$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7843bd16-7ebf-3d93-b513-ceca92d5a35b.roa File: 7843bd16-7ebf-3d93-b513-ceca92d5a35b.roa (raw, json) Hash identifier: HNx1yl13/vVXpXy+X0Pcr1lO8kXYB/GyEPPHckuMDWM= Subject key identifier: AF:8B:56:3D:6E:23:2D:44:6B:87:B5:3A:F2:6A:0D:3A:36:D6:63:A9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B4737F85E88844F9F600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7843bd16-7ebf-3d93-b513-ceca92d5a35b.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 16625 IP address blocks: 23.223.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b4:73:7f:85:e8:88:44:f9:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=be98c018-8aa5-4c39-836e-c89edd36ee39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:27:5b:9e:2c:68:3c:7f:2a:71:9e:c8:e1:99: c3:14:76:16:e8:92:3a:09:61:47:0c:f9:d9:7a:39: a0:85:bc:d9:ca:23:8e:37:d9:ad:a1:25:99:1f:56: 9c:c5:33:e7:5c:88:ab:ab:2f:5b:1e:54:d4:c4:11: 12:93:3c:1f:74:b5:2e:6d:69:84:45:3f:95:a4:02: ac:08:75:80:28:f9:be:5d:19:2c:70:14:32:2c:53: 4e:9a:26:0e:b0:c6:a1:da:07:ca:c3:eb:66:04:e5: 3a:4e:ca:d0:55:cf:23:af:a4:fc:fd:79:aa:23:6c: 4a:a4:ac:80:8b:8f:c9:3b:39:ba:09:0f:2a:a2:e3: aa:2a:24:47:0b:c3:32:0d:37:ca:ea:c5:89:6c:b5: 0b:88:39:f7:51:7a:66:2a:2d:03:72:e5:20:f3:78: 13:cd:0c:f6:ea:9d:1d:78:c0:10:8c:a9:06:d1:fa: 21:52:26:1d:18:b4:61:92:6a:6a:d3:78:c1:41:cf: c2:c3:2f:4f:19:b4:13:13:f1:91:c9:ff:f9:41:6e: 2a:bb:e4:bf:aa:73:45:51:b9:ac:c0:6d:72:0b:00: b6:ce:5c:d7:21:41:90:87:4e:85:7e:6f:00:d9:73: b0:59:8f:57:c3:67:0d:76:ca:3e:fa:60:51:b9:e9: bc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8B:56:3D:6E:23:2D:44:6B:87:B5:3A:F2:6A:0D:3A:36:D6:63:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7843bd16-7ebf-3d93-b513-ceca92d5a35b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:97:e5:ff:37:75:38:54:83:8a:4d:89:ce:00:8d:52:38:ae: 45:b8:87:fe:60:40:c6:73:6a:d3:00:ca:a7:bf:50:03:5b:44: 57:11:31:e0:09:be:a0:ba:98:8d:64:3e:e6:fa:65:d4:28:8b: dd:59:29:41:5a:71:6d:06:e2:f2:73:f9:82:ad:2f:de:27:52: 9f:65:b3:5c:7c:37:6e:90:53:0f:3b:a7:43:8f:fb:ab:4e:60: 45:75:53:22:29:be:47:0f:f0:31:17:7f:65:de:f0:34:26:f8: 9e:f0:87:3e:11:46:4b:c5:06:73:bd:50:30:8d:82:48:4a:95: a0:62:fc:f8:46:0b:67:5f:23:18:da:12:f6:91:2b:7e:54:d5: 68:09:c9:e4:e0:9c:2e:7a:67:00:e3:99:e7:0e:91:e9:b2:26: 8a:2d:95:b0:85:70:bb:1e:2e:1c:8f:9c:62:29:7b:7a:76:36: 95:6d:e3:7e:9d:04:52:29:5c:f7:c7:9b:e0:d7:ab:c3:39:cf: 9f:25:ca:2a:05:45:a6:f4:ed:0f:12:f5:aa:1a:d9:dd:50:c0: 15:14:f5:5c:3e:a2:28:eb:ee:05:81:cd:8d:1f:9b:dc:7b:3b: 21:cb:ba:f9:32:e1:7b:44:93:64:0e:b9:6e:98:6d:63:8c:72: 4e:d0:f6:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLRzf4XoiET59gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YmU5OGMwMTgtOGFhNS00YzM5LTgzNmUtYzg5ZWRkMzZlZTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSdbnixoPH8qcZ7I4ZnDFHYW6JI6CWFHDPnZ ejmghbzZyiOON9mtoSWZH1acxTPnXIirqy9bHlTUxBESkzwfdLUubWmERT+VpAKs CHWAKPm+XRkscBQyLFNOmiYOsMah2gfKw+tmBOU6TsrQVc8jr6T8/XmqI2xKpKyA i4/JOzm6CQ8qouOqKiRHC8MyDTfK6sWJbLULiDn3UXpmKi0DcuUg83gTzQz26p0d eMAQjKkG0fohUiYdGLRhkmpq03jBQc/Cwy9PGbQTE/GRyf/5QW4qu+S/qnNFUbms wG1yCwC2zlzXIUGQh06Ffm8A2XOwWY9Xw2cNdso++mBRuem8iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+LVj1uIy1Ea4e1OvJqDTo21mOpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzg0M2JkMTYtN2ViZi0z ZDkzLWI1MTMtY2VjYTkyZDVhMzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmX5f83dThUg4pNic4AjVI4rkW4h/5gQMZzatMAyqe/UANbRFcRMeAJ vqC6mI1kPub6ZdQoi91ZKUFacW0G4vJz+YKtL94nUp9ls1x8N26QUw87p0OP+6tO YEV1UyIpvkcP8DEXf2Xe8DQm+J7whz4RRkvFBnO9UDCNgkhKlaBi/PhGC2dfIxja EvaRK35U1WgJyeTgnC56ZwDjmecOkemyJootlbCFcLseLhyPnGIpe3p2NpVt436d BFIpXPfHm+DXq8M5z58lyioFRab07Q8S9aoa2d1QwBUU9Vw+oijr7gWBzY0fm9x7 OyHLuvky4XtEk2QOuW6YbWOMck7Q9qs= -----END CERTIFICATE-----Generated at Mon May 5 12:26:16 2025 by rpki-client