$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4d8475b-dc8a-3980-b250-ef3c99c18a2e.roa File: c4d8475b-dc8a-3980-b250-ef3c99c18a2e.roa (raw, json) Hash identifier: 6UbxkrBwzZ79HZRJaqlj33NSvp+WnDZfazPDJy8rL94= Subject key identifier: 11:9D:53:8E:61:C0:3C:9C:1F:3E:5F:43:6B:9B:4A:4F:8A:4C:43:C1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B7850A2F3CAEA013E700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4d8475b-dc8a-3980-b250-ef3c99c18a2e.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.220.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b7:85:0a:2f:3c:ae:a0:13:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=aabfec54-1dae-4cd3-b30e-501a9cddb316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7d:79:bb:87:f9:3a:22:e9:42:f6:ae:60:93: 67:79:ae:d4:bd:8e:97:e7:29:99:70:d4:55:2d:fe: 76:43:42:9e:79:56:ba:66:b9:7e:5e:c4:81:db:9f: 40:1e:27:f7:e0:b3:25:8b:03:94:fe:09:cc:ec:4f: b6:de:b2:20:4d:16:af:e6:a3:7b:55:90:ed:96:fe: fb:8d:2a:2a:fa:41:97:2d:89:a9:c0:9f:f0:5e:cf: 8a:12:8c:95:93:8a:a2:6a:e1:c0:2d:8d:2d:7d:77: 49:e7:07:21:99:82:5d:86:ef:d9:a3:17:67:11:ad: 79:a5:97:4b:a8:f1:34:8e:60:56:b5:ed:a3:e1:0d: a1:65:3e:4c:1c:b5:c2:66:e3:cb:9c:c2:12:ee:78: 5c:8b:f2:8d:ad:3d:06:4b:3e:19:18:65:87:f4:14: 8e:41:98:7c:1f:0c:27:cd:37:1d:ee:cc:ca:8b:d3: fc:b4:3e:fb:85:85:08:20:32:de:12:c2:c9:72:4e: 40:f9:29:0b:2f:18:a9:24:5e:c7:67:ee:db:02:55: bf:2b:e0:be:85:19:96:e8:7f:42:e7:db:ea:78:71: 6e:33:1c:e0:0e:04:46:39:1d:ff:4e:c5:dc:27:f0: df:18:1d:2e:23:58:d2:ca:1d:75:89:54:79:11:85: 9a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9D:53:8E:61:C0:3C:9C:1F:3E:5F:43:6B:9B:4A:4F:8A:4C:43:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4d8475b-dc8a-3980-b250-ef3c99c18a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:cf:32:b0:37:45:39:29:3c:1c:35:71:f8:9a:bd:47:77:d2: 92:25:31:9a:79:9b:2a:ee:31:32:93:8b:71:80:ef:a9:61:09: 7f:7f:38:ed:0d:2a:b4:ce:99:8d:d5:01:71:e7:56:28:ff:c2: b4:6d:c5:2f:ca:97:f6:99:d4:41:f1:90:ca:3e:38:a0:89:e9: 9e:92:91:ff:74:a0:e8:e4:45:74:d4:78:61:6f:30:9d:8c:cd: f9:d6:53:0c:e2:5a:55:ef:7d:35:d6:d0:28:8d:bb:76:b2:b1: e6:9c:cd:80:ad:ab:92:d6:93:56:7a:98:cc:cf:f1:7b:b2:cc: 44:bf:3c:7a:0d:87:f6:e8:78:03:42:b7:a9:cd:a4:f6:85:a8: 2c:e9:24:2c:91:35:c2:67:1f:ab:5d:3f:60:39:41:00:c9:05: ca:fb:5b:0b:0f:c1:d1:84:4f:36:47:d9:c8:b2:37:58:5b:c7: 47:ea:2a:e7:73:e6:67:05:d5:2b:af:83:d5:d9:66:9c:99:30: 23:54:fb:43:01:4e:56:6b:e7:de:b0:8f:b3:2f:b5:13:af:1d: ec:fe:4c:33:fc:6b:ba:84:5f:88:06:ec:e0:98:12:61:99:26: 66:81:6f:b0:00:cb:0a:19:cb:02:03:0d:52:0e:c4:c5:0a:c9: df:8d:04:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLeFCi88rqAT5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YWFiZmVjNTQtMWRhZS00Y2QzLWIzMGUtNTAxYTljZGRiMzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH15u4f5OiLpQvauYJNnea7UvY6X5ymZcNRV Lf52Q0KeeVa6Zrl+XsSB259AHif34LMliwOU/gnM7E+23rIgTRav5qN7VZDtlv77 jSoq+kGXLYmpwJ/wXs+KEoyVk4qiauHALY0tfXdJ5wchmYJdhu/ZoxdnEa15pZdL qPE0jmBWte2j4Q2hZT5MHLXCZuPLnMIS7nhci/KNrT0GSz4ZGGWH9BSOQZh8Hwwn zTcd7szKi9P8tD77hYUIIDLeEsLJck5A+SkLLxipJF7HZ+7bAlW/K+C+hRmW6H9C 59vqeHFuMxzgDgRGOR3/TsXcJ/DfGB0uI1jSyh11iVR5EYWaRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGdU45hwDycHz5fQ2ubSk+KTEPBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzRkODQ3NWItZGM4YS0z OTgwLWIyNTAtZWYzYzk5YzE4YTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9z7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnPMrA3RTkpPBw1cfiavUd30pIlMZp5myruMTKTi3GA76lhCX9/OO0N KrTOmY3VAXHnVij/wrRtxS/Kl/aZ1EHxkMo+OKCJ6Z6Skf90oOjkRXTUeGFvMJ2M zfnWUwziWlXvfTXW0CiNu3ayseaczYCtq5LWk1Z6mMzP8XuyzES/PHoNh/boeANC t6nNpPaFqCzpJCyRNcJnH6tdP2A5QQDJBcr7WwsPwdGETzZH2ciyN1hbx0fqKudz 5mcF1Suvg9XZZpyZMCNU+0MBTlZr596wj7MvtROvHez+TDP8a7qEX4gG7OCYEmGZ JmaBb7AAywoZywIDDVIOxMUKyd+NBOI= -----END CERTIFICATE-----Generated at Mon May 5 07:45:32 2025 by rpki-client