$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f00faaec-a0b8-3eb0-9ab3-813483f02a54.roa File: f00faaec-a0b8-3eb0-9ab3-813483f02a54.roa (raw, json) Hash identifier: Zp1ShN/3qr7oCSP8CXm7gjv3Wg4fFECTj2wETlueskg= Subject key identifier: 47:9F:67:7D:C5:11:1F:0A:E0:7A:44:6C:EF:16:6D:53:95:B3:13:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B63E27E99768DCB54400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f00faaec-a0b8-3eb0-9ab3-813483f02a54.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 16625 IP address blocks: 23.220.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b6:3e:27:e9:97:68:dc:b5:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=4a19fff0-08b4-4c2c-8135-556bd0268073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:18:52:62:e4:5c:6b:8b:cb:60:79:75:f5:c6: 8e:60:97:2e:80:61:00:ff:b9:32:50:b8:77:20:77: 64:06:e0:eb:70:b7:af:41:77:ac:39:fd:4b:01:7c: b3:7d:3f:a8:ef:c3:b3:d4:24:cb:6d:74:90:9f:10: d9:a9:e3:64:ed:7a:af:59:aa:ea:6b:4a:aa:50:41: 1a:f8:70:00:4d:31:7f:1d:93:c3:a7:13:a9:89:14: 23:a4:d5:b7:be:c3:ad:6f:7b:3a:df:ce:11:d8:2c: 95:ef:df:04:d2:16:d5:f4:0d:e9:7c:10:2c:82:22: 49:ac:d7:cf:0c:22:b0:96:82:81:d4:84:18:a8:7d: b0:27:e5:68:9d:a9:7b:a2:72:86:18:49:09:46:5b: 09:bf:6e:57:7e:4f:fd:63:c2:05:8f:a2:e0:2a:5c: e9:09:51:d9:01:fb:ab:d4:8a:e2:ef:bd:42:d0:1f: ed:0c:60:e1:2f:79:6a:44:9c:4e:db:e0:0b:d3:6f: 90:bf:92:28:8f:bc:c7:a3:d5:59:d1:7b:dd:51:8e: 0e:1d:b0:c0:3e:ef:20:02:59:8d:e8:ce:67:70:a4: 66:77:c1:b6:25:23:d9:fe:6d:1a:01:f0:10:19:e9: 6f:d7:a6:c5:73:c2:51:7d:b0:c1:33:55:ec:be:54: 77:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9F:67:7D:C5:11:1F:0A:E0:7A:44:6C:EF:16:6D:53:95:B3:13:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f00faaec-a0b8-3eb0-9ab3-813483f02a54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:2e:cd:02:7d:1d:57:6c:1a:13:14:18:b9:a5:08:3e:36:a1: fd:07:de:bc:6d:6e:33:ec:c3:6d:17:51:a2:ba:2c:b6:f8:48: 73:fe:8d:ad:d9:95:b0:26:9b:fb:f1:c6:2d:13:b6:fb:ce:44: c0:a0:e1:c4:d4:d6:91:8b:fa:35:92:8b:82:dc:3b:3b:fa:e1: dc:23:e8:3e:fa:2a:89:77:e6:de:1c:1c:7b:27:84:1f:17:c3: 1a:78:7c:7a:a9:b1:45:39:c9:8b:3f:cd:5c:22:e6:c7:70:bd: 98:55:32:30:9d:ca:56:1e:97:37:01:1f:c7:7e:cc:02:29:39: 54:25:6f:53:9f:66:fa:e4:47:0c:02:f6:7c:19:62:e8:a2:be: 8b:59:a1:7e:fd:61:71:58:97:51:6f:dd:9b:e2:38:5a:e6:60: c3:7c:6e:09:15:ec:e2:49:48:48:b2:90:d0:92:f4:3c:c2:b2: 79:9b:63:30:01:3f:a3:4d:d3:69:38:23:60:58:b2:a9:d2:c1: b1:b7:35:4f:0d:1f:63:40:b5:9d:5c:98:05:74:39:65:10:ee: 84:7c:8b:06:e4:16:6b:e7:fb:d8:3c:3b:09:02:c5:4a:1c:02: 7e:5f:41:95:0c:28:22:01:b9:da:0f:ec:4f:dd:a6:ee:be:b2: 7b:28:fc:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLY+J+mXaNy1RAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NGExOWZmZjAtMDhiNC00YzJjLTgxMzUtNTU2YmQwMjY4MDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBhSYuRca4vLYHl19caOYJcugGEA/7kyULh3 IHdkBuDrcLevQXesOf1LAXyzfT+o78Oz1CTLbXSQnxDZqeNk7XqvWarqa0qqUEEa +HAATTF/HZPDpxOpiRQjpNW3vsOtb3s6384R2CyV798E0hbV9A3pfBAsgiJJrNfP DCKwloKB1IQYqH2wJ+Vonal7onKGGEkJRlsJv25Xfk/9Y8IFj6LgKlzpCVHZAfur 1Iri771C0B/tDGDhL3lqRJxO2+AL02+Qv5Ioj7zHo9VZ0XvdUY4OHbDAPu8gAlmN 6M5ncKRmd8G2JSPZ/m0aAfAQGelv16bFc8JRfbDBM1XsvlR3HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEefZ33FER8K4HpEbO8WbVOVsxP7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjAwZmFhZWMtYTBiOC0z ZWIwLTlhYjMtODEzNDgzZjAyYTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9x8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUuzQJ9HVdsGhMUGLmlCD42of0H3rxtbjPsw20XUaK6LLb4SHP+ja3Z lbAmm/vxxi0TtvvORMCg4cTU1pGL+jWSi4LcOzv64dwj6D76Kol35t4cHHsnhB8X wxp4fHqpsUU5yYs/zVwi5sdwvZhVMjCdylYelzcBH8d+zAIpOVQlb1OfZvrkRwwC 9nwZYuiivotZoX79YXFYl1Fv3ZviOFrmYMN8bgkV7OJJSEiykNCS9DzCsnmbYzAB P6NN02k4I2BYsqnSwbG3NU8NH2NAtZ1cmAV0OWUQ7oR8iwbkFmvn+9g8OwkCxUoc An5fQZUMKCIBudoP7E/dpu6+snso/N8= -----END CERTIFICATE-----Generated at Tue May 6 03:13:01 2025 by rpki-client