$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a70d41d-4a3f-32d8-97b3-3bee825909c2.roa File: 7a70d41d-4a3f-32d8-97b3-3bee825909c2.roa (raw, json) Hash identifier: r3cpJQy67mfZiS1kTqD8EsN8DYQgHgKIcRnkWSOau/w= Subject key identifier: 33:92:7D:A3:0B:F6:1D:C1:26:38:34:B4:56:23:3A:97:1A:5A:6F:41 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B40F3EE5EEF40C028B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a70d41d-4a3f-32d8-97b3-3bee825909c2.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 16625 IP address blocks: 23.223.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b4:0f:3e:e5:ee:f4:0c:02:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=4ae59639-919d-404e-8cd0-c3ef526cbfb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c0:98:31:de:c7:ac:81:18:04:a7:c1:85:f4: 3d:db:5c:33:9b:5b:99:3a:b2:87:95:02:3a:1c:9f: 5e:57:be:fe:b2:c1:ec:fa:66:a4:0f:9f:c8:3a:0c: c5:da:e1:3f:36:8e:f4:c6:3c:26:59:35:29:43:41: 40:49:9e:37:79:43:96:03:7a:be:5d:e3:7f:bc:ac: 90:ab:8a:cf:18:21:45:fe:5f:d3:62:fc:79:e4:1f: 4c:f7:8a:65:e3:1b:cc:7b:bb:95:5c:33:c2:1b:ee: 5d:76:1c:a4:a7:40:e1:d8:56:cf:a7:07:4e:1f:3c: 2c:8b:fe:be:df:cd:bc:89:ad:2b:57:c5:09:7a:6d: f8:db:ef:b9:a0:85:25:c0:03:76:fd:8a:f2:8a:d8: eb:19:89:7e:97:8a:c8:4f:6a:df:27:d2:4a:75:e3: 0a:28:d0:a9:b8:e9:2c:a3:fa:97:9c:ac:0b:cb:5a: f3:ae:c8:9d:aa:45:7e:59:3d:77:fd:06:30:84:58: b7:c3:35:84:3a:4f:a6:ce:2c:85:8d:39:68:db:fe: ed:8f:e5:8b:2c:78:6e:1a:36:11:df:ff:ab:d7:6b: 67:1c:49:43:3a:37:d3:a6:95:65:18:17:71:5b:18: 90:88:2e:84:1e:fe:84:b7:04:63:48:c6:35:49:49: b8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:92:7D:A3:0B:F6:1D:C1:26:38:34:B4:56:23:3A:97:1A:5A:6F:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a70d41d-4a3f-32d8-97b3-3bee825909c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:aa:a6:ec:2d:af:6a:cb:a9:84:e0:77:9d:a4:ce:ec:f9:3a: 2b:53:f4:fa:cd:57:48:3e:87:6a:aa:98:20:91:3c:44:8d:de: 3e:77:65:da:4d:36:17:94:a3:97:7b:03:d6:08:ee:cb:c7:27: d5:07:c8:37:7f:76:ee:04:ed:e3:3b:5f:15:91:be:66:28:dd: 5f:43:35:ef:93:fc:91:95:fa:00:f8:94:fc:68:76:80:c0:74: 36:8f:b0:9e:da:2c:c4:7d:32:3c:20:6a:68:7c:f0:82:b2:d2: 3b:41:74:33:1a:32:30:19:19:cd:b4:54:9b:24:81:e9:d0:31: 13:3e:20:31:3a:d1:c0:96:c9:60:91:88:03:d8:9f:7b:48:78: ff:b7:30:41:ba:54:50:5e:81:9f:c6:78:fa:5a:c0:4a:f9:42: 58:e6:c6:5b:93:68:9c:27:e5:41:5b:e9:b3:b6:c9:0d:b0:92: c7:5e:67:18:c3:a6:b7:9d:a8:95:42:a5:c6:84:46:af:66:3f: b5:4c:98:11:fe:44:c5:b3:5d:4c:f2:74:90:40:84:f8:60:de: d3:2e:95:b7:8c:46:7d:62:10:0c:d8:50:3c:e6:d8:57:16:8c: e2:a0:6b:a9:65:d5:f0:06:db:f7:ec:55:28:12:fd:3f:83:31: ce:dd:2c:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLQPPuXu9AwCi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NGFlNTk2MzktOTE5ZC00MDRlLThjZDAtYzNlZjUyNmNiZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocCYMd7HrIEYBKfBhfQ921wzm1uZOrKHlQI6 HJ9eV77+ssHs+makD5/IOgzF2uE/No70xjwmWTUpQ0FASZ43eUOWA3q+XeN/vKyQ q4rPGCFF/l/TYvx55B9M94pl4xvMe7uVXDPCG+5ddhykp0Dh2FbPpwdOHzwsi/6+ 3828ia0rV8UJem342++5oIUlwAN2/YryitjrGYl+l4rIT2rfJ9JKdeMKKNCpuOks o/qXnKwLy1rzrsidqkV+WT13/QYwhFi3wzWEOk+mziyFjTlo2/7tj+WLLHhuGjYR 3/+r12tnHElDOjfTppVlGBdxWxiQiC6EHv6EtwRjSMY1SUm49wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOSfaML9h3BJjg0tFYjOpcaWm9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2E3MGQ0MWQtNGEzZi0z MmQ4LTk3YjMtM2JlZTgyNTkwOWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSqpuwtr2rLqYTgd52kzuz5OitT9PrNV0g+h2qqmCCRPESN3j53ZdpN NheUo5d7A9YI7svHJ9UHyDd/du4E7eM7XxWRvmYo3V9DNe+T/JGV+gD4lPxodoDA dDaPsJ7aLMR9Mjwgamh88IKy0jtBdDMaMjAZGc20VJskgenQMRM+IDE60cCWyWCR iAPYn3tIeP+3MEG6VFBegZ/GePpawEr5QljmxluTaJwn5UFb6bO2yQ2wksdeZxjD predqJVCpcaERq9mP7VMmBH+RMWzXUzydJBAhPhg3tMulbeMRn1iEAzYUDzm2FcW jOKga6ll1fAG2/fsVSgS/T+DMc7dLJE= -----END CERTIFICATE-----Generated at Mon May 5 02:09:11 2025 by rpki-client