$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79760c8c-64bc-38a5-b132-95fa5b97d443.roa File: 79760c8c-64bc-38a5-b132-95fa5b97d443.roa (raw, json) Hash identifier: vNqii+08JG1AoOG8m4+0RgASXopSarQbYy65AAVuH6Q= Subject key identifier: 55:48:2E:30:1F:68:8B:1D:9E:80:EF:38:BC:CF:68:66:78:C1:79:C9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4AFAAEEBF298DFB428080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79760c8c-64bc-38a5-b132-95fa5b97d443.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 16625 IP address blocks: 23.221.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:af:aa:ee:bf:29:8d:fb:42:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=645412f4-af50-42d4-893b-203b2ad9d8a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:94:e5:29:a4:a3:17:3f:bc:cb:cc:a1:c8:54: f8:3d:93:bc:10:65:98:9b:e1:02:52:a1:37:5d:15: 64:b1:8a:dd:81:97:06:0c:b1:80:59:3f:f1:66:36: f3:4f:07:a9:6c:2b:ed:e1:74:13:fb:4b:db:29:d5: cc:30:53:3a:0a:11:1c:08:96:f6:44:d8:c8:07:a0: 1c:c6:20:42:b8:53:21:63:23:19:57:56:5e:1d:38: 8b:6f:d8:79:9e:35:22:83:f6:e2:ff:d8:e2:8a:8a: b3:0f:05:e5:fc:64:ea:c7:a2:0e:89:99:f5:a3:c9: aa:ba:6a:f4:0f:30:83:95:84:58:0c:94:4c:32:c4: 63:8d:d9:11:76:0f:68:5f:88:50:e4:36:f5:60:d9: f2:69:ca:91:76:33:18:eb:e8:6a:e0:cd:72:75:19: 53:87:96:b2:4f:d7:02:f7:ce:1e:de:cb:e0:b1:a2: 71:b9:a5:e5:b2:c9:6b:55:10:e9:88:3c:26:f8:a9: 15:0f:b5:27:35:a7:75:cf:53:d2:25:20:74:54:fa: bb:47:2d:0c:e1:81:0f:08:ef:8a:c9:1d:d6:b7:5c: 55:f3:92:2b:3c:77:2e:e7:fd:b9:18:c7:58:43:c2: 75:a4:4c:47:8f:da:d5:96:f7:bb:7d:c2:ab:7a:5f: 02:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:48:2E:30:1F:68:8B:1D:9E:80:EF:38:BC:CF:68:66:78:C1:79:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79760c8c-64bc-38a5-b132-95fa5b97d443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:a7:bd:6a:7f:7e:dc:47:b8:41:4d:99:8c:9c:cb:73:fc:6e: a6:35:60:61:b6:a0:9c:d4:e7:d0:8c:3f:d3:d7:76:88:9b:6a: 6e:65:89:6d:15:6e:65:22:02:39:46:a4:7c:8b:5b:34:09:21: 41:62:b3:d9:b1:ae:93:f2:75:ed:0b:bd:df:9f:6a:a1:17:5a: 38:08:3f:85:0a:b3:3a:35:75:06:78:d7:6a:f0:8b:15:b3:16: 36:f0:0c:91:15:22:9d:01:21:b9:a0:6b:89:a9:45:7c:60:1e: 7a:1d:79:f5:a9:24:ce:0b:30:7c:11:fa:c7:30:54:71:08:49: fb:1a:27:b6:30:6a:57:23:26:56:7f:e4:10:ee:2d:4d:b6:48: 00:72:f2:05:9b:01:2d:99:94:23:77:7c:86:8f:fe:e8:a5:9c: e6:e4:ca:68:2b:1b:59:e2:7d:ef:b6:05:b3:d0:08:ac:2b:42: 91:19:19:37:6e:f9:9e:c1:f2:6d:b9:c7:ec:9b:5b:84:ba:b5: e8:45:75:08:19:95:ef:fb:7f:01:a4:12:73:ad:41:28:de:33: d4:61:19:5b:dd:87:48:13:06:c7:15:3d:92:e8:b7:ce:f1:34: 6d:34:93:07:11:94:b9:12:d0:83:f2:a4:c6:96:1f:d3:9b:4f: 89:66:db:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtK+q7r8pjftCgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NjQ1NDEyZjQtYWY1MC00MmQ0LTg5M2ItMjAzYjJhZDlkOGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15TlKaSjFz+8y8yhyFT4PZO8EGWYm+ECUqE3 XRVksYrdgZcGDLGAWT/xZjbzTwepbCvt4XQT+0vbKdXMMFM6ChEcCJb2RNjIB6Ac xiBCuFMhYyMZV1ZeHTiLb9h5njUig/bi/9jiioqzDwXl/GTqx6IOiZn1o8mqumr0 DzCDlYRYDJRMMsRjjdkRdg9oX4hQ5Db1YNnyacqRdjMY6+hq4M1ydRlTh5ayT9cC 984e3svgsaJxuaXlsslrVRDpiDwm+KkVD7UnNad1z1PSJSB0VPq7Ry0M4YEPCO+K yR3Wt1xV85IrPHcu5/25GMdYQ8J1pExHj9rVlve7fcKrel8CYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVILjAfaIsdnoDvOLzPaGZ4wXnJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzk3NjBjOGMtNjRiYy0z OGE1LWIxMzItOTVmYTViOTdkNDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF90kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWnvWp/ftxHuEFNmYycy3P8bqY1YGG2oJzU59CMP9PXdoibam5liW0V bmUiAjlGpHyLWzQJIUFis9mxrpPyde0Lvd+faqEXWjgIP4UKszo1dQZ412rwixWz FjbwDJEVIp0BIbmga4mpRXxgHnodefWpJM4LMHwR+scwVHEISfsaJ7YwalcjJlZ/ 5BDuLU22SABy8gWbAS2ZlCN3fIaP/uilnObkymgrG1nife+2BbPQCKwrQpEZGTdu +Z7B8m25x+ybW4S6tehFdQgZle/7fwGkEnOtQSjeM9RhGVvdh0gTBscVPZLot87x NG00kwcRlLkS0IPypMaWH9ObT4lm2+o= -----END CERTIFICATE-----Generated at Mon May 5 12:57:30 2025 by rpki-client