$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/813a5ad6-be31-37cb-80ca-83d56b916e9f.roa File: 813a5ad6-be31-37cb-80ca-83d56b916e9f.roa (raw, json) Hash identifier: k7ZhvrEBhB5ZSMweexFsB3t4Xx67CzAo6AbkabWenpQ= Subject key identifier: 21:5E:58:1D:1E:7A:11:6F:E1:40:8B:09:BF:2E:47:38:02:0A:6A:DE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B051D91EB0AD1B393FE7 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/813a5ad6-be31-37cb-80ca-83d56b916e9f.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.221.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b0:51:d9:1e:b0:ad:1b:39:3f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=fdf709f7-3ef7-403c-9ea1-c26b5b97ed76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:67:47:2b:56:60:a9:45:6d:f7:0d:af:85:6e: c7:71:ae:a0:93:22:37:54:b7:d7:0f:ad:d5:78:0c: db:91:b8:c9:6f:3c:92:05:19:31:fe:a8:15:87:3d: 67:57:65:70:9d:7a:03:49:40:f0:9f:a4:9d:23:e5: fc:5f:21:53:54:95:1e:43:76:da:cc:9f:ce:f6:8f: 26:7e:09:c6:1c:c0:2d:be:cf:52:4c:69:6a:70:e0: ba:a3:0b:f8:18:17:0e:90:5c:f0:51:1a:de:59:80: 0f:39:cc:63:e4:85:0c:0c:37:dd:ed:69:9f:37:de: 06:83:95:f1:9d:d4:62:e1:81:b6:bb:f3:65:63:c1: 28:d6:7e:22:5c:93:1c:f7:0e:26:cc:de:25:b2:b7: 86:d2:5a:97:58:6c:c2:2f:08:75:9b:50:6f:b5:9b: e5:82:76:2e:67:7e:a1:80:7e:7c:ba:a4:74:3e:09: 04:01:ef:4b:12:e2:d0:00:83:99:2d:ea:26:55:76: 83:f4:12:4a:c1:3c:25:23:36:75:0d:ae:b9:48:c9: c9:38:30:6a:99:32:0f:b6:f6:6b:85:6b:fc:f4:7e: 80:9e:c8:9d:0f:b0:af:a3:31:26:1a:ac:2d:0b:91: bc:6e:0c:44:f0:d7:a9:40:41:91:c3:f0:b4:f4:93: 97:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5E:58:1D:1E:7A:11:6F:E1:40:8B:09:BF:2E:47:38:02:0A:6A:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/813a5ad6-be31-37cb-80ca-83d56b916e9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:8f:9a:5c:1c:2f:d9:e7:ab:c1:5d:cd:6d:e1:bb:5b:31:f2: 5d:00:03:f5:0a:49:c1:a6:b6:d7:a3:5c:f7:6e:dc:9a:e7:24: 8a:10:84:bd:22:66:c6:d6:99:b1:bf:03:f6:a0:81:27:93:20: 56:ea:30:a4:23:ac:a7:6c:2a:e9:f3:f0:38:f7:15:a6:a8:79: 33:8b:98:af:5d:92:24:22:16:45:3c:db:1b:76:f6:3a:16:b3: 72:d6:df:a3:c3:28:b6:af:0b:a9:6f:ed:d3:d3:c1:a6:5e:1e: 23:d9:d1:a1:00:b1:3e:70:79:05:24:e7:c7:07:e1:9a:f9:2c: a6:63:a5:ad:a9:13:a5:0b:50:63:5f:76:ce:19:77:e4:46:be: 63:08:d6:89:88:0e:92:18:e1:42:15:fa:9a:e2:40:10:ee:80: ee:07:a6:d8:58:2f:0f:4c:c8:ca:74:ff:6a:5c:37:eb:f7:00: df:c5:9b:01:63:f4:d2:6a:5b:b1:f0:98:08:e0:8d:f2:f6:ad: 29:67:5e:6c:ba:4a:d5:11:ab:9b:dc:03:82:76:8b:10:57:73: 1f:e7:76:74:63:c4:3b:06:3b:91:8f:34:9f:21:6e:47:da:21: a4:a1:05:8b:bd:eb:6f:54:2f:58:14:dc:90:3c:96:9f:d1:da: 22:f8:5f:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLBR2R6wrRs5P+cwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ZmRmNzA5ZjctM2VmNy00MDNjLTllYTEtYzI2YjViOTdlZDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWdHK1ZgqUVt9w2vhW7Hca6gkyI3VLfXD63V eAzbkbjJbzySBRkx/qgVhz1nV2VwnXoDSUDwn6SdI+X8XyFTVJUeQ3bazJ/O9o8m fgnGHMAtvs9STGlqcOC6owv4GBcOkFzwURreWYAPOcxj5IUMDDfd7WmfN94Gg5Xx ndRi4YG2u/NlY8Eo1n4iXJMc9w4mzN4lsreG0lqXWGzCLwh1m1BvtZvlgnYuZ36h gH58uqR0PgkEAe9LEuLQAIOZLeomVXaD9BJKwTwlIzZ1Da65SMnJODBqmTIPtvZr hWv89H6AnsidD7CvozEmGqwtC5G8bgxE8NepQEGRw/C09JOXTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFeWB0eehFv4UCLCb8uRzgCCmreMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODEzYTVhZDYtYmUzMS0z N2NiLTgwY2EtODNkNTZiOTE2ZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF93XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWPmlwcL9nnq8FdzW3hu1sx8l0AA/UKScGmttejXPdu3JrnJIoQhL0i ZsbWmbG/A/aggSeTIFbqMKQjrKdsKunz8Dj3FaaoeTOLmK9dkiQiFkU82xt29joW s3LW36PDKLavC6lv7dPTwaZeHiPZ0aEAsT5weQUk58cH4Zr5LKZjpa2pE6ULUGNf ds4Zd+RGvmMI1omIDpIY4UIV+priQBDugO4HpthYLw9MyMp0/2pcN+v3AN/FmwFj 9NJqW7HwmAjgjfL2rSlnXmy6StURq5vcA4J2ixBXcx/ndnRjxDsGO5GPNJ8hbkfa IaShBYu9629UL1gU3JA8lp/R2iL4X/M= -----END CERTIFICATE-----Generated at Thu May 8 07:56:10 2025 by rpki-client