$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab8ce5ae-6be1-30e1-90ac-c7f5627a87d6.roa File: ab8ce5ae-6be1-30e1-90ac-c7f5627a87d6.roa (raw, json) Hash identifier: +sKylZ3s7iqbCX0jQXLPfX7h314fNIiDtxgNJrZag74= Subject key identifier: 8D:49:C3:F9:F6:74:4E:50:BC:A2:67:AA:A7:32:3E:94:A7:0D:7C:B4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584910E1860823E20C188F615740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab8ce5ae-6be1-30e1-90ac-c7f5627a87d6.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 16625 IP address blocks: 173.223.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:86:08:23:e2:0c:18:8f:61:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=d528ca40-a5a6-4ab7-9fa2-793e3daafc39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a1:28:7f:5b:1b:72:ef:a6:c1:3d:b1:0a:6d: de:58:93:28:2b:72:71:14:4d:fd:5d:f1:d8:f7:94: 8a:be:49:a4:c5:ef:3c:2e:82:a6:22:fb:25:1a:3a: db:c5:19:6e:01:92:27:35:2b:fc:15:76:8b:59:52: bb:07:c9:f6:50:89:a0:5c:cb:57:73:19:60:c5:a7: 84:3e:52:5e:fb:5b:74:03:ca:4e:d0:69:69:71:68: f9:4a:10:66:53:1c:7d:67:88:14:c5:0d:f0:c4:0a: 77:d7:ab:58:38:25:f0:22:52:5c:14:75:cc:75:85: 28:4d:b0:e7:4b:b4:c0:a3:47:3c:3c:2a:48:12:36: 02:c9:95:96:11:12:0b:5c:e4:73:92:d8:bf:03:70: fd:0b:4c:fd:d3:6b:79:d0:2f:ee:e9:9e:26:52:c9: 30:53:17:a0:33:ee:62:0f:23:dd:9b:a3:e0:69:4b: 24:55:43:c3:54:c7:c2:ed:42:8b:d1:12:f4:ae:14: 5a:a4:1c:6a:6c:c6:69:8f:7d:00:72:9a:07:4d:35: 89:ad:ec:1d:8b:75:0f:76:43:6b:b1:83:98:46:8b: cf:08:d7:1d:10:b1:91:10:63:ca:0c:c5:22:48:4c: f5:70:52:d4:e2:ff:52:35:c6:7e:72:52:62:43:f6: 6f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:49:C3:F9:F6:74:4E:50:BC:A2:67:AA:A7:32:3E:94:A7:0D:7C:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab8ce5ae-6be1-30e1-90ac-c7f5627a87d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:97:65:b9:66:e1:00:e0:fd:9c:74:4f:21:51:38:a4:dc:e1: a4:77:68:cc:99:36:64:9f:4b:02:6e:fe:08:c8:74:d1:77:6c: e0:80:51:de:c5:42:b8:8e:87:14:50:23:69:b2:d3:bf:e6:fb: cb:63:28:68:73:5b:73:3d:f5:17:ea:2f:40:3b:29:c7:9d:d4: 1b:d0:dd:e9:f7:f5:bb:73:89:35:bb:af:2f:0d:fa:f3:bf:ef: 36:56:0b:d0:81:0f:4d:93:d1:91:d0:88:8f:56:c7:f1:ef:46: 50:9a:5b:e8:3a:22:97:14:bf:78:dc:9b:11:2e:fc:1f:b1:15: ad:c1:dd:e1:46:3e:25:9d:a2:b1:41:3a:fc:b4:00:43:0c:e6: 01:fe:24:4e:de:90:cf:a2:89:5e:c3:b2:af:ce:2a:fd:1c:12: a4:0b:3a:2f:c0:36:ea:42:c6:c8:2b:82:46:2f:41:7d:61:0e: c2:70:13:1b:f3:86:3b:70:8c:b7:9d:56:72:77:4b:f6:83:a0: ab:79:ac:ff:85:7a:81:6e:d8:13:b6:18:3a:0f:c6:39:a4:19: 5f:2f:2a:37:a0:5d:00:04:f9:f0:39:cf:b2:97:64:89:1f:77: d3:87:b8:3d:89:e4:31:e1:ce:44:31:cc:1f:ab:36:53:03:78: 8d:53:c4:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4YYII+IMGI9hV0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk ZDUyOGNhNDAtYTVhNi00YWI3LTlmYTItNzkzZTNkYWFmYzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqEof1sbcu+mwT2xCm3eWJMoK3JxFE39XfHY 95SKvkmkxe88LoKmIvslGjrbxRluAZInNSv8FXaLWVK7B8n2UImgXMtXcxlgxaeE PlJe+1t0A8pO0GlpcWj5ShBmUxx9Z4gUxQ3wxAp316tYOCXwIlJcFHXMdYUoTbDn S7TAo0c8PCpIEjYCyZWWERILXORzkti/A3D9C0z902t50C/u6Z4mUskwUxegM+5i DyPdm6PgaUskVUPDVMfC7UKL0RL0rhRapBxqbMZpj30AcpoHTTWJrewdi3UPdkNr sYOYRovPCNcdELGREGPKDMUiSEz1cFLU4v9SNcZ+clJiQ/ZvqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1Jw/n2dE5QvKJnqqcyPpSnDXy0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWI4Y2U1YWUtNmJlMS0z MGUxLTkwYWMtYzdmNTYyN2E4N2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGXZblm4QDg/Zx0TyFROKTc4aR3aMyZNmSfSwJu/gjIdNF3bOCAUd7F QriOhxRQI2my07/m+8tjKGhzW3M99RfqL0A7Kced1BvQ3en39btziTW7ry8N+vO/ 7zZWC9CBD02T0ZHQiI9Wx/HvRlCaW+g6IpcUv3jcmxEu/B+xFa3B3eFGPiWdorFB Ovy0AEMM5gH+JE7ekM+iiV7Dsq/OKv0cEqQLOi/ANupCxsgrgkYvQX1hDsJwExvz hjtwjLedVnJ3S/aDoKt5rP+FeoFu2BO2GDoPxjmkGV8vKjegXQAE+fA5z7KXZIkf d9OHuD2J5DHhzkQxzB+rNlMDeI1TxBE= -----END CERTIFICATE-----Generated at Sun Apr 27 02:55:47 2025 by rpki-client