$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/167902a4-2a5a-374e-a6bc-96e8517d4e24.roa File: 167902a4-2a5a-374e-a6bc-96e8517d4e24.roa (raw, json) Hash identifier: k9w7SF/3WBTb+EgHmknWJepInW2s2ND+p++FCWuSZ9Q= Subject key identifier: 9E:82:FA:E1:6D:E2:36:D6:4F:CD:E2:A8:D2:3B:AA:02:8D:D7:00:26 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496CE475B24C14E162CDA1D4A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/167902a4-2a5a-374e-a6bc-96e8517d4e24.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.57.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:75:b2:4c:14:e1:62:cd:a1:d4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=fe62eaaf-a289-490c-9429-8b7086b00282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:43:ca:41:b7:fb:bc:de:21:64:e1:f7:0d:67: ae:10:28:10:bf:4a:bd:60:86:68:45:e9:c7:c7:b8: c7:eb:40:6d:f2:5e:be:11:5e:86:6c:f9:5b:63:10: 9c:e1:36:e5:89:35:06:32:68:1a:f6:86:c0:1c:ec: c7:fe:10:e6:99:ed:c8:a6:ab:57:4f:b0:f6:59:0d: 03:11:ef:e8:ca:f7:79:3f:64:6d:d4:8f:98:44:35: 8d:d3:ba:fa:bc:10:f1:cf:5c:f1:0b:c8:c7:47:70: 92:a2:0b:be:78:42:2b:f2:de:de:b9:00:e6:3b:87: 09:f6:68:79:b2:e1:a7:e9:86:0e:9f:de:23:34:75: bb:4c:0b:b5:bf:6b:a1:44:ba:e4:59:2c:15:53:ee: ac:13:8c:40:03:7e:8c:cb:89:52:cd:a9:fa:f6:7d: df:04:9d:88:65:78:bf:5f:34:71:b4:1b:ae:96:4a: a6:1e:27:1c:5e:c3:fe:b3:d5:0e:fb:d7:91:00:5b: fa:67:30:aa:f7:f4:ae:c3:ce:83:ef:95:8a:97:ef: 87:23:0d:c1:89:9a:fd:41:24:18:88:19:c8:9a:10: e6:73:c9:67:50:0e:eb:88:8f:63:b2:56:84:ec:56: da:69:c0:22:38:9d:0c:50:7b:ff:d9:01:1c:1e:fc: 8c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:82:FA:E1:6D:E2:36:D6:4F:CD:E2:A8:D2:3B:AA:02:8D:D7:00:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/167902a4-2a5a-374e-a6bc-96e8517d4e24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.57.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:d1:16:e1:6c:71:8d:9e:bf:55:7c:97:57:55:67:22:94:ac: 7e:ed:ee:eb:aa:ba:ee:7a:ba:54:9f:81:b7:1a:9d:44:47:99: 76:88:4d:c0:86:1b:9c:8d:e3:bd:95:82:59:3b:5c:64:80:2f: 4a:84:a8:87:a3:f8:2b:31:b5:a9:58:64:62:c6:03:de:4c:8d: ae:fc:64:46:3c:d7:e7:de:d7:f3:c4:77:f7:8f:91:0c:cf:97: da:fe:3c:91:53:f5:a6:26:ce:f7:8d:59:1a:9b:72:c1:f1:0b: c7:1c:50:9b:34:36:a5:5f:18:44:7e:53:70:e5:cf:64:bb:9f: 25:8f:18:34:45:ba:2b:d4:a7:ba:74:50:a2:43:08:f1:a4:21: 47:bd:63:37:5d:b7:2c:a1:21:56:5c:f8:e2:36:3b:7e:00:27: 99:96:46:70:60:af:80:ed:b8:e7:b1:4b:ed:aa:2d:07:bf:53: 3c:15:12:c2:cd:10:6e:17:a3:ec:d5:1b:c5:ec:eb:04:d4:6f: 40:25:53:46:3f:b3:00:5e:54:5b:02:cb:77:9e:16:71:5b:91: e5:ac:ea:64:8c:02:fa:34:d6:11:29:be:3f:ea:2c:ca:04:41: 46:3f:f2:d6:03:60:4f:ec:84:df:4e:da:2e:53:6c:99:b1:76: 23:36:a6:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5HWyTBThYs2h1KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk ZmU2MmVhYWYtYTI4OS00OTBjLTk0MjktOGI3MDg2YjAwMjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUPKQbf7vN4hZOH3DWeuECgQv0q9YIZoRenH x7jH60Bt8l6+EV6GbPlbYxCc4TbliTUGMmga9obAHOzH/hDmme3IpqtXT7D2WQ0D Ee/oyvd5P2Rt1I+YRDWN07r6vBDxz1zxC8jHR3CSogu+eEIr8t7euQDmO4cJ9mh5 suGn6YYOn94jNHW7TAu1v2uhRLrkWSwVU+6sE4xAA36My4lSzan69n3fBJ2IZXi/ XzRxtBuulkqmHiccXsP+s9UO+9eRAFv6ZzCq9/Suw86D75WKl++HIw3BiZr9QSQY iBnImhDmc8lnUA7riI9jslaE7FbaacAiOJ0MUHv/2QEcHvyMYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6C+uFt4jbWT83iqNI7qgKN1wAmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTY3OTAyYTQtMmE1YS0z NzRlLWE2YmMtOTZlODUxN2Q0ZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzl0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3RFuFscY2ev1V8l1dVZyKUrH7t7uuquu56ulSfgbcanURHmXaITcCG G5yN472Vglk7XGSAL0qEqIej+CsxtalYZGLGA95Mja78ZEY81+fe1/PEd/ePkQzP l9r+PJFT9aYmzveNWRqbcsHxC8ccUJs0NqVfGER+U3Dlz2S7nyWPGDRFuivUp7p0 UKJDCPGkIUe9YzddtyyhIVZc+OI2O34AJ5mWRnBgr4DtuOexS+2qLQe/UzwVEsLN EG4Xo+zVG8Xs6wTUb0AlU0Y/swBeVFsCy3eeFnFbkeWs6mSMAvo01hEpvj/qLMoE QUY/8tYDYE/shN9O2i5TbJmxdiM2pvA= -----END CERTIFICATE-----Generated at Sat Apr 26 19:08:13 2025 by rpki-client