$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5e14c82-013b-3640-8e11-6f848a477169.roa File: f5e14c82-013b-3640-8e11-6f848a477169.roa (raw, json) Hash identifier: SNfLtZ09lfh5ySaZB4kxQR/Vz1mEOntkXVF1ncmyrFU= Subject key identifier: 15:C8:30:5C:9B:77:2C:0F:4F:F0:60:E5:54:F8:5A:20:5F:4F:9D:5C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B69BE8EDC16F618D95C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5e14c82-013b-3640-8e11-6f848a477169.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.220.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b6:9b:e8:ed:c1:6f:61:8d:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=a66a86fb-a742-4115-a2ec-60636b435870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:96:31:87:a7:0f:03:21:ac:bf:4a:b6:c0:3b: 6a:7a:e9:1d:18:b4:c1:eb:72:fe:9e:e3:d0:25:b6: 6d:14:60:03:16:1d:0c:9a:ce:ad:6c:69:7b:fb:94: 15:dc:4b:76:3f:f7:58:f7:27:c5:83:54:48:0b:78: bd:36:6f:d0:48:aa:28:0a:eb:4c:e9:ea:4c:59:9c: b7:c0:80:02:16:27:35:42:b4:7a:bf:ba:51:58:57: 41:44:6a:23:16:4e:10:2d:35:6b:ef:8d:99:ce:95: a3:7f:f9:bb:2d:b3:41:77:46:8e:1e:f9:48:b5:a9: 80:fe:24:1f:2f:86:b5:c5:e0:2f:67:fa:d9:84:4f: e0:ec:15:db:c7:12:bd:2d:8b:c9:7d:38:cf:48:96: 80:eb:33:71:0b:2d:d7:5e:fc:78:34:57:b9:bb:af: 8f:91:44:e3:63:5a:d6:ed:3d:a0:b3:d8:38:37:41: a0:6d:d0:95:6b:80:5e:7b:f1:d6:a2:0d:72:dc:c1: 0b:bf:f7:be:c9:75:7e:59:cb:60:78:c5:32:b7:05: 32:be:64:df:53:3c:2a:72:38:8d:71:75:e8:da:50: 2d:99:17:6f:c6:e6:0b:86:32:4b:ef:b7:39:a3:86: 1c:46:2f:2b:e6:8d:d6:56:80:64:37:0a:0c:b0:e7: aa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C8:30:5C:9B:77:2C:0F:4F:F0:60:E5:54:F8:5A:20:5F:4F:9D:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5e14c82-013b-3640-8e11-6f848a477169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ae:89:f7:bf:fe:0b:25:a6:d4:4a:ef:4b:c2:3b:ec:83:e3: e7:30:2f:bd:b8:09:a7:a4:7c:b7:69:8e:e7:45:5b:81:e5:e1: c1:7c:3a:62:ca:3f:9e:41:d6:6b:c2:d5:8b:fc:21:92:42:cc: 6a:a3:8a:55:05:85:62:bc:f6:61:64:b9:73:9a:01:04:fe:bf: b9:7e:23:1e:b1:cb:a8:9f:cc:06:f4:a0:75:f4:8e:00:6f:c4: f0:ce:3e:2e:c1:db:e8:e1:a5:62:ae:ff:19:3e:e7:03:e2:69: 74:3f:d1:3f:96:09:d1:e4:ef:95:95:f9:31:b5:0a:a0:59:7a: 17:77:97:c0:df:db:95:37:b8:13:4e:5a:94:e7:79:27:1b:4a: ea:a0:66:fe:3b:5c:ea:fa:83:e4:b5:25:c8:18:1f:be:ab:3b: 15:eb:e1:78:d1:c7:5a:f1:f9:90:ca:16:37:63:cc:f3:ab:84: 05:37:db:ad:eb:8e:30:38:1e:8b:73:a9:07:47:17:20:d5:73: aa:92:31:ce:ee:42:08:e6:8e:0e:3f:ba:62:f2:7e:e7:74:9f: f9:d7:e7:f8:64:ee:59:fb:9b:c0:42:f8:c8:dc:5e:b0:66:fa: dd:90:90:89:c4:05:22:03:8f:3a:2b:c5:a1:e9:c3:ab:c4:ce: fb:68:66:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLab6O3Bb2GNlcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YTY2YTg2ZmItYTc0Mi00MTE1LWEyZWMtNjA2MzZiNDM1ODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJYxh6cPAyGsv0q2wDtqeukdGLTB63L+nuPQ JbZtFGADFh0Mms6tbGl7+5QV3Et2P/dY9yfFg1RIC3i9Nm/QSKooCutM6epMWZy3 wIACFic1QrR6v7pRWFdBRGojFk4QLTVr742ZzpWjf/m7LbNBd0aOHvlItamA/iQf L4a1xeAvZ/rZhE/g7BXbxxK9LYvJfTjPSJaA6zNxCy3XXvx4NFe5u6+PkUTjY1rW 7T2gs9g4N0GgbdCVa4Bee/HWog1y3MELv/e+yXV+WctgeMUytwUyvmTfUzwqcjiN cXXo2lAtmRdvxuYLhjJL77c5o4YcRi8r5o3WVoBkNwoMsOeqzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXIMFybdywPT/Bg5VT4WiBfT51cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjVlMTRjODItMDEzYi0z NjQwLThlMTEtNmY4NDhhNDc3MTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ylMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFauife//gslptRK70vCO+yD4+cwL724CaekfLdpjudFW4Hl4cF8OmLK P55B1mvC1Yv8IZJCzGqjilUFhWK89mFkuXOaAQT+v7l+Ix6xy6ifzAb0oHX0jgBv xPDOPi7B2+jhpWKu/xk+5wPiaXQ/0T+WCdHk75WV+TG1CqBZehd3l8Df25U3uBNO WpTneScbSuqgZv47XOr6g+S1JcgYH76rOxXr4XjRx1rx+ZDKFjdjzPOrhAU3263r jjA4HotzqQdHFyDVc6qSMc7uQgjmjg4/umLyfud0n/nX5/hk7ln7m8BC+MjcXrBm +t2QkInEBSIDjzorxaHpw6vEzvtoZuw= -----END CERTIFICATE-----Generated at Mon May 5 05:03:37 2025 by rpki-client