$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6abb1e35-4d4a-3be3-a1a0-321175d9b84a.roa File: 6abb1e35-4d4a-3be3-a1a0-321175d9b84a.roa (raw, json) Hash identifier: h7NG3w99adFdPlBL3+thTQcH9DE0RmQpZ5KCqytR28U= Subject key identifier: 92:92:E2:94:8A:2C:E1:D9:33:67:9A:69:32:30:F7:6D:B3:B0:D4:D0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B5FB75D0DF75E055FB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6abb1e35-4d4a-3be3-a1a0-321175d9b84a.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.220.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b5:fb:75:d0:df:75:e0:55:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=920842a9-0a85-4d1a-b18b-089b6be07727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f7:8f:89:36:e0:8c:f2:c3:56:27:7b:69:59: 2d:81:c0:37:91:ad:a9:4d:e2:99:b5:22:38:30:19: 57:36:8e:51:6d:0c:71:a3:df:51:50:ac:0e:69:5f: e5:5b:74:1d:91:23:94:3a:63:70:28:f2:35:30:a5: cf:0e:83:86:f7:0c:01:b1:36:cb:9b:f2:32:41:cc: bd:f3:71:73:49:eb:0c:2c:e9:44:99:0c:a5:03:3b: ee:af:b3:86:ce:3a:42:21:b9:93:27:a8:d6:79:f3: 0b:83:c3:45:46:a6:de:16:59:c8:88:c7:a1:8d:b6: 6e:ad:3a:2d:cb:df:3e:77:e4:a4:7b:5c:d4:cd:dd: 64:08:3c:1d:67:1a:1f:1a:ac:0d:6e:4d:20:e0:30: f0:15:9a:37:cb:20:4e:1c:8d:36:fd:f8:5d:c7:bb: 04:cf:12:87:ec:a1:76:13:c9:46:ef:15:97:59:9a: c1:68:33:db:75:57:6d:e5:2b:ef:7c:73:97:c1:3c: a7:2e:44:7b:8f:ed:bc:62:b6:de:5e:55:b4:b4:be: cb:5a:6c:3a:94:90:b9:c2:10:e2:33:b7:56:c4:48: 93:ea:1b:48:37:ed:7a:06:3e:35:a6:bd:6a:4a:e6: 0f:52:6c:b9:5e:45:d0:68:65:12:ed:5f:7c:4f:02: 3c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:92:E2:94:8A:2C:E1:D9:33:67:9A:69:32:30:F7:6D:B3:B0:D4:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6abb1e35-4d4a-3be3-a1a0-321175d9b84a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:1c:27:6c:3b:d7:15:bd:30:dd:8f:86:76:74:4b:1a:77:50: 21:61:3a:50:9b:e3:51:cd:d8:05:53:52:3a:d0:04:7b:31:4b: 4d:c1:12:94:4d:69:0b:c9:c2:0c:16:63:f8:93:ca:b3:83:61: 5d:5d:01:b3:08:c1:b3:bd:c4:4e:82:33:83:1c:5d:38:73:26: d6:aa:1d:bf:3b:46:68:39:d0:bf:25:15:4c:85:f4:cf:44:98: 3d:41:fd:71:9f:a9:aa:7c:1f:10:42:4a:40:69:a3:6f:ea:a7: 1c:49:c1:e7:cb:bd:99:3b:19:a4:50:81:9a:3a:e9:4e:de:f7: 28:94:0b:7d:0b:9d:6a:ea:fb:7b:35:7f:c3:79:10:89:a3:0d: fb:3a:76:cc:30:b7:85:9e:41:96:66:5d:d3:36:f9:1d:85:61: c0:f1:66:8d:30:0d:48:ed:46:38:f9:e5:23:63:c8:4b:2d:8e: f4:56:34:2c:7a:7d:c1:77:a5:d4:db:40:7d:29:aa:52:e3:79: 04:f2:77:8d:e4:99:21:63:c3:50:60:e5:be:4e:72:ae:31:9c: fa:f9:42:d6:f2:f2:84:e5:d0:52:35:38:f7:54:b1:e8:84:81: 2b:8b:27:5e:ab:ba:14:14:bf:73:9a:9d:f6:1e:f3:97:63:e1: 15:de:18:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLX7ddDfdeBV+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk OTIwODQyYTktMGE4NS00ZDFhLWIxOGItMDg5YjZiZTA3NzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPePiTbgjPLDVid7aVktgcA3ka2pTeKZtSI4 MBlXNo5RbQxxo99RUKwOaV/lW3QdkSOUOmNwKPI1MKXPDoOG9wwBsTbLm/IyQcy9 83FzSesMLOlEmQylAzvur7OGzjpCIbmTJ6jWefMLg8NFRqbeFlnIiMehjbZurTot y98+d+Ske1zUzd1kCDwdZxofGqwNbk0g4DDwFZo3yyBOHI02/fhdx7sEzxKH7KF2 E8lG7xWXWZrBaDPbdVdt5SvvfHOXwTynLkR7j+28YrbeXlW0tL7LWmw6lJC5whDi M7dWxEiT6htIN+16Bj41pr1qSuYPUmy5XkXQaGUS7V98TwI81QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKS4pSKLOHZM2eaaTIw922zsNTQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmFiYjFlMzUtNGQ0YS0z YmUzLWExYTAtMzIxMTc1ZDliODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9xoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUcJ2w71xW9MN2PhnZ0Sxp3UCFhOlCb41HN2AVTUjrQBHsxS03BEpRN aQvJwgwWY/iTyrODYV1dAbMIwbO9xE6CM4McXThzJtaqHb87Rmg50L8lFUyF9M9E mD1B/XGfqap8HxBCSkBpo2/qpxxJwefLvZk7GaRQgZo66U7e9yiUC30LnWrq+3s1 f8N5EImjDfs6dswwt4WeQZZmXdM2+R2FYcDxZo0wDUjtRjj55SNjyEstjvRWNCx6 fcF3pdTbQH0pqlLjeQTyd43kmSFjw1Bg5b5Ocq4xnPr5Qtby8oTl0FI1OPdUseiE gSuLJ16ruhQUv3OanfYe85dj4RXeGGo= -----END CERTIFICATE-----Generated at Mon May 5 01:54:12 2025 by rpki-client