$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/832f4df4-fd54-3144-80f2-3fd28476e582.roa File: 832f4df4-fd54-3144-80f2-3fd28476e582.roa (raw, json) Hash identifier: QZvoXQZ7R8Gm3MNLNCEzC3FXl+zFHj2NoZ0u73jbfEQ= Subject key identifier: 53:0F:2F:5D:FA:EF:F6:03:98:2F:97:A3:A3:78:09:07:F2:52:70:54 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849912F25AF927649C4D24C2400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/832f4df4-fd54-3144-80f2-3fd28476e582.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 16625 IP address blocks: 23.221.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:25:af:92:76:49:c4:d2:4c:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=f25aa607-299b-4caa-b860-a20a15c66049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:93:6a:35:1d:e1:2c:7f:48:c3:f8:b4:39:78: d6:b0:28:5f:ff:8c:ef:4d:86:e9:42:6d:f7:a5:4d: 58:91:1b:87:74:3a:a1:d1:88:82:d7:48:56:98:f6: 9b:95:81:fa:1b:37:cc:1b:5c:74:ab:63:52:cc:64: a2:7a:eb:67:e7:d2:2a:34:02:10:9a:24:7d:bc:b3: 3e:7e:30:27:55:74:69:49:c4:4a:3b:84:41:b0:68: 16:f3:ee:36:e1:a1:ae:3d:54:6c:11:19:bf:56:f7: 58:77:6b:1a:0a:b6:b0:cb:6d:4a:4c:5b:1c:04:8f: 9a:8d:88:b3:b0:21:32:72:aa:0d:c2:b1:4c:d3:79: 91:af:58:33:80:fb:57:ee:42:72:39:4b:35:68:0f: bb:20:ab:3e:af:58:2a:c3:23:84:be:f5:5e:2f:8d: 18:38:cb:76:33:9c:c9:fa:2d:a3:61:10:13:21:ec: 71:f1:96:f8:f1:d8:38:43:5c:b8:2d:4a:a5:ab:82: a2:04:f6:b1:4b:fd:b2:1b:6e:29:a5:53:68:3b:16: 10:42:c3:a3:d6:e4:95:30:ec:38:5c:57:25:93:66: a1:9e:a4:3f:7d:6d:38:1b:5f:c7:69:75:26:92:e4: 16:74:04:d5:76:7d:2b:b7:28:1c:06:d9:0c:fa:bf: 4d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0F:2F:5D:FA:EF:F6:03:98:2F:97:A3:A3:78:09:07:F2:52:70:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/832f4df4-fd54-3144-80f2-3fd28476e582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:3c:c5:3f:bd:45:ac:2b:10:10:a7:8e:4c:7c:bd:6a:0c:b2: 98:7e:3d:e7:5d:d1:57:00:28:08:9e:ef:6c:85:22:51:6a:78: 5d:3a:e5:09:46:d6:fb:c4:da:fc:8a:4b:48:e7:af:b6:af:37: 7a:04:45:5c:4d:eb:a1:44:aa:32:db:b6:e5:25:84:17:99:1a: 89:78:37:72:39:92:b8:56:94:17:7c:d6:06:cb:f0:c4:39:fd: 72:0d:9d:7f:79:7e:06:20:46:b4:bd:fe:58:b4:b5:3e:90:c2: 16:47:ff:f0:b0:39:a0:8d:ab:0c:f9:1b:30:09:f8:99:2e:6a: de:c7:b6:38:e7:06:46:26:43:77:bb:d4:d1:0b:bd:d3:9f:b3: c1:9d:4e:a2:3a:df:5c:09:93:b3:27:5f:4b:1b:fe:21:bc:d9: ca:25:28:61:08:fd:ce:bb:cf:ab:4d:ad:eb:a5:1c:36:fe:47: 8a:6e:84:1f:ba:5a:dd:da:55:b9:bd:48:71:a5:36:a1:1f:39: d3:92:0b:cd:df:03:34:b1:6f:f8:d6:71:25:77:ce:f6:7b:c5: bf:d6:a3:c0:73:64:dd:6d:4f:9f:e3:5d:64:35:78:47:81:e5: f4:81:09:dd:1d:c1:e1:68:e8:6e:62:67:22:09:84:7b:ea:14: 7d:5f:16:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLyWvknZJxNJMJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk ZjI1YWE2MDctMjk5Yi00Y2FhLWI4NjAtYTIwYTE1YzY2MDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5NqNR3hLH9Iw/i0OXjWsChf/4zvTYbpQm33 pU1YkRuHdDqh0YiC10hWmPablYH6GzfMG1x0q2NSzGSieutn59IqNAIQmiR9vLM+ fjAnVXRpScRKO4RBsGgW8+424aGuPVRsERm/VvdYd2saCrawy21KTFscBI+ajYiz sCEycqoNwrFM03mRr1gzgPtX7kJyOUs1aA+7IKs+r1gqwyOEvvVeL40YOMt2M5zJ +i2jYRATIexx8Zb48dg4Q1y4LUqlq4KiBPaxS/2yG24ppVNoOxYQQsOj1uSVMOw4 XFclk2ahnqQ/fW04G1/HaXUmkuQWdATVdn0rtygcBtkM+r9NlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMPL1367/YDmC+Xo6N4CQfyUnBUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODMyZjRkZjQtZmQ1NC0z MTQ0LTgwZjItM2ZkMjg0NzZlNTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF92gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB08xT+9RawrEBCnjkx8vWoMsph+Pedd0VcAKAie72yFIlFqeF065QlG 1vvE2vyKS0jnr7avN3oERVxN66FEqjLbtuUlhBeZGol4N3I5krhWlBd81gbL8MQ5 /XINnX95fgYgRrS9/li0tT6QwhZH//CwOaCNqwz5GzAJ+Jkuat7HtjjnBkYmQ3e7 1NELvdOfs8GdTqI631wJk7MnX0sb/iG82colKGEI/c67z6tNreulHDb+R4puhB+6 Wt3aVbm9SHGlNqEfOdOSC83fAzSxb/jWcSV3zvZ7xb/Wo8BzZN1tT5/jXWQ1eEeB 5fSBCd0dweFo6G5iZyIJhHvqFH1fFqk= -----END CERTIFICATE-----Generated at Sun Apr 27 00:11:40 2025 by rpki-client