$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69f9f099-0285-3003-babf-a36861d14089.roa File: 69f9f099-0285-3003-babf-a36861d14089.roa (raw, json) Hash identifier: iCf6dgr10NYUi18+StUgL8ngcWZuR7WNWcsQH5bX/kE= Subject key identifier: B9:11:3B:EE:07:02:C2:40:2C:A7:DB:D6:E2:60:E7:43:70:53:1B:68 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4AEBA3CE088C9D684E580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69f9f099-0285-3003-babf-a36861d14089.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.220.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:ae:ba:3c:e0:88:c9:d6:84:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=66a49892-cb5e-41d6-9900-f194011be421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:59:47:a7:3a:72:1f:2d:5a:bf:e6:32:24:65: 00:3f:2d:20:48:5c:10:9b:f9:1f:9b:5a:50:6a:2d: c2:b5:ad:c1:f7:51:35:21:82:f9:05:8e:be:d5:b6: da:71:f4:f1:5a:0f:45:ce:19:e2:7b:88:aa:e5:f4: d9:5b:be:44:5c:7d:12:47:61:5c:04:f0:2e:d9:c8: 89:f4:a1:48:5d:d1:ca:cc:86:a7:1e:2e:3f:71:0f: f4:75:76:f6:4b:f6:71:f1:91:73:53:fb:c9:8a:d4: 3d:e9:72:d6:7d:6e:ad:d2:c4:81:87:1c:5d:ae:5c: 08:91:5a:4b:8c:48:fc:7d:28:8c:ad:5e:d2:03:61: 90:ca:70:7b:8f:be:ac:cb:28:4f:74:a9:3e:b5:18: 44:ec:18:17:2e:32:45:a9:0d:02:eb:62:da:7b:8b: db:2c:2f:32:b8:b5:0a:fb:72:b7:ee:d4:65:d0:16: c1:93:f8:4d:40:a4:d5:77:62:87:8a:f4:2e:b8:51: cd:85:93:a6:f3:b6:93:f8:71:69:e1:25:e1:94:22: 30:c6:00:5f:6b:03:75:fd:9c:20:2c:7d:d6:6f:b2: 9b:e8:bd:3c:7a:ee:22:9e:8b:c7:0f:16:30:1d:3b: de:9a:68:03:54:63:27:a9:0c:77:f2:ec:cb:7a:c6: d4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:11:3B:EE:07:02:C2:40:2C:A7:DB:D6:E2:60:E7:43:70:53:1B:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69f9f099-0285-3003-babf-a36861d14089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:b4:83:94:52:54:53:81:9c:cb:ac:b3:51:05:a7:0a:6f:0d: 22:48:be:93:44:a2:bc:0d:e8:4d:a5:57:87:56:c2:db:32:71: 22:97:15:f6:a2:47:1f:78:01:67:66:28:46:f9:6a:ce:55:24: a5:c3:94:2c:fa:5f:7f:85:34:3b:50:0f:da:07:76:be:9f:8a: 94:ea:09:1c:fe:28:ef:e7:a3:f8:28:ed:25:31:f3:89:60:51: 13:76:f9:e3:97:74:98:b5:ca:b6:f4:ab:09:eb:9a:b9:5f:a5: d8:cf:62:7d:17:cb:b8:b5:f3:56:10:9f:72:aa:16:7a:36:1d: 0c:5c:32:1d:e7:a0:ca:ab:04:5d:72:93:e8:dc:b3:2e:fe:b6: fe:db:fd:f5:1e:16:e7:18:d7:70:16:a7:0f:fd:a4:77:90:3a: de:99:d3:83:2f:fc:04:1d:f0:02:de:cc:bd:42:6a:1d:b6:29: f4:02:78:aa:9c:2a:f5:ab:27:39:40:6b:24:0c:0f:12:e9:9f: 2c:fb:c0:4d:63:64:97:68:8e:b4:bb:32:67:bb:de:31:31:01: 21:ea:16:65:94:3f:5d:15:31:de:ec:04:fb:d5:03:77:c7:5a: 06:28:10:ee:84:3b:ce:7e:48:ed:c7:a5:d3:c8:72:ed:0d:f4: 16:db:c9:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtK66POCIydaE5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NjZhNDk4OTItY2I1ZS00MWQ2LTk5MDAtZjE5NDAxMWJlNDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkllHpzpyHy1av+YyJGUAPy0gSFwQm/kfm1pQ ai3Cta3B91E1IYL5BY6+1bbacfTxWg9Fzhnie4iq5fTZW75EXH0SR2FcBPAu2ciJ 9KFIXdHKzIanHi4/cQ/0dXb2S/Zx8ZFzU/vJitQ96XLWfW6t0sSBhxxdrlwIkVpL jEj8fSiMrV7SA2GQynB7j76syyhPdKk+tRhE7BgXLjJFqQ0C62Lae4vbLC8yuLUK +3K37tRl0BbBk/hNQKTVd2KHivQuuFHNhZOm87aT+HFp4SXhlCIwxgBfawN1/Zwg LH3Wb7Kb6L08eu4inovHDxYwHTvemmgDVGMnqQx38uzLesbURQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkRO+4HAsJALKfb1uJg50NwUxtoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjlmOWYwOTktMDI4NS0z MDAzLWJhYmYtYTM2ODYxZDE0MDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9yUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFW0g5RSVFOBnMuss1EFpwpvDSJIvpNEorwN6E2lV4dWwtsycSKXFfai Rx94AWdmKEb5as5VJKXDlCz6X3+FNDtQD9oHdr6fipTqCRz+KO/no/go7SUx84lg URN2+eOXdJi1yrb0qwnrmrlfpdjPYn0Xy7i181YQn3KqFno2HQxcMh3noMqrBF1y k+jcsy7+tv7b/fUeFucY13AWpw/9pHeQOt6Z04Mv/AQd8ALezL1Cah22KfQCeKqc KvWrJzlAayQMDxLpnyz7wE1jZJdojrS7Mme73jExASHqFmWUP10VMd7sBPvVA3fH WgYoEO6EO85+SO3HpdPIcu0N9Bbbyfg= -----END CERTIFICATE-----Generated at Sat May 10 04:45:44 2025 by rpki-client