$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/debff5e7-473a-3baf-8918-f20a68eb7fe5.roa File: debff5e7-473a-3baf-8918-f20a68eb7fe5.roa (raw, json) Hash identifier: fu7Xogxsu/B8iZRtVfEsTtNED3hg95UwUXZjp2laXo0= Subject key identifier: 02:D8:D9:A6:87:C4:5B:86:1C:B6:45:BF:59:16:D8:83:4A:BD:32:B2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B589A3223A374265E280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/debff5e7-473a-3baf-8918-f20a68eb7fe5.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.220.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b5:89:a3:22:3a:37:42:65:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=0e5dc7d3-954f-4648-b5ce-387662bff4eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:10:a5:03:d0:ee:21:a0:80:68:d7:81:79:a7: 20:14:05:fc:93:a3:58:4d:cb:e1:f9:d8:73:a8:59: 19:3f:dc:35:4f:82:91:4a:48:2d:17:a7:a7:ed:92: 52:1b:c4:27:a2:93:38:ae:37:85:af:74:38:6e:73: 5e:cd:0f:27:57:94:e6:9a:df:5b:a9:c5:7c:8b:e7: 7f:c7:c1:b8:dc:43:98:d3:0e:ef:f1:f0:dd:ac:64: 35:c8:80:13:a6:e2:1d:b5:8a:ec:1b:24:68:8c:94: 01:23:9e:fe:f6:86:1f:0e:46:27:53:31:93:a1:0f: a6:0f:3d:6e:3b:27:06:40:0a:4f:19:f0:bd:1b:49: 22:6d:41:e1:e4:d5:a2:4b:32:ce:03:7f:0a:94:42: 95:35:12:c0:b4:66:5d:d1:a0:81:38:ad:c0:51:d8: 3c:81:72:2e:fd:dc:7d:3d:7c:f8:68:3b:53:08:d8: ba:7c:4a:cd:2b:6c:07:86:df:ad:47:ba:5d:97:ea: d9:f1:d8:33:24:35:60:f9:cf:5b:19:89:78:83:2b: 01:81:d1:1b:db:b1:fc:71:8b:bb:7e:9c:a3:99:4c: cc:27:a9:44:f2:ba:cc:d6:2b:0d:20:aa:78:fe:56: 11:42:55:ed:a9:db:ae:31:98:53:d9:0e:32:cc:07: 33:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D8:D9:A6:87:C4:5B:86:1C:B6:45:BF:59:16:D8:83:4A:BD:32:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/debff5e7-473a-3baf-8918-f20a68eb7fe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:86:7c:b8:0b:23:80:a7:4f:02:94:b8:d6:33:cd:fc:29:63: 67:a6:6b:6b:73:1d:57:c9:b9:0b:e5:c6:57:ba:aa:78:fe:1e: 6d:fb:85:25:79:dc:a8:72:e7:d2:c8:0d:1d:b2:00:49:7f:05: a5:1d:3b:02:90:c1:78:49:cf:b4:44:27:bc:98:48:5b:4c:ad: 60:32:97:bd:eb:3d:dd:ce:9f:53:fd:c8:8f:04:4a:0a:60:73: fe:2e:2e:c1:a0:66:a9:d6:7d:5d:c4:c2:7c:0b:f1:bc:03:fd: f9:e6:14:03:8a:0c:ae:6f:0e:81:ac:ce:1d:51:95:c2:23:62: 37:0a:67:b4:ee:bf:5a:12:d0:f1:c2:c6:79:b6:cc:ff:e8:ee: 2c:da:bd:b4:81:1e:90:73:e8:a3:3f:fb:c0:28:6b:64:13:40: 56:ed:07:eb:38:6b:79:e5:5a:3c:77:9e:7e:28:cd:2f:57:77: c8:4c:a5:c9:cd:cd:e9:4c:96:b7:9a:7d:bd:69:94:b0:a0:54: 84:9d:ce:12:90:3a:0c:52:fc:4d:00:4e:ed:c6:ad:b8:8c:a5: 23:e3:8a:58:b6:d9:50:7d:2e:88:18:2b:44:00:77:20:a1:a6: e5:36:39:b1:88:4b:39:34:2b:80:6b:5f:b4:8f:18:2c:5a:2d: 48:c7:19:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLWJoyI6N0Jl4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk MGU1ZGM3ZDMtOTU0Zi00NjQ4LWI1Y2UtMzg3NjYyYmZmNGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBClA9DuIaCAaNeBeacgFAX8k6NYTcvh+dhz qFkZP9w1T4KRSkgtF6en7ZJSG8QnopM4rjeFr3Q4bnNezQ8nV5Tmmt9bqcV8i+d/ x8G43EOY0w7v8fDdrGQ1yIATpuIdtYrsGyRojJQBI57+9oYfDkYnUzGToQ+mDz1u OycGQApPGfC9G0kibUHh5NWiSzLOA38KlEKVNRLAtGZd0aCBOK3AUdg8gXIu/dx9 PXz4aDtTCNi6fErNK2wHht+tR7pdl+rZ8dgzJDVg+c9bGYl4gysBgdEb27H8cYu7 fpyjmUzMJ6lE8rrM1isNIKp4/lYRQlXtqduuMZhT2Q4yzAczOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALY2aaHxFuGHLZFv1kW2INKvTKyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGViZmY1ZTctNDczYS0z YmFmLTg5MTgtZjIwYTY4ZWI3ZmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9xLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeGfLgLI4CnTwKUuNYzzfwpY2ema2tzHVfJuQvlxle6qnj+Hm37hSV5 3Khy59LIDR2yAEl/BaUdOwKQwXhJz7REJ7yYSFtMrWAyl73rPd3On1P9yI8ESgpg c/4uLsGgZqnWfV3EwnwL8bwD/fnmFAOKDK5vDoGszh1RlcIjYjcKZ7Tuv1oS0PHC xnm2zP/o7izavbSBHpBz6KM/+8Aoa2QTQFbtB+s4a3nlWjx3nn4ozS9Xd8hMpcnN zelMlreafb1plLCgVISdzhKQOgxS/E0ATu3GrbiMpSPjili22VB9LogYK0QAdyCh puU2ObGISzk0K4BrX7SPGCxaLUjHGew= -----END CERTIFICATE-----Generated at Mon May 5 01:54:25 2025 by rpki-client