$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fd8a58e-620e-3a3b-afab-b7c249b0ac16.roa File: 5fd8a58e-620e-3a3b-afab-b7c249b0ac16.roa (raw, json) Hash identifier: JhJo1DgfVAsec18hJbH1uG6wMe5E8pJ6oN2wgInEYn8= Subject key identifier: 40:5E:CB:24:84:9A:EC:2D:99:34:1B:94:FE:5D:6E:29:9E:73:82:65 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B714D4875AD2CD506580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fd8a58e-620e-3a3b-afab-b7c249b0ac16.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 16625 IP address blocks: 23.220.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b7:14:d4:87:5a:d2:cd:50:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=3142cab6-d13b-490d-8f83-4afd323f20fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1a:98:8d:d3:f2:57:5a:56:1e:7a:90:5f:26: 31:6b:30:bf:d7:0d:bc:82:33:61:e8:e6:6a:d2:25: c4:6c:e9:e4:8b:4d:ee:b4:4f:66:23:81:fc:2b:71: ed:98:9d:be:84:85:d1:75:32:24:0b:91:bb:0d:50: 37:39:62:5a:7c:6e:75:b9:ca:be:ee:fe:d6:c1:43: 43:c6:7a:8b:01:c9:b1:d1:cd:c2:fa:e0:57:cc:0c: 0d:4e:c8:45:3b:5a:a3:e2:74:9e:48:b6:5c:c0:14: 4d:88:8d:79:b5:97:75:a6:2f:88:89:95:be:2f:1b: a6:b8:36:cd:d9:d9:ba:f4:26:04:73:e9:5b:3e:65: 8b:a6:1c:8e:9a:36:35:13:b2:f0:ac:03:58:33:66: a7:c4:05:4b:d4:5f:17:b2:26:40:4d:5d:e5:df:54: f5:43:0a:51:c2:b7:26:88:8f:ea:a3:78:26:d0:1c: e4:f4:7e:b4:04:c4:58:cf:8c:9a:da:b9:27:4d:40: 2b:bf:4a:ff:25:5f:f6:30:65:12:b8:4f:c4:f7:4d: 31:f5:a4:cd:98:b6:cc:53:f0:fd:32:4a:57:49:6c: 38:68:ac:90:f3:a6:84:4d:02:e3:73:cd:21:31:bf: bd:23:b8:22:a8:6e:d0:53:e6:87:b7:2c:48:98:e3: a6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5E:CB:24:84:9A:EC:2D:99:34:1B:94:FE:5D:6E:29:9E:73:82:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fd8a58e-620e-3a3b-afab-b7c249b0ac16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:c8:19:d5:5e:30:d8:2b:d3:05:99:6a:dd:b4:62:e9:ac:1b: 61:a2:33:f6:7f:89:94:9f:5f:2f:91:01:33:d2:08:15:df:f7: c7:17:f3:af:01:07:6c:57:92:70:83:1c:eb:64:99:a0:41:0d: 3a:67:5a:db:47:42:71:8d:bf:fd:b8:ff:11:3d:b9:3f:a1:7f: 8d:9a:f6:19:4c:94:74:a9:43:53:10:ad:a5:58:e0:5f:89:7d: 93:36:28:c2:cf:32:87:9d:45:0d:cd:58:05:99:30:df:8b:2c: 0c:d5:dd:e9:09:8d:9d:ae:84:5b:fe:77:5d:1a:a5:a7:c9:7d: 09:4a:12:63:6a:b2:61:91:0f:c2:b7:ed:b9:58:2c:67:9a:6f: c3:30:d4:f9:ec:a7:22:62:e2:60:d6:6e:e8:6f:0f:b9:aa:68: fc:f9:2f:a3:79:43:bd:5e:b2:af:95:8d:9a:7a:e6:78:11:f3: 20:f3:22:1e:fc:66:79:d4:e3:43:be:92:0f:50:73:cd:b7:1b: 90:2f:a1:ff:59:5c:e2:73:27:67:2f:fa:97:78:59:52:68:9d: dc:39:c1:df:50:47:db:eb:81:39:a1:ce:fd:b9:0c:a2:c0:3e: 64:27:7c:1b:65:c1:ff:e6:51:07:9c:41:2c:db:f9:36:4d:39: 39:11:e4:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLcU1Ida0s1QZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk MzE0MmNhYjYtZDEzYi00OTBkLThmODMtNGFmZDMyM2YyMGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BqYjdPyV1pWHnqQXyYxazC/1w28gjNh6OZq 0iXEbOnki03utE9mI4H8K3HtmJ2+hIXRdTIkC5G7DVA3OWJafG51ucq+7v7WwUND xnqLAcmx0c3C+uBXzAwNTshFO1qj4nSeSLZcwBRNiI15tZd1pi+IiZW+LxumuDbN 2dm69CYEc+lbPmWLphyOmjY1E7LwrANYM2anxAVL1F8XsiZATV3l31T1QwpRwrcm iI/qo3gm0Bzk9H60BMRYz4ya2rknTUArv0r/JV/2MGUSuE/E900x9aTNmLbMU/D9 MkpXSWw4aKyQ86aETQLjc80hMb+9I7giqG7QU+aHtyxImOOm+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBeyySEmuwtmTQblP5dbimec4JlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWZkOGE1OGUtNjIwZS0z YTNiLWFmYWItYjdjMjQ5YjBhYzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9zYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHIGdVeMNgr0wWZat20YumsG2GiM/Z/iZSfXy+RATPSCBXf98cX868B B2xXknCDHOtkmaBBDTpnWttHQnGNv/24/xE9uT+hf42a9hlMlHSpQ1MQraVY4F+J fZM2KMLPMoedRQ3NWAWZMN+LLAzV3ekJjZ2uhFv+d10apafJfQlKEmNqsmGRD8K3 7blYLGeab8Mw1PnspyJi4mDWbuhvD7mqaPz5L6N5Q71esq+VjZp65ngR8yDzIh78 ZnnU40O+kg9Qc823G5Avof9ZXOJzJ2cv+pd4WVJondw5wd9QR9vrgTmhzv25DKLA PmQnfBtlwf/mUQecQSzb+TZNOTkR5Ms= -----END CERTIFICATE-----Generated at Mon May 5 17:14:16 2025 by rpki-client