$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afca91f2-ee2d-3e67-a450-5371895a5a3c.roa File: afca91f2-ee2d-3e67-a450-5371895a5a3c.roa (raw, json) Hash identifier: gpIlLtrRrUY5GyT6n3OsGoTTBGAToVZe2Tp32NyBVQM= Subject key identifier: 6F:E5:E9:1A:E5:A6:F0:7F:2D:6E:88:B6:FE:11:CE:09:91:83:D5:E2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B0351E7E1EA970195430 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afca91f2-ee2d-3e67-a450-5371895a5a3c.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.221.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b0:35:1e:7e:1e:a9:70:19:54:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=d26eaabb-0b9a-494f-85d3-412b8b67223f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f5:b8:06:86:66:5d:98:fd:f6:92:75:00:98: fa:a2:6b:cc:f2:75:6f:85:56:f2:dc:e0:4b:d1:16: c9:a8:ad:06:95:0d:ce:61:ec:98:cc:b3:c2:89:d4: 18:b0:2b:e0:1c:fb:21:d5:9b:e9:8c:0b:44:4c:2c: a4:27:58:a8:68:0d:4b:65:de:f7:72:09:f7:8d:e7: 6d:b1:35:b5:4c:e3:23:f4:53:78:00:17:db:43:04: cb:f5:ef:69:63:ee:37:23:4c:85:a7:fb:83:eb:06: b4:c8:48:1b:e1:9c:7c:1b:d4:cf:95:07:35:9d:db: d9:1f:04:59:c5:5b:47:69:55:56:78:c0:36:c8:7f: e3:9e:db:c6:9e:79:a6:30:7a:3a:63:d8:ca:0b:95: ca:54:d2:6e:af:7a:ec:6b:46:1d:10:50:81:8e:7e: 84:e9:94:56:af:64:d2:f2:3a:82:78:18:76:36:41: be:df:23:06:0b:90:94:6e:89:db:79:63:96:ee:b9: d9:2b:f0:f4:90:92:37:c1:9b:7b:ec:45:65:55:04: 81:b5:63:a7:cf:d0:fc:98:03:cf:bc:fa:21:23:7b: cf:1a:56:dd:7f:fa:1e:df:fe:9f:b0:2b:55:c1:f0: 76:b9:9c:27:ce:8a:f9:26:b7:2c:69:e7:1e:24:79: 10:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E5:E9:1A:E5:A6:F0:7F:2D:6E:88:B6:FE:11:CE:09:91:83:D5:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afca91f2-ee2d-3e67-a450-5371895a5a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e2:ba:0b:4b:cb:03:07:84:4b:c8:19:58:a1:97:dd:fe:11: 7f:f2:21:f3:99:f0:b2:a1:65:f0:27:78:07:ca:7a:d1:45:13: 2e:ae:a6:2b:9f:78:e9:d4:9b:16:a0:8b:8e:a3:60:54:e3:12: 6e:43:c1:83:98:96:4d:ae:06:b4:04:e6:6c:8b:d1:2e:6a:8c: 74:5b:a9:fb:a6:c3:e4:cd:60:b5:60:ff:54:a4:61:7f:3c:b6: 98:99:69:30:ef:53:9b:bd:c3:dd:60:3b:63:9d:db:92:db:2b: 8b:3a:16:32:6a:59:cc:22:22:bb:86:cb:37:99:1a:92:98:45: 29:80:42:db:ec:b4:4e:2b:61:93:57:16:86:bc:da:aa:49:a2: 6f:ff:33:0b:1a:dd:78:1f:cb:e7:68:d9:b2:5b:14:4b:f0:67: d8:59:54:ae:39:72:7d:fb:58:49:32:8e:c0:1e:2c:1a:39:3b: 98:df:8c:90:97:95:c0:e4:4c:11:ca:a5:34:87:dc:38:3f:50: 10:14:0b:c3:ae:2b:a8:d0:ee:4c:3b:0f:05:56:15:01:98:d1: 38:d8:dd:c5:81:ff:d1:b6:8f:25:be:19:b3:ee:84:5b:66:41: bc:12:30:bf:45:1d:72:61:27:16:9f:b9:31:8b:90:3c:73:ca: e2:00:52:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLA1Hn4eqXAZVDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ZDI2ZWFhYmItMGI5YS00OTRmLTg1ZDMtNDEyYjhiNjcyMjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfW4BoZmXZj99pJ1AJj6omvM8nVvhVby3OBL 0RbJqK0GlQ3OYeyYzLPCidQYsCvgHPsh1ZvpjAtETCykJ1ioaA1LZd73cgn3jedt sTW1TOMj9FN4ABfbQwTL9e9pY+43I0yFp/uD6wa0yEgb4Zx8G9TPlQc1ndvZHwRZ xVtHaVVWeMA2yH/jntvGnnmmMHo6Y9jKC5XKVNJur3rsa0YdEFCBjn6E6ZRWr2TS 8jqCeBh2NkG+3yMGC5CUbonbeWOW7rnZK/D0kJI3wZt77EVlVQSBtWOnz9D8mAPP vPohI3vPGlbdf/oe3/6fsCtVwfB2uZwnzor5JrcsaeceJHkQkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/l6RrlpvB/LW6Itv4RzgmRg9XiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWZjYTkxZjItZWUyZC0z ZTY3LWE0NTAtNTM3MTg5NWE1YTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF93UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFziugtLywMHhEvIGVihl93+EX/yIfOZ8LKhZfAneAfKetFFEy6upiuf eOnUmxagi46jYFTjEm5DwYOYlk2uBrQE5myL0S5qjHRbqfumw+TNYLVg/1SkYX88 tpiZaTDvU5u9w91gO2Od25LbK4s6FjJqWcwiIruGyzeZGpKYRSmAQtvstE4rYZNX Foa82qpJom//Mwsa3Xgfy+do2bJbFEvwZ9hZVK45cn37WEkyjsAeLBo5O5jfjJCX lcDkTBHKpTSH3Dg/UBAUC8OuK6jQ7kw7DwVWFQGY0TjY3cWB/9G2jyW+GbPuhFtm QbwSML9FHXJhJxafuTGLkDxzyuIAUiY= -----END CERTIFICATE-----Generated at Mon May 5 04:23:26 2025 by rpki-client