$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d12df14-b2fd-3ea2-93a9-4ab07f163d28.roa File: 1d12df14-b2fd-3ea2-93a9-4ab07f163d28.roa (raw, json) Hash identifier: SIS0DRlrHf0HynkaXoEgGgcDGEffVZi6Cx1WS+UvBVA= Subject key identifier: AA:A7:AF:06:0A:5A:73:8E:15:FC:C2:1B:B7:54:DE:29:23:C6:DF:1D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF3F833AD2AC0F01BBCD98 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d12df14-b2fd-3ea2-93a9-4ab07f163d28.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.215.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:3f:83:3a:d2:ac:0f:01:bb:cd:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=70986a74-68c9-42d8-8121-1a7b63f83930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5f:82:91:59:65:79:82:70:09:34:3f:3c:96: df:0c:91:8a:e3:4f:cb:f9:45:19:0b:f8:14:75:9b: 7a:88:cf:fe:0a:31:96:02:eb:86:b1:e6:00:65:0e: e7:5c:3a:c5:ce:fe:c5:50:6a:9e:b1:c4:97:74:92: 22:44:06:2a:b2:30:82:cf:a0:bc:da:50:3e:6b:dd: 1a:72:82:ab:47:a0:90:7e:b7:e7:da:4a:e6:d0:7e: 44:d6:78:87:d6:c0:27:e2:e5:39:95:d4:95:38:11: a2:73:9e:e6:f9:fb:a6:a5:66:76:20:9a:ed:4f:5c: ed:cb:15:95:ce:4e:44:32:90:7b:11:46:2b:e3:e7: 67:8f:bb:6b:6e:b7:c2:dd:7c:9e:3e:ba:d0:40:58: 0a:cb:99:87:6d:c3:88:7d:b0:03:ad:1f:64:cf:80: 02:3f:8a:37:c3:28:51:9c:bd:19:30:c9:a6:78:a6: ef:38:e2:96:97:0a:ef:57:38:65:97:9a:f4:54:01: 50:a5:cf:08:69:ea:0a:62:c4:ae:b9:85:11:06:c8: 65:28:af:b2:12:6a:53:45:1a:cc:e8:b8:02:7f:95: 08:99:0c:fc:52:c8:eb:5c:f6:46:25:46:95:76:b4: e2:84:3b:3f:8b:eb:08:67:10:04:0e:c2:12:90:95: 76:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A7:AF:06:0A:5A:73:8E:15:FC:C2:1B:B7:54:DE:29:23:C6:DF:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d12df14-b2fd-3ea2-93a9-4ab07f163d28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:9d:fe:44:a4:88:e4:1c:dd:12:ec:19:4a:29:72:96:c9:28: 02:9b:f1:c9:59:7e:ab:08:95:a6:e9:e1:6b:18:c0:ac:ea:59: bf:92:b2:64:a5:3d:64:64:8a:5f:37:45:5d:aa:4c:7e:83:d8: 79:a1:b6:24:e1:3d:99:b4:d8:c3:aa:71:30:6e:d7:c2:9a:08: 60:9c:4d:97:fc:bc:84:77:43:f7:bc:a9:c2:ec:99:a1:7e:0d: e6:dc:ea:4f:c3:51:c8:63:2c:89:37:fd:9d:15:f9:e4:ca:75: 09:1c:e8:77:48:e5:c9:0d:9a:d8:02:02:25:f7:d7:1d:0f:8f: e8:ee:44:a4:bd:21:53:35:fe:58:cb:a7:79:f7:2b:e0:de:d8: 79:44:87:f0:e0:1b:fe:60:83:9c:03:05:b7:2a:4a:5b:68:1a: 25:31:49:8a:d4:b0:9c:f0:a3:3b:2a:4c:8f:52:2c:51:77:13: c5:19:97:9b:0c:38:69:2e:e0:99:fa:99:06:a1:2d:3a:3f:52: dc:05:43:e0:81:3e:9c:df:95:4e:7f:0b:e4:57:c0:e4:60:a3: 3c:2d:00:46:77:41:67:d8:c1:04:7f:72:de:3b:fd:58:38:b2: 2f:a8:9b:29:e4:4c:55:92:d4:38:b7:c0:fa:41:a2:93:e0:36: 50:62:ac:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvz+DOtKsDwG7zZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NzA5ODZhNzQtNjhjOS00MmQ4LTgxMjEtMWE3YjYzZjgzOTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3F+CkVlleYJwCTQ/PJbfDJGK40/L+UUZC/gU dZt6iM/+CjGWAuuGseYAZQ7nXDrFzv7FUGqescSXdJIiRAYqsjCCz6C82lA+a90a coKrR6CQfrfn2krm0H5E1niH1sAn4uU5ldSVOBGic57m+fumpWZ2IJrtT1ztyxWV zk5EMpB7EUYr4+dnj7trbrfC3XyePrrQQFgKy5mHbcOIfbADrR9kz4ACP4o3wyhR nL0ZMMmmeKbvOOKWlwrvVzhll5r0VAFQpc8IaeoKYsSuuYURBshlKK+yEmpTRRrM 6LgCf5UImQz8UsjrXPZGJUaVdrTihDs/i+sIZxAEDsISkJV2JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqnrwYKWnOOFfzCG7dU3ikjxt8dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWQxMmRmMTQtYjJmZC0z ZWEyLTkzYTktNGFiMDdmMTYzZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9dwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWd/kSkiOQc3RLsGUopcpbJKAKb8clZfqsIlabp4WsYwKzqWb+SsmSl PWRkil83RV2qTH6D2HmhtiThPZm02MOqcTBu18KaCGCcTZf8vIR3Q/e8qcLsmaF+ Debc6k/DUchjLIk3/Z0V+eTKdQkc6HdI5ckNmtgCAiX31x0Pj+juRKS9IVM1/ljL p3n3K+De2HlEh/DgG/5gg5wDBbcqSltoGiUxSYrUsJzwozsqTI9SLFF3E8UZl5sM OGku4Jn6mQahLTo/UtwFQ+CBPpzflU5/C+RXwORgozwtAEZ3QWfYwQR/ct47/Vg4 si+omynkTFWS1Di3wPpBopPgNlBirPo= -----END CERTIFICATE-----Generated at Sat Apr 26 19:05:04 2025 by rpki-client