:da:e1:84:48:7a:37:a8:6a:12:f7:de:60:d1:20: 49:b0:47:f7:4f:62:5e:9b:99:06:8e:be:94:75:f3: b4:d4:53:46:8e:ec:64:3f:86:3d:92:04:29:d0:dd: 1c:f2:cd:cc:91:77:aa:2f:bb:b3:f4:6c:21:14:1c: f7:b8:24:55:e6:f9:c5:2a:89:89:8f:08:04:99:e8: 23:ec:d4:e9:b1:eb:5b:eb:35:a0:2a:7a:59:58:5d: f3:53:a2:54:59:02:37:4b:70:32:07:0b:c2:75:0d: ec:09:3f:40:67:46:26:6c:f7:a3:04:3e:6e:9f:f8: 35:bf:dc:4b:a5:b6:76:0f:2a:70:28:b9:72:87:34: 1b:aa:1a:81:6a:e0:94:26:b2:40:f5:8c:a2:97:25: 86:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B3:EE:7E:ED:2E:F8:F2:31:F0:3D:DC:00:B0:F1:7C:77:7B:E6:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/570fa2ee-4545-386c-8e3e-0e705c81742d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:75:32:65:cd:06:ff:90:1d:17:57:44:1c:67:46:a8:f2:22: 31:72:d2:3c:44:f4:49:75:f7:89:aa:f8:cd:74:16:05:8a:2a: cd:32:77:c8:3c:56:fb:33:0f:e0:9e:c9:6d:5f:30:b5:bc:46: a9:eb:b9:75:99:7c:37:4e:b4:e4:b7:f9:b0:9f:d6:88:fb:36: d1:b5:8e:4e:9f:48:8d:6e:c7:91:76:3d:30:e5:9f:99:ef:17: 95:f9:06:e6:51:a7:87:ea:20:8d:6e:db:4e:c6:23:5e:ef:f3: b1:be:f9:a8:b2:0a:3e:79:8f:36:e6:b2:66:98:f0:50:16:8a: b2:e4:fe:4f:ca:9f:87:cc:18:0d:c7:3e:be:6f:76:10:8d:7f: 3f:e2:b7:41:d0:62:44:12:a1:a3:e9:39:df:88:99:fc:f2:c6: d5:06:71:2e:33:63:b1:10:9d:81:0b:99:9c:9a:98:4b:61:c4: 04:33:bb:e6:38:9d:49:43:1c:36:61:b4:a7:39:00:9f:ba:78: b0:06:c5:8a:10:33:a4:16:8d:a8:0a:0a:df:0a:21:7e:06:ee: bd:cf:ef:71:01:a5:13:7d:01:81:fd:2a:e1:fd:49:04:29:05: 05:0a:ab:c6:66:f1:ca:bc:95:10:9a:83:c1:50:91:31:94:a9: d5:40:1e:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtK6Rh+V2FpkIj8MwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk MWYwYzJkYjgtNzdmNi00YmIxLWIzMjktZGI2NTJiYzU2MGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyUeJ6TRwCtVFT9krsuQeCahL4mKCXxgXmXG Yx4120fVWpPdz9zZO7M0Cvsmhsijd6zvdf86VR+StakykP/xiEirHsxgofKWfT2N xYqHbJhVEzxCz/K9jAd3dfsQ3Qi1OcyMdMaoWvNA2uGESHo3qGoS995g0SBJsEf3 T2Jem5kGjr6UdfO01FNGjuxkP4Y9kgQp0N0c8s3MkXeqL7uz9GwhFBz3uCRV5vnF KomJjwgEmegj7NTpsetb6zWgKnpZWF3zU6JUWQI3S3AyBwvCdQ3sCT9AZ0YmbPej BD5un/g1v9xLpbZ2DypwKLlyhzQbqhqBauCUJrJA9YyilyWGswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmz7n7tLvjyMfA93ACw8Xx3e+aGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTcwZmEyZWUtNDU0NS0z ODZjLThlM2UtMGU3MDVjODE3NDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9xwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFp1MmXNBv+QHRdXRBxnRqjyIjFy0jxE9El194mq+M10FgWKKs0yd8g8 VvszD+CeyW1fMLW8RqnruXWZfDdOtOS3+bCf1oj7NtG1jk6fSI1ux5F2PTDln5nv F5X5BuZRp4fqII1u207GI17v87G++aiyCj55jzbmsmaY8FAWirLk/k/Kn4fMGA3H Pr5vdhCNfz/it0HQYkQSoaPpOd+ImfzyxtUGcS4zY7EQnYELmZyamEthxAQzu+Y4 nUlDHDZhtKc5AJ+6eLAGxYoQM6QWjagKCt8KIX4G7r3P73EBpRN9AYH9KuH9SQQp BQUKq8Zm8cq8lRCag8FQkTGUqdVAHuE= -----END CERTIFICATE-----Generated at Tue May 6 08:45:19 2025 by rpki-client