$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/404a12b4-51a5-354c-8dea-8ad8ceaf8b2c.roa File: 404a12b4-51a5-354c-8dea-8ad8ceaf8b2c.roa (raw, json) Hash identifier: kdM5bjF889lalIexNUp9Gbn3t28EJJvIq0yEj8RbyZ8= Subject key identifier: D8:58:8B:3C:D2:DC:49:61:84:0A:8F:6B:08:50:64:AA:E2:16:C0:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF4659AF793194C5025860 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/404a12b4-51a5-354c-8dea-8ad8ceaf8b2c.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 16625 IP address blocks: 23.215.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:46:59:af:79:31:94:c5:02:58:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=2579afb4-4453-4ad8-b3e3-c9ddc680984b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:62:6a:7b:a9:90:86:e3:85:f0:f2:2e:60:b8: 5c:72:55:88:72:9e:7d:64:ad:ef:b2:e8:40:f6:e4: 28:c3:fa:98:34:90:db:eb:01:5f:09:94:d6:2e:f1: 4b:f2:a4:10:16:68:1c:6a:25:f6:20:93:38:60:10: 72:3a:1c:58:85:af:ba:7a:77:9b:9c:8b:ba:0b:19: 6a:13:ae:95:0c:c0:f2:c7:8d:75:8c:be:c7:b0:ca: 48:b1:4b:52:64:46:44:2a:64:b0:ff:8f:ab:bf:0f: 84:af:61:e1:24:93:1f:73:ed:13:dc:98:d8:06:55: 9a:9f:10:bd:6b:75:8d:36:83:f8:44:a5:e8:17:bf: 71:a1:83:67:80:d1:89:f7:95:42:a0:98:34:2f:ac: 3f:84:bc:70:46:cd:41:39:a8:58:bd:0b:a1:10:99: 37:6a:57:5c:4d:e4:3b:dc:08:2e:36:11:4c:b2:5a: 11:8f:8e:90:21:f2:b4:90:76:13:7a:59:c7:63:73: 38:f9:c6:7a:a9:80:a1:b3:94:fc:53:db:fe:98:82: e2:1f:4f:f8:f4:71:db:2a:49:30:42:e5:eb:ac:79: b3:95:53:c7:54:29:60:1c:95:97:70:17:18:b7:1f: d9:1a:bb:0c:8b:c1:08:69:ad:b9:63:ba:a6:8c:25: a6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:58:8B:3C:D2:DC:49:61:84:0A:8F:6B:08:50:64:AA:E2:16:C0:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/404a12b4-51a5-354c-8dea-8ad8ceaf8b2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:0c:24:74:ce:86:9a:37:68:44:5c:83:4e:50:36:27:97:3d: 36:56:9b:a8:23:bf:02:ff:ba:fd:bb:49:7c:86:bf:7f:08:e6: f2:64:c9:bd:87:08:93:7f:45:21:5f:98:7f:61:f7:9d:df:a9: c9:62:f7:05:eb:51:fe:d0:bc:2e:3d:96:c7:48:43:79:4b:b2: 51:1c:17:e1:55:30:20:91:84:c1:79:b6:6a:2e:9b:b1:52:62: 86:fa:8a:3b:de:2a:b2:92:0d:d2:af:f8:95:06:66:be:35:9b: 18:9c:c7:9c:7f:1a:59:70:ea:e1:6e:c2:e7:90:a0:91:a8:bc: c5:2b:4d:4b:0e:c3:a6:59:4a:3c:36:c4:a0:bd:49:65:11:52: 65:57:96:1a:c7:e8:40:9f:d0:41:4d:da:2d:14:88:e1:2d:20: f1:39:1c:4e:43:c2:2d:da:1e:98:b3:83:86:f7:45:6a:a4:90: 18:5c:42:a1:76:00:25:e0:6d:13:5b:dd:12:24:26:d5:10:89: a6:23:60:89:a5:bb:28:35:63:98:58:28:08:d4:4a:3a:15:a2: 35:5f:9f:2b:ca:cc:52:36:78:10:89:16:76:65:e9:99:ad:1f: 05:1b:da:1c:c3:e4:37:99:b9:6d:08:7b:38:71:65:24:af:61: e4:c4:e0:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0ZZr3kxlMUCWGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MjU3OWFmYjQtNDQ1My00YWQ4LWIzZTMtYzlkZGM2ODA5ODRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGJqe6mQhuOF8PIuYLhcclWIcp59ZK3vsuhA 9uQow/qYNJDb6wFfCZTWLvFL8qQQFmgcaiX2IJM4YBByOhxYha+6enebnIu6Cxlq E66VDMDyx411jL7HsMpIsUtSZEZEKmSw/4+rvw+Er2HhJJMfc+0T3JjYBlWanxC9 a3WNNoP4RKXoF79xoYNngNGJ95VCoJg0L6w/hLxwRs1BOahYvQuhEJk3aldcTeQ7 3AguNhFMsloRj46QIfK0kHYTelnHY3M4+cZ6qYChs5T8U9v+mILiH0/49HHbKkkw QuXrrHmzlVPHVClgHJWXcBcYtx/ZGrsMi8EIaa25Y7qmjCWmVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhYizzS3ElhhAqPawhQZKriFsBYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDA0YTEyYjQtNTFhNS0z NTRjLThkZWEtOGFkOGNlYWY4YjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9ecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoMJHTOhpo3aERcg05QNieXPTZWm6gjvwL/uv27SXyGv38I5vJkyb2H CJN/RSFfmH9h953fqcli9wXrUf7QvC49lsdIQ3lLslEcF+FVMCCRhMF5tmoum7FS Yob6ijveKrKSDdKv+JUGZr41mxicx5x/Gllw6uFuwueQoJGovMUrTUsOw6ZZSjw2 xKC9SWURUmVXlhrH6ECf0EFN2i0UiOEtIPE5HE5Dwi3aHpizg4b3RWqkkBhcQqF2 ACXgbRNb3RIkJtUQiaYjYImluyg1Y5hYKAjUSjoVojVfnyvKzFI2eBCJFnZl6Zmt HwUb2hzD5DeZuW0IezhxZSSvYeTE4AY= -----END CERTIFICATE-----Generated at Sun Apr 27 14:39:09 2025 by rpki-client