$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cc4d5c4-aec8-3c26-9fe0-498de9059215.roa File: 5cc4d5c4-aec8-3c26-9fe0-498de9059215.roa (raw, json) Hash identifier: SApDu/CdH4OgmHphNzuE9g93BcvV94nYvG+vXnUrVbo= Subject key identifier: DB:8D:77:EC:46:D9:E6:79:2A:F8:AF:3F:85:6F:7A:45:7A:F5:52:C9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B44E18590B9DFE7D7F60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cc4d5c4-aec8-3c26-9fe0-498de9059215.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.223.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b4:4e:18:59:0b:9d:fe:7d:7f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=a9faada3-0d16-4198-83fe-a206a8812fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:02:7b:f1:26:92:6a:ae:fa:45:3b:be:54:66: 69:ef:92:08:10:dc:b2:7d:24:58:84:ad:0e:84:44: c1:b4:e0:48:a6:9a:60:62:c4:ec:47:d0:66:97:31: ac:a1:a7:91:47:36:ca:81:8e:1b:ad:ac:f3:79:ab: 8d:60:d3:71:16:91:37:77:a6:52:25:3e:9b:f5:f8: d6:c7:20:0b:16:4e:6f:1a:9d:83:1c:64:52:f8:8f: 1c:3a:5a:7f:a5:30:5c:b0:8e:e3:1c:12:47:3f:d8: 64:89:fd:68:7d:ea:2d:74:fc:3f:01:53:05:a4:79: 69:e1:77:af:17:9a:59:aa:30:64:de:7b:e6:40:90: ed:66:cf:16:6f:33:30:86:70:7c:2c:03:0d:18:a8: 60:2e:b6:f7:d3:b8:c1:f9:f9:18:8f:8b:45:ed:3b: af:6f:1a:67:57:31:e9:3e:96:76:7b:84:8a:7c:b0: 5a:77:94:19:b5:c7:5c:02:f1:8f:e5:56:76:af:3c: e2:51:0b:69:b2:17:a4:04:b1:a1:7b:45:2d:33:09: 22:49:72:2a:76:10:75:69:e7:c4:38:18:60:17:27: 96:8e:0d:2b:eb:b2:7e:24:9f:aa:2f:2e:83:54:c4: b1:1a:65:6b:ec:3b:4c:3b:e4:62:a6:7a:27:c2:2f: e0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8D:77:EC:46:D9:E6:79:2A:F8:AF:3F:85:6F:7A:45:7A:F5:52:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cc4d5c4-aec8-3c26-9fe0-498de9059215.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:2c:1a:b3:37:b7:40:42:aa:6c:da:c2:60:45:f1:42:a7:2d: c6:fc:ce:9e:ba:4c:e3:55:59:99:e0:c1:4b:b3:7c:35:08:9b: 96:23:3f:a0:b1:4a:d7:4e:be:11:bd:72:46:3f:ba:b1:9c:01: 80:8c:cc:4b:a7:a2:84:2e:30:76:5a:f6:e8:c6:13:c8:3e:46: b5:d3:84:89:c9:b2:4d:f5:80:0d:77:e2:29:d4:71:37:37:06: 12:e4:0b:55:7e:f0:37:de:91:81:62:22:30:9b:4b:70:c6:67: 30:19:e7:2d:67:8d:b2:93:04:1c:9c:78:ba:bf:69:94:b1:19: cf:b2:e2:8c:49:b6:ca:19:0c:9e:b0:5c:45:ce:86:bc:f0:fe: 3d:e0:34:3b:15:b6:f6:f9:9b:d9:1c:7f:de:ed:61:83:87:1e: f0:8f:4c:0b:e7:e9:3a:61:a2:fb:99:5d:e5:46:92:ec:ab:37: 96:5d:b5:88:97:93:29:44:1d:23:e4:2f:fd:e3:84:5e:63:ed: 36:6e:cc:19:dd:78:0a:e6:2c:c1:cd:c7:24:c9:5f:0d:cb:82: 60:5d:0c:b9:f0:3a:45:d0:c9:2a:48:25:11:2a:c8:72:49:d3: d7:c9:67:5a:07:c3:00:f0:a7:9f:a6:0d:33:90:e4:69:3c:d7: 21:54:e5:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLROGFkLnf59f2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YTlmYWFkYTMtMGQxNi00MTk4LTgzZmUtYTIwNmE4ODEyZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgJ78SaSaq76RTu+VGZp75IIENyyfSRYhK0O hETBtOBIpppgYsTsR9BmlzGsoaeRRzbKgY4brazzeauNYNNxFpE3d6ZSJT6b9fjW xyALFk5vGp2DHGRS+I8cOlp/pTBcsI7jHBJHP9hkif1ofeotdPw/AVMFpHlp4Xev F5pZqjBk3nvmQJDtZs8WbzMwhnB8LAMNGKhgLrb307jB+fkYj4tF7TuvbxpnVzHp PpZ2e4SKfLBad5QZtcdcAvGP5VZ2rzziUQtpshekBLGhe0UtMwkiSXIqdhB1aefE OBhgFyeWjg0r67J+JJ+qLy6DVMSxGmVr7DtMO+Ripnonwi/gCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuNd+xG2eZ5KvivP4VvekV69VLJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWNjNGQ1YzQtYWVjOC0z YzI2LTlmZTAtNDk4ZGU5MDU5MjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9/2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFosGrM3t0BCqmzawmBF8UKnLcb8zp66TONVWZngwUuzfDUIm5YjP6Cx StdOvhG9ckY/urGcAYCMzEunooQuMHZa9ujGE8g+RrXThInJsk31gA134inUcTc3 BhLkC1V+8DfekYFiIjCbS3DGZzAZ5y1njbKTBByceLq/aZSxGc+y4oxJtsoZDJ6w XEXOhrzw/j3gNDsVtvb5m9kcf97tYYOHHvCPTAvn6TphovuZXeVGkuyrN5ZdtYiX kylEHSPkL/3jhF5j7TZuzBndeArmLMHNxyTJXw3LgmBdDLnwOkXQySpIJREqyHJJ 09fJZ1oHwwDwp5+mDTOQ5Gk81yFU5do= -----END CERTIFICATE-----Generated at Mon May 5 02:15:52 2025 by rpki-client