$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8dec52ba-1e76-3838-9cab-89c2dc18c99f.roa File: 8dec52ba-1e76-3838-9cab-89c2dc18c99f.roa (raw, json) Hash identifier: rp0XzKibJJGk0xSRcj7YPI/6cF1dbrVgNyS7nhZnR54= Subject key identifier: 92:CC:BF:06:F8:65:DE:7B:1C:70:FC:8F:2F:ED:37:04:DE:D8:E5:BA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B5969F1752217B779300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8dec52ba-1e76-3838-9cab-89c2dc18c99f.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.220.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b5:96:9f:17:52:21:7b:77:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=2e7116c0-f3df-47c2-a8db-7d49aa892269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8c:c3:02:8d:1f:9b:40:c3:26:b5:64:4a:38: 35:e5:2c:f7:84:15:4e:62:c2:25:81:83:30:36:07: ab:a4:b6:0d:bd:71:a0:06:dc:6e:29:f5:aa:99:59: aa:06:fa:de:9d:73:75:99:fd:80:e6:17:75:5b:52: 4d:ff:ef:3a:9f:a3:43:a9:80:44:a3:01:e4:2c:60: ab:9d:a2:e2:9e:34:d8:ba:e9:9a:3b:51:f1:9c:79: 3d:7a:d8:c1:bc:c2:f8:14:65:08:5a:b5:cf:f4:39: 4e:0a:65:fd:59:66:5d:96:f6:aa:c2:28:69:84:00: a7:85:6d:06:c2:d9:97:4c:b1:6f:a0:e8:2d:81:f7: 85:de:b3:73:5a:d9:04:58:13:be:8e:95:b3:dd:73: 53:28:ca:fe:13:47:bd:35:e0:e0:de:02:96:78:be: 7a:3a:2b:c8:75:4a:67:4e:77:2c:c6:ad:ef:e0:ad: 99:3a:dd:24:78:f8:8f:55:c2:c1:10:f2:52:eb:6d: bd:14:e0:0f:e8:62:7f:f0:5e:8d:31:98:59:36:24: 87:3a:89:a7:dd:ef:bf:e8:46:bf:d1:cc:62:f6:e8: 0f:c2:ce:85:4c:9a:a5:a5:cc:66:aa:b6:72:1b:c7: 13:02:20:46:87:75:1f:b2:b0:52:b1:5f:c9:9c:45: 7e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CC:BF:06:F8:65:DE:7B:1C:70:FC:8F:2F:ED:37:04:DE:D8:E5:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8dec52ba-1e76-3838-9cab-89c2dc18c99f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c7:b2:56:be:4b:a8:d6:4f:c3:5d:15:2c:cb:49:76:51:ff: c4:e5:fd:06:f3:6b:3e:12:ce:0c:a7:e1:a9:7e:ae:fe:28:e2: 45:1d:07:5f:18:41:37:03:1e:92:ae:49:bc:0d:86:2b:4e:7b: e1:2d:5f:08:09:fa:70:2b:7f:97:2f:ec:07:10:21:ed:67:38: 65:4b:04:47:0f:08:19:93:df:ad:3a:86:10:90:9f:09:12:8f: 83:fa:cd:9f:3f:32:c5:3f:f4:0b:b5:2a:8f:fc:93:77:72:03: e9:95:85:39:37:5e:93:a6:23:3e:0f:5b:70:0e:c9:7e:50:9e: 6e:fd:b5:5b:69:18:7b:52:64:60:f0:05:48:e0:7b:bd:87:e3: 28:57:1f:43:a7:c0:f1:ca:39:dc:a0:81:37:02:c4:4a:35:0e: 57:6d:20:3e:04:00:06:f1:85:89:f3:36:34:91:1f:8a:b4:e5: 3e:81:63:d0:23:0d:66:b7:97:48:bd:6f:d8:c7:c7:9e:83:50: 78:92:81:37:69:b7:45:21:c5:a8:d6:79:71:89:da:d7:41:2b: de:74:d1:79:98:60:d2:61:bf:87:07:a2:91:d0:0c:df:13:8a: 64:ac:a7:c9:bb:f0:00:e4:b6:f2:98:df:18:f8:b7:49:88:31: 13:14:e1:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLWWnxdSIXt3kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk MmU3MTE2YzAtZjNkZi00N2MyLWE4ZGItN2Q0OWFhODkyMjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIzDAo0fm0DDJrVkSjg15Sz3hBVOYsIlgYMw NgerpLYNvXGgBtxuKfWqmVmqBvrenXN1mf2A5hd1W1JN/+86n6NDqYBEowHkLGCr naLinjTYuumaO1HxnHk9etjBvML4FGUIWrXP9DlOCmX9WWZdlvaqwihphACnhW0G wtmXTLFvoOgtgfeF3rNzWtkEWBO+jpWz3XNTKMr+E0e9NeDg3gKWeL56OivIdUpn Tncsxq3v4K2ZOt0kePiPVcLBEPJS6229FOAP6GJ/8F6NMZhZNiSHOomn3e+/6Ea/ 0cxi9ugPws6FTJqlpcxmqrZyG8cTAiBGh3UfsrBSsV/JnEV+fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLMvwb4Zd57HHD8jy/tNwTe2OW6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGRlYzUyYmEtMWU3Ni0z ODM4LTljYWItODljMmRjMThjOTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9xNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrHsla+S6jWT8NdFSzLSXZR/8Tl/Qbzaz4Szgyn4al+rv4o4kUdB18Y QTcDHpKuSbwNhitOe+EtXwgJ+nArf5cv7AcQIe1nOGVLBEcPCBmT3606hhCQnwkS j4P6zZ8/MsU/9Au1Ko/8k3dyA+mVhTk3XpOmIz4PW3AOyX5Qnm79tVtpGHtSZGDw BUjge72H4yhXH0OnwPHKOdyggTcCxEo1DldtID4EAAbxhYnzNjSRH4q05T6BY9Aj DWa3l0i9b9jHx56DUHiSgTdpt0UhxajWeXGJ2tdBK9500XmYYNJhv4cHopHQDN8T imSsp8m78ADktvKY3xj4t0mIMRMU4Qo= -----END CERTIFICATE-----Generated at Mon May 5 01:54:04 2025 by rpki-client