$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af0d45a8-cd5e-3d90-ab9a-bc4d908a1446.roa File: af0d45a8-cd5e-3d90-ab9a-bc4d908a1446.roa (raw, json) Hash identifier: 1uxldr3IQksXVtWY795oytD4MrKYUXz8md5tL/zJoVc= Subject key identifier: 38:FC:39:62:43:A6:40:4E:67:C8:EC:9E:47:9C:AE:DB:0B:77:9B:03 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4BA5BF5B3229C06817060 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af0d45a8-cd5e-3d90-ab9a-bc4d908a1446.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.222.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:ba:5b:f5:b3:22:9c:06:81:70:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=fc4e5f11-c5ec-498d-ba04-25a9e622258b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c5:20:ea:bd:e2:ae:98:a7:1f:ec:77:77:73: 8a:4b:e9:92:22:2a:fa:a8:8f:ac:03:d9:16:98:95: e8:dd:9c:93:0e:a4:89:ff:4c:02:2d:a8:9b:2c:1e: 2a:88:65:28:d8:97:a8:51:e6:00:62:42:17:7c:56: 39:e8:a2:17:3b:41:41:8e:74:93:a6:42:1c:90:c8: 9f:a7:e3:f6:97:75:55:70:97:ea:e7:97:f4:32:fa: 0f:dc:e9:e8:00:c8:8a:9e:bb:c1:52:bb:bc:b7:a1: c7:c6:d7:f1:85:d7:15:bb:a4:5a:03:48:3d:bf:da: 0c:b5:f9:da:82:41:67:2f:69:ef:89:13:49:9d:a8: 9b:c7:72:45:af:a8:a7:a7:b5:23:a3:70:cf:5c:df: 0d:b7:b8:85:02:e1:ab:00:d2:33:8c:12:e6:50:8b: 89:06:75:fe:6b:73:92:91:c9:5a:cb:b3:62:e5:86: 67:71:d4:44:d3:bc:19:fe:eb:76:2b:5e:42:e4:21: 2e:54:9a:48:cb:9b:e0:8c:82:96:c0:fb:ae:ba:b3: 55:f4:2c:c1:f4:d8:11:4d:b1:15:7d:6e:ea:58:67: 79:f1:c4:89:be:6d:6b:62:da:82:cf:9a:c1:4a:0b: f9:86:15:47:36:01:82:bd:32:0b:d7:a5:e9:3b:10: 48:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:FC:39:62:43:A6:40:4E:67:C8:EC:9E:47:9C:AE:DB:0B:77:9B:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af0d45a8-cd5e-3d90-ab9a-bc4d908a1446.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:39:6a:40:c3:b5:26:c9:12:1d:9b:61:7e:d9:a7:d1:fe:73: 33:94:97:2e:09:22:b3:b5:fb:6e:61:6c:4a:11:11:97:ea:32: a1:ad:1d:05:1f:d9:f5:f6:bb:b4:cb:59:a6:ea:fc:41:56:cd: 59:b4:b1:59:f2:f4:f6:0e:1c:8d:f1:8a:a5:92:f5:15:77:c6: f4:d3:50:00:79:fb:dd:bd:69:a9:fd:37:b2:e7:44:c0:ae:1d: c9:47:b0:e2:cc:3d:4f:57:4c:74:31:10:54:4f:ec:92:fe:46: 16:d7:2f:e4:c1:e5:85:6f:fc:7f:2f:db:e4:cf:37:da:e4:9f: da:23:cb:cd:92:3d:9b:3c:6f:44:84:e5:1d:87:86:b2:d3:2f: 81:84:6d:fe:80:2f:09:15:dd:48:35:91:d6:5f:68:09:16:1a: f6:41:f6:cf:85:53:18:ec:32:49:f9:b7:a5:86:93:cd:c6:e4: 92:cf:70:1d:96:58:ad:b0:4a:36:27:fa:15:c1:3c:27:3e:a0: 89:1f:a9:0d:ff:a9:9a:57:0f:c1:81:1d:22:a0:a2:8f:ac:88: a8:4d:b1:66:24:db:22:78:0f:07:c8:01:5e:17:87:82:b1:e6: 20:4b:d1:c0:08:48:dd:6b:a5:1c:53:ca:1f:ff:f2:7e:5d:cc: b8:f2:a0:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLpb9bMinAaBcGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ZmM0ZTVmMTEtYzVlYy00OThkLWJhMDQtMjVhOWU2MjIyNThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMUg6r3irpinH+x3d3OKS+mSIir6qI+sA9kW mJXo3ZyTDqSJ/0wCLaibLB4qiGUo2JeoUeYAYkIXfFY56KIXO0FBjnSTpkIckMif p+P2l3VVcJfq55f0MvoP3OnoAMiKnrvBUru8t6HHxtfxhdcVu6RaA0g9v9oMtfna gkFnL2nviRNJnaibx3JFr6inp7Ujo3DPXN8Nt7iFAuGrANIzjBLmUIuJBnX+a3OS kclay7Ni5YZncdRE07wZ/ut2K15C5CEuVJpIy5vgjIKWwPuuurNV9CzB9NgRTbEV fW7qWGd58cSJvm1rYtqCz5rBSgv5hhVHNgGCvTIL16XpOxBIEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDj8OWJDpkBOZ8jsnkecrtsLd5sDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWYwZDQ1YTgtY2Q1ZS0z ZDkwLWFiOWEtYmM0ZDkwOGExNDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF97yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB85akDDtSbJEh2bYX7Zp9H+czOUly4JIrO1+25hbEoREZfqMqGtHQUf 2fX2u7TLWabq/EFWzVm0sVny9PYOHI3xiqWS9RV3xvTTUAB5+929aan9N7LnRMCu HclHsOLMPU9XTHQxEFRP7JL+RhbXL+TB5YVv/H8v2+TPN9rkn9ojy82SPZs8b0SE 5R2HhrLTL4GEbf6ALwkV3Ug1kdZfaAkWGvZB9s+FUxjsMkn5t6WGk83G5JLPcB2W WK2wSjYn+hXBPCc+oIkfqQ3/qZpXD8GBHSKgoo+siKhNsWYk2yJ4DwfIAV4Xh4Kx 5iBL0cAISN1rpRxTyh//8n5dzLjyoMQ= -----END CERTIFICATE-----Generated at Mon May 5 04:05:58 2025 by rpki-client