$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4095c566-e584-3215-a6d3-feee01e287a9.roa File: 4095c566-e584-3215-a6d3-feee01e287a9.roa (raw, json) Hash identifier: 44FPHibdd2vr2fSN74Xa5nYLlNMam0KWOj+2NMGtJFI= Subject key identifier: 83:8B:96:CB:01:3E:09:3B:D0:33:97:77:E4:4B:B4:2F:94:10:B7:28 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF4939F006388F71F691040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4095c566-e584-3215-a6d3-feee01e287a9.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.211.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:93:9f:00:63:88:f7:1f:69:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=8fc1a820-a262-4b1d-a4eb-84e2d7e147fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:16:ba:1c:3e:3e:28:55:0b:33:c4:43:66:3f: c6:53:4b:08:62:90:89:28:5e:6d:59:67:f4:0f:24: 71:08:26:55:91:74:61:37:a2:55:28:49:93:61:32: 9f:32:8e:c7:45:f0:cc:39:82:2b:38:2f:ab:61:fd: 31:45:79:08:eb:51:df:1b:1e:85:c6:d2:97:f0:d3: dd:88:d1:b1:88:ce:cd:6a:e5:12:12:9a:37:d1:3e: fb:10:b4:5a:db:34:9c:46:c2:59:fe:1a:d6:9b:88: 85:48:96:ed:e9:00:bb:48:4c:f7:ef:67:1c:44:34: 2a:79:f8:52:b0:be:ef:85:d4:11:f3:8e:12:c1:1e: 57:4b:6e:6b:73:88:0f:be:84:8f:e1:fd:84:5e:24: 7a:8c:91:fc:3a:7f:f8:e5:46:86:11:57:97:33:e4: 67:3a:e3:91:f6:96:3e:47:04:ea:49:0b:8f:f1:e4: b7:72:f6:7c:f2:34:c9:44:5c:e8:ef:9a:33:28:ac: d2:55:81:cb:03:bb:6b:a2:98:d4:d8:07:08:e4:19: f9:6f:8f:0a:4a:83:6e:c5:90:96:02:17:d2:f3:15: 41:93:57:47:dd:a3:43:6d:9a:03:46:ba:50:77:bc: 84:0d:93:fb:7f:e5:3f:4b:80:b4:f8:aa:9c:4a:7f: 8e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:8B:96:CB:01:3E:09:3B:D0:33:97:77:E4:4B:B4:2F:94:10:B7:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4095c566-e584-3215-a6d3-feee01e287a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:44:81:50:9a:8f:33:c2:ca:d0:3c:ca:ed:5e:4f:44:04:77: 3d:0d:ba:1f:9c:5b:31:e4:80:56:f8:13:e5:c3:b2:98:65:a0: 2b:8b:63:26:08:b2:fc:5f:c0:45:d5:15:5e:89:96:c8:df:07: fa:87:03:99:90:53:fa:26:67:f3:00:b8:01:02:31:93:e7:b6: be:26:c8:57:36:12:53:88:9c:18:98:2c:6b:fd:30:d4:6c:3c: b3:e9:ec:d4:a5:15:a1:20:0a:c2:44:2c:ce:2c:a6:a2:f1:b7: d4:df:fb:76:e8:97:6e:08:a2:e1:15:44:09:04:c5:87:b0:6f: 9d:ae:43:ba:60:41:bf:be:e8:46:b5:4b:9f:b5:a5:cf:9b:df: b7:79:68:5d:1e:ba:a2:8e:5f:e4:34:b5:f7:9e:9c:b8:45:c1: d3:8c:db:b4:1b:e1:c9:71:a7:9e:ae:ed:37:02:7b:ab:bb:f8: 9b:1d:3e:5d:4b:99:a8:a5:05:d6:12:0c:0d:1c:a0:04:2e:d6: f3:70:75:d0:ac:8f:cc:89:4a:7b:89:63:89:0f:f0:6b:35:f8: d9:ac:92:cf:5d:38:7d:3a:1a:c7:96:51:17:63:6b:ca:d2:d9: 84:8a:4c:8b:60:b4:3b:9f:de:30:c3:3c:24:ad:cf:5c:b0:36: 92:5c:5e:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JOfAGOI9x9pEEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk OGZjMWE4MjAtYTI2Mi00YjFkLWE0ZWItODRlMmQ3ZTE0N2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRa6HD4+KFULM8RDZj/GU0sIYpCJKF5tWWf0 DyRxCCZVkXRhN6JVKEmTYTKfMo7HRfDMOYIrOC+rYf0xRXkI61HfGx6FxtKX8NPd iNGxiM7NauUSEpo30T77ELRa2zScRsJZ/hrWm4iFSJbt6QC7SEz372ccRDQqefhS sL7vhdQR844SwR5XS25rc4gPvoSP4f2EXiR6jJH8On/45UaGEVeXM+RnOuOR9pY+ RwTqSQuP8eS3cvZ88jTJRFzo75ozKKzSVYHLA7tropjU2AcI5Bn5b48KSoNuxZCW AhfS8xVBk1dH3aNDbZoDRrpQd7yEDZP7f+U/S4C0+KqcSn+OawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOLlssBPgk70DOXd+RLtC+UELcoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDA5NWM1NjYtZTU4NC0z MjE1LWE2ZDMtZmVlZTAxZTI4N2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9PsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFEgVCajzPCytA8yu1eT0QEdz0Nuh+cWzHkgFb4E+XDsphloCuLYyYI svxfwEXVFV6JlsjfB/qHA5mQU/omZ/MAuAECMZPntr4myFc2ElOInBiYLGv9MNRs PLPp7NSlFaEgCsJELM4spqLxt9Tf+3bol24IouEVRAkExYewb52uQ7pgQb++6Ea1 S5+1pc+b37d5aF0euqKOX+Q0tfeenLhFwdOM27Qb4clxp56u7TcCe6u7+JsdPl1L mailBdYSDA0coAQu1vNwddCsj8yJSnuJY4kP8Gs1+Nmsks9dOH06GseWURdja8rS 2YSKTItgtDuf3jDDPCStz1ywNpJcXn0= -----END CERTIFICATE-----Generated at Sun Apr 27 01:44:02 2025 by rpki-client