$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9cc3ddd9-6618-3d4f-b535-7bec252ef634.roa File: 9cc3ddd9-6618-3d4f-b535-7bec252ef634.roa (raw, json) Hash identifier: 43nkD7IdkFW+h29u0X78n6PazC/678UXtb0dft8lGT0= Subject key identifier: D8:9A:09:8C:25:EC:80:96:7C:7D:A3:F7:74:81:D2:CC:5E:6A:53:01 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B366A53D94105EAF2100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9cc3ddd9-6618-3d4f-b535-7bec252ef634.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.223.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b3:66:a5:3d:94:10:5e:af:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=2a4fec57-6c08-4ca8-8689-62fc95276e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d3:cc:7e:92:60:50:c7:7f:1c:f4:2f:af:5a: b6:05:27:90:31:ce:13:cb:e1:9b:9c:ef:9c:52:8c: 3f:60:58:6e:8f:c0:15:7d:79:0e:c0:7e:2a:36:7c: 78:9b:5d:46:d3:27:8f:4d:be:65:41:9e:f0:96:f3: e3:26:41:5c:4d:a1:8d:49:35:15:c1:24:33:ea:18: c2:98:92:85:91:a6:bb:eb:80:21:e6:f9:4d:0e:65: c0:81:71:80:38:39:40:ea:e3:fd:8c:0b:4c:88:b5: 1d:6e:c4:ef:d1:c2:8f:9a:9e:49:d5:d7:e1:8a:10: 00:dd:1f:ad:69:26:8a:f5:5c:bc:a9:10:7e:e5:f7: ca:df:d8:64:75:35:a4:ec:73:94:a6:44:3e:63:ec: f6:13:d6:9d:23:a5:97:8e:eb:de:03:2a:b3:5b:50: 7d:fd:4c:18:e5:ff:60:52:2f:54:90:1e:2c:cb:21: a9:54:da:29:ae:a2:30:26:7d:df:29:1e:ce:01:f0: 4d:65:6f:4d:31:cc:aa:51:a5:1f:9a:94:ec:b9:11: 30:a9:7f:90:be:ec:60:d4:81:3c:9b:ab:97:39:ff: 9a:17:fd:08:ad:8e:b2:76:e9:97:f8:a4:5a:76:d3: 8c:ec:89:29:9f:30:0f:4c:44:1f:19:c3:10:6b:7b: 9b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9A:09:8C:25:EC:80:96:7C:7D:A3:F7:74:81:D2:CC:5E:6A:53:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9cc3ddd9-6618-3d4f-b535-7bec252ef634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a4:64:fc:49:b3:53:03:1e:9f:e6:3f:7a:ba:45:44:bf:95: 14:9a:46:ac:8d:74:d4:8e:67:8f:f8:a0:4e:1f:88:12:31:21: a2:5c:d6:5a:a1:fa:90:f5:96:fa:b7:7d:b6:33:38:35:ba:b1: 5e:31:f9:5a:75:ae:c7:50:51:d2:8f:bc:93:e0:e0:d5:ad:5f: 2a:df:60:09:bf:05:88:ca:b7:e3:9b:21:ae:59:e2:d0:89:15: 86:f8:96:a9:00:69:70:53:0a:5e:ed:24:fc:73:06:32:ae:0e: e7:a1:41:21:73:a2:a7:5f:03:f1:91:41:fa:fb:f7:ec:fa:c4: 62:2d:4d:52:13:c9:b6:db:f8:17:9d:05:0b:34:78:09:d8:d8: f9:15:32:bb:ff:e9:0c:e7:98:d5:e3:f3:5f:fb:19:42:4e:bd: 2a:ba:f5:ef:cd:7a:da:78:a5:2d:6b:5a:f7:b1:a0:6e:b2:b1: 87:50:ff:aa:ad:16:1f:77:c8:db:cb:2d:2e:13:61:d2:83:52: 5c:db:60:7a:3b:4d:44:f0:0a:e0:66:c0:e1:4d:61:22:6c:3f: f5:56:d5:0e:c1:97:a8:4d:98:12:ea:a6:df:2c:5a:e7:b5:ba: c7:b7:e5:92:be:26:98:43:e2:87:8b:9c:10:0b:47:79:45:2b: 52:b8:b6:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLNmpT2UEF6vIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk MmE0ZmVjNTctNmMwOC00Y2E4LTg2ODktNjJmYzk1Mjc2ZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtPMfpJgUMd/HPQvr1q2BSeQMc4Ty+GbnO+c Uow/YFhuj8AVfXkOwH4qNnx4m11G0yePTb5lQZ7wlvPjJkFcTaGNSTUVwSQz6hjC mJKFkaa764Ah5vlNDmXAgXGAODlA6uP9jAtMiLUdbsTv0cKPmp5J1dfhihAA3R+t aSaK9Vy8qRB+5ffK39hkdTWk7HOUpkQ+Y+z2E9adI6WXjuveAyqzW1B9/UwY5f9g Ui9UkB4syyGpVNoprqIwJn3fKR7OAfBNZW9NMcyqUaUfmpTsuREwqX+Qvuxg1IE8 m6uXOf+aF/0IrY6ydumX+KRadtOM7IkpnzAPTEQfGcMQa3ubvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiaCYwl7ICWfH2j93SB0sxealMBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWNjM2RkZDktNjYxOC0z ZDRmLWI1MzUtN2JlYzI1MmVmNjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9/GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSkZPxJs1MDHp/mP3q6RUS/lRSaRqyNdNSOZ4/4oE4fiBIxIaJc1lqh +pD1lvq3fbYzODW6sV4x+Vp1rsdQUdKPvJPg4NWtXyrfYAm/BYjKt+ObIa5Z4tCJ FYb4lqkAaXBTCl7tJPxzBjKuDuehQSFzoqdfA/GRQfr79+z6xGItTVITybbb+Bed BQs0eAnY2PkVMrv/6QznmNXj81/7GUJOvSq69e/Netp4pS1rWvexoG6ysYdQ/6qt Fh93yNvLLS4TYdKDUlzbYHo7TUTwCuBmwOFNYSJsP/VW1Q7Bl6hNmBLqpt8sWue1 use35ZK+JphD4oeLnBALR3lFK1K4tq4= -----END CERTIFICATE-----Generated at Mon May 5 02:49:45 2025 by rpki-client