$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b51c6f46-437f-3da3-9b80-6b36736d55c3.roa File: b51c6f46-437f-3da3-9b80-6b36736d55c3.roa (raw, json) Hash identifier: cXfqJ/sub8iPvJmPBk7Q4f1kLFog3js/31OKlSiNJ7A= Subject key identifier: 6F:2C:99:F5:D5:94:D8:8C:3C:E7:B8:AC:39:35:AE:85:1A:D9:0D:F1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B2E25F5DF11FC3AC6500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b51c6f46-437f-3da3-9b80-6b36736d55c3.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.223.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b2:e2:5f:5d:f1:1f:c3:ac:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=5c7cc2f6-4190-4b7c-a611-fc9f537c611d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:20:b5:8a:2f:65:b7:a4:50:37:08:73:e4:21: 52:86:07:bd:50:63:1b:7d:95:b7:e3:6e:ef:4a:2b: 43:c1:f7:e3:76:e7:b2:00:33:54:7b:e6:ba:6b:3e: 1a:2a:54:41:a8:be:43:fd:9c:66:11:aa:97:47:75: 85:72:85:6c:8c:18:e6:ab:71:7b:ec:b6:96:cc:3f: 71:db:e2:4e:24:65:62:dc:e1:2d:3a:d0:d7:37:3d: 71:34:ac:79:32:50:5f:81:e4:de:a4:65:76:c7:71: 47:c8:07:cd:8c:1b:11:21:e9:72:d9:c7:9f:7e:ca: 88:28:8c:5f:5d:3c:17:c6:d6:7e:fc:79:1d:e5:be: 9d:85:46:d7:2a:96:93:59:ac:d5:d8:c6:ac:57:b0: 10:bb:9c:6c:af:87:ea:12:12:66:9e:cc:f3:ee:82: da:d1:4e:fa:b1:70:83:21:ff:a3:86:79:95:c6:6c: dd:81:02:4b:da:ce:bc:f6:26:13:8c:29:7d:a4:34: c5:bc:b3:90:94:59:19:0d:4e:56:74:51:64:d9:e5: 37:f1:ec:17:cb:2d:7e:8f:1f:d7:90:dc:a3:65:07: 45:3e:8f:26:75:92:64:3a:9c:8e:5b:3e:18:ee:c7: 93:b3:18:92:b4:13:d5:bf:d0:53:e2:59:80:9f:8b: 0f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2C:99:F5:D5:94:D8:8C:3C:E7:B8:AC:39:35:AE:85:1A:D9:0D:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b51c6f46-437f-3da3-9b80-6b36736d55c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:13:d8:d2:6d:21:a3:3a:4c:18:ac:87:9d:06:93:2b:ee:ec: a2:bc:e4:f1:75:13:92:76:3c:fb:1b:3e:49:59:4f:93:f2:c2: 5c:76:7e:ed:ed:94:da:3b:cc:9f:12:69:b2:dd:50:7f:62:1c: 82:b5:07:1f:4e:bf:4d:8c:18:27:3e:b3:26:ac:ea:43:53:70: 16:b6:d6:c2:cb:bd:0c:fe:7b:bf:1d:69:c0:2c:20:46:a9:bd: 29:b6:53:fb:40:47:43:12:83:ee:09:e4:bd:e9:a1:eb:5d:52: 37:66:ca:a8:99:8c:dc:c5:56:0a:c6:0d:a1:9d:74:d0:cd:48: 27:05:c5:ef:02:ab:dd:bc:35:37:58:c2:12:57:95:47:32:83: 96:42:f0:9e:5c:7b:36:e9:e8:a6:a4:86:4a:24:1d:b3:f4:04: bd:81:9d:56:2b:f6:5a:85:85:41:fe:a1:59:2e:95:df:50:ef: c9:13:63:11:8f:51:f4:86:c5:d5:b8:e9:43:23:f0:e3:e0:2e: 66:2c:c4:c0:2a:ae:e1:ed:3e:0e:cb:f1:2b:7f:32:77:ec:cf: f1:37:1e:20:51:49:95:64:f1:7a:aa:5a:2c:bc:ee:d4:72:ec: 02:cb:b5:30:09:ff:99:f6:e3:86:60:f4:a5:3a:c7:f8:c9:16: 3b:dd:0f:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLLiX13xH8OsZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NWM3Y2MyZjYtNDE5MC00YjdjLWE2MTEtZmM5ZjUzN2M2MTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryC1ii9lt6RQNwhz5CFShge9UGMbfZW3427v SitDwffjdueyADNUe+a6az4aKlRBqL5D/ZxmEaqXR3WFcoVsjBjmq3F77LaWzD9x 2+JOJGVi3OEtOtDXNz1xNKx5MlBfgeTepGV2x3FHyAfNjBsRIely2ceffsqIKIxf XTwXxtZ+/Hkd5b6dhUbXKpaTWazV2MasV7AQu5xsr4fqEhJmnszz7oLa0U76sXCD If+jhnmVxmzdgQJL2s689iYTjCl9pDTFvLOQlFkZDU5WdFFk2eU38ewXyy1+jx/X kNyjZQdFPo8mdZJkOpyOWz4Y7seTsxiStBPVv9BT4lmAn4sPkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8smfXVlNiMPOe4rDk1roUa2Q3xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjUxYzZmNDYtNDM3Zi0z ZGEzLTliODAtNmIzNjczNmQ1NWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF990MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkT2NJtIaM6TBish50Gkyvu7KK85PF1E5J2PPsbPklZT5Pywlx2fu3t lNo7zJ8SabLdUH9iHIK1Bx9Ov02MGCc+syas6kNTcBa21sLLvQz+e78dacAsIEap vSm2U/tAR0MSg+4J5L3poetdUjdmyqiZjNzFVgrGDaGddNDNSCcFxe8Cq928NTdY whJXlUcyg5ZC8J5cezbp6KakhkokHbP0BL2BnVYr9lqFhUH+oVkuld9Q78kTYxGP UfSGxdW46UMj8OPgLmYsxMAqruHtPg7L8St/Mnfsz/E3HiBRSZVk8XqqWiy87tRy 7ALLtTAJ/5n244Zg9KU6x/jJFjvdD48= -----END CERTIFICATE-----Generated at Mon May 5 06:06:49 2025 by rpki-client