$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/217ba6b5-b7e8-3d6c-9975-92587608296b.roa File: 217ba6b5-b7e8-3d6c-9975-92587608296b.roa (raw, json) Hash identifier: EBmHwJjUkO+VK49YaY6Kw1ts3lpZCddQa52IlK5qRJw= Subject key identifier: 26:0B:F1:B7:F1:F7:D4:64:5C:CB:F2:C1:14:3B:36:AB:E9:58:B5:5C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4BAE6305DC0E73082C890 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/217ba6b5-b7e8-3d6c-9975-92587608296b.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 16625 IP address blocks: 23.223.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:ba:e6:30:5d:c0:e7:30:82:c8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=a6a2b3cc-e283-4276-bf2a-80a37f6de9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:0a:ba:cc:fa:0e:74:bf:29:dc:48:c3:40: 86:01:17:07:6e:53:57:53:a6:0f:e5:a3:77:c4:5e: ad:92:b8:ed:87:2b:07:09:66:88:6e:be:28:5d:0a: 7c:4c:df:11:d9:e1:2e:2f:1b:d3:9b:a8:00:07:13: f8:a9:51:14:1a:2a:d2:27:99:b9:f5:54:03:fa:c4: 01:df:59:4d:9e:de:d8:15:88:49:ff:30:bb:ab:77: 4d:d6:2a:a5:90:70:25:74:04:97:5d:6a:a5:58:89: 9f:87:8a:d4:6b:7b:b2:97:4f:0f:83:c4:d4:ec:32: 04:b8:41:30:6c:b5:5d:43:4c:b3:bd:d4:b1:64:df: 86:e1:89:74:3d:c4:ff:59:55:f5:c3:1a:1c:6e:77: e4:03:7e:7d:b1:dd:cd:21:19:ba:ab:90:8f:3c:13: 29:d2:4f:1a:56:89:5e:de:e8:48:51:eb:60:08:d0: ad:fd:64:d9:3f:73:00:b0:02:9e:83:2a:25:c6:52: eb:fe:c3:56:d0:6a:a8:34:c8:c4:99:64:37:79:1e: b0:1e:0a:c7:38:6b:90:f4:72:0a:12:1a:19:7c:35: 91:a2:01:3c:50:7c:e9:89:95:c3:9e:47:bd:6b:f4: ce:18:b3:2f:3f:ed:2d:2d:35:0c:e3:a7:b3:7e:31: 4f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:0B:F1:B7:F1:F7:D4:64:5C:CB:F2:C1:14:3B:36:AB:E9:58:B5:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/217ba6b5-b7e8-3d6c-9975-92587608296b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:29:f8:88:f1:be:12:51:00:d5:1a:01:fa:03:f9:20:86:36: fe:e7:2b:9c:f5:ce:da:64:d3:7d:74:db:5f:d3:cc:08:d3:2c: 86:fa:cf:8f:31:63:b9:21:8b:22:83:c8:14:a8:38:b4:9c:55: aa:ff:1d:eb:a2:dc:13:5e:cc:9b:22:16:32:eb:88:a2:30:a5: 5c:a1:97:df:a2:04:12:ad:00:d9:c2:4a:9d:8b:63:15:2a:1e: 50:37:41:cd:1d:75:5f:b3:ca:04:a9:7c:8d:53:ce:9a:d7:e0: b3:6f:50:20:25:38:30:27:78:cb:1b:e1:fc:68:52:72:66:e6: 4c:50:30:d5:5f:e5:f6:f8:e6:df:78:db:c8:04:0e:56:c8:c7: 3d:1c:bc:72:01:66:16:37:4f:58:f0:d6:b6:a8:48:63:fa:a2: 0f:cf:b5:5f:fd:fa:ba:3a:1c:ba:c0:3e:bf:bc:03:b6:20:12: ad:26:4e:87:b0:de:d4:01:17:29:c8:21:88:f6:d4:4c:c9:c8: 2c:4a:63:a0:e4:c4:0b:66:c3:a7:fe:5f:05:28:ad:4c:d5:68: 69:d8:5b:f9:fc:e8:0e:88:12:e9:2b:8b:c0:d9:d2:3b:41:5b: a2:4f:97:75:76:d1:c6:64:55:ee:25:c7:db:d3:5d:fa:f0:0e: 60:5a:97:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLrmMF3A5zCCyJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YTZhMmIzY2MtZTI4My00Mjc2LWJmMmEtODBhMzdmNmRlOWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHIKusz6DnS/KdxIw0CGARcHblNXU6YP5aN3 xF6tkrjthysHCWaIbr4oXQp8TN8R2eEuLxvTm6gABxP4qVEUGirSJ5m59VQD+sQB 31lNnt7YFYhJ/zC7q3dN1iqlkHAldASXXWqlWImfh4rUa3uyl08Pg8TU7DIEuEEw bLVdQ0yzvdSxZN+G4Yl0PcT/WVX1wxocbnfkA359sd3NIRm6q5CPPBMp0k8aVole 3uhIUetgCNCt/WTZP3MAsAKegyolxlLr/sNW0GqoNMjEmWQ3eR6wHgrHOGuQ9HIK EhoZfDWRogE8UHzpiZXDnke9a/TOGLMvP+0tLTUM46ezfjFPewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYL8bfx99RkXMvywRQ7NqvpWLVcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjE3YmE2YjUtYjdlOC0z ZDZjLTk5NzUtOTI1ODc2MDgyOTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF994MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8p+IjxvhJRANUaAfoD+SCGNv7nK5z1ztpk031021/TzAjTLIb6z48x Y7khiyKDyBSoOLScVar/Heui3BNezJsiFjLriKIwpVyhl9+iBBKtANnCSp2LYxUq HlA3Qc0ddV+zygSpfI1TzprX4LNvUCAlODAneMsb4fxoUnJm5kxQMNVf5fb45t94 28gEDlbIxz0cvHIBZhY3T1jw1raoSGP6og/PtV/9+ro6HLrAPr+8A7YgEq0mToew 3tQBFynIIYj21EzJyCxKY6DkxAtmw6f+XwUorUzVaGnYW/n86A6IEukri8DZ0jtB W6JPl3V20cZkVe4lx9vTXfrwDmBalyg= -----END CERTIFICATE-----Generated at Sun Jun 15 19:05:43 2025 by rpki-client