$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bcb20e3-ed27-3793-be38-71c427150d21.roa File: 8bcb20e3-ed27-3793-be38-71c427150d21.roa (raw, json) Hash identifier: 3bAVv03I2+olTzAw45H49cLRzvlsUmXsfkLDmMelRDM= Subject key identifier: E5:00:DB:3C:01:9D:DE:8F:65:F8:60:6C:08:51:76:BC:5F:5D:7F:A0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498769B6EB10F3A7CFC1642C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bcb20e3-ed27-3793-be38-71c427150d21.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 9299 IP address blocks: 23.221.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:b6:eb:10:f3:a7:cf:c1:64:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=f614b384-54e4-47b3-a844-6712c54fc127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3a:85:02:5b:c5:5f:b3:16:27:1b:fd:46:4d: c8:e2:bc:f3:3c:b8:e5:4b:7c:89:3f:b1:9c:6d:f0: 4b:3c:68:92:1b:0a:68:bf:0d:25:a6:30:d9:a9:ac: 4b:92:90:40:eb:c9:b4:91:55:b0:c6:08:7f:a1:d0: e4:14:cb:c4:f0:94:b2:e4:20:78:60:77:9f:15:d2: 91:01:d3:04:ac:a5:61:e9:d9:20:2f:76:7b:68:95: 96:3f:f6:94:69:ce:01:56:a4:21:11:2e:02:17:2e: e5:2b:3d:7f:b3:2d:34:23:d9:70:51:88:61:c7:9e: b4:79:b4:95:4a:ee:92:f4:59:1b:97:12:1d:63:19: 16:2c:e3:91:90:ed:2c:4c:59:b4:f9:f5:55:22:bb: b1:15:89:e6:a9:cc:20:ca:40:26:25:76:d8:a2:b2: f8:5d:69:78:96:2a:e7:33:8c:49:44:ae:d1:4c:5f: f6:14:d5:fc:35:8a:4a:2f:e6:3a:de:e1:1e:23:c4: 88:aa:4d:b9:a9:d1:ae:87:f9:8c:9f:2c:bf:d5:82: c8:5c:22:b8:37:d4:2b:b7:f2:24:13:84:43:1a:ac: b2:25:54:98:99:21:cd:d8:d9:bc:17:bd:f3:08:03: ec:bb:6c:41:63:a5:d1:b3:27:7d:90:27:32:c5:5b: 88:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:00:DB:3C:01:9D:DE:8F:65:F8:60:6C:08:51:76:BC:5F:5D:7F:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bcb20e3-ed27-3793-be38-71c427150d21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:6b:ae:ac:d1:9c:af:1f:ea:43:91:e7:38:94:24:ad:28:01: d2:ff:c2:04:3b:6e:c2:29:a0:f4:e5:9b:97:bc:02:13:10:9a: ac:b0:f6:d9:85:c5:fe:3b:85:ec:d1:6d:a6:70:b4:82:ad:87: 70:0b:b1:77:a2:d6:10:ae:18:1d:aa:8a:5a:c6:be:7b:e9:3c: 7a:01:bd:e3:ba:89:9a:fc:8f:37:e6:06:dc:76:56:f4:42:95: f2:23:4a:3b:b0:87:ea:42:78:1f:ad:2c:d1:2b:84:37:e7:7f: 9a:30:99:cd:a2:d1:34:31:77:be:fe:bf:d3:5a:6c:37:41:80: 1f:b2:f2:29:58:06:70:f7:14:74:fb:b7:4b:8b:a6:eb:e0:3f: 86:7b:7f:40:ca:47:29:37:15:f6:14:f8:f7:b3:cf:0f:7f:3a: c8:bf:b8:48:30:44:65:dc:4f:19:e1:84:93:a8:9c:86:62:e0: 9b:52:8f:8e:0a:fd:f0:f3:4a:6e:82:28:55:24:e0:7d:04:89: 57:e6:f0:6e:ab:a2:6a:3c:c3:a3:8d:26:33:7b:9e:d0:7a:29: e7:01:de:73:84:03:7c:c8:25:bc:94:ee:f2:80:66:fb:c6:94: ab:de:59:5d:37:8a:11:dd:cf:51:e1:67:09:d8:49:b0:08:65: 7a:93:19:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHabbrEPOnz8FkLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ZjYxNGIzODQtNTRlNC00N2IzLWE4NDQtNjcxMmM1NGZjMTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljqFAlvFX7MWJxv9Rk3I4rzzPLjlS3yJP7Gc bfBLPGiSGwpovw0lpjDZqaxLkpBA68m0kVWwxgh/odDkFMvE8JSy5CB4YHefFdKR AdMErKVh6dkgL3Z7aJWWP/aUac4BVqQhES4CFy7lKz1/sy00I9lwUYhhx560ebSV Su6S9FkblxIdYxkWLOORkO0sTFm0+fVVIruxFYnmqcwgykAmJXbYorL4XWl4lirn M4xJRK7RTF/2FNX8NYpKL+Y63uEeI8SIqk25qdGuh/mMnyy/1YLIXCK4N9Qrt/Ik E4RDGqyyJVSYmSHN2Nm8F73zCAPsu2xBY6XRsyd9kCcyxVuIEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUA2zwBnd6PZfhgbAhRdrxfXX+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGJjYjIwZTMtZWQyNy0z NzkzLWJlMzgtNzFjNDI3MTUwZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF91wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJrrqzRnK8f6kOR5ziUJK0oAdL/wgQ7bsIpoPTlm5e8AhMQmqyw9tmF xf47hezRbaZwtIKth3ALsXei1hCuGB2qilrGvnvpPHoBveO6iZr8jzfmBtx2VvRC lfIjSjuwh+pCeB+tLNErhDfnf5owmc2i0TQxd77+v9NabDdBgB+y8ilYBnD3FHT7 t0uLpuvgP4Z7f0DKRyk3FfYU+Pezzw9/Osi/uEgwRGXcTxnhhJOonIZi4JtSj44K /fDzSm6CKFUk4H0EiVfm8G6romo8w6ONJjN7ntB6KecB3nOEA3zIJbyU7vKAZvvG lKveWV03ihHdz1HhZwnYSbAIZXqTGWg= -----END CERTIFICATE-----Generated at Sun May 11 03:47:30 2025 by rpki-client