$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b25875ad-bd20-3930-b3c0-67bd36950327.roa File: b25875ad-bd20-3930-b3c0-67bd36950327.roa (raw, json) Hash identifier: +cTySuvYmXcYY3UKKJ4pc6gFBdPMgfYbO9qrSxG4F7k= Subject key identifier: C1:1A:70:38:71:70:7E:CE:55:7F:BA:6D:8A:B8:4A:9D:C7:2A:23:B1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849A8E9EB7BAB732C548EA22BD0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b25875ad-bd20-3930-b3c0-67bd36950327.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 16625 IP address blocks: 23.219.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:eb:7b:ab:73:2c:54:8e:a2:2b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=a723a602-0072-4f13-b0a5-5ee71e640e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:de:79:6f:48:5d:fb:27:88:74:a6:b0:ee:7f: c4:db:2d:0a:fa:d3:fc:cf:85:93:df:76:f9:3c:30: 0b:e3:99:6e:c9:82:8f:a4:70:dc:c8:81:64:9f:3f: 31:3b:cb:cc:c9:dc:15:f1:96:8e:ea:69:3f:83:6a: 39:dc:17:bd:2c:51:5a:5c:83:8a:0e:9d:fd:c8:ad: 57:dd:c0:49:ca:14:c4:aa:30:09:dc:d7:f9:9e:bd: 3d:ec:08:ae:68:3f:c4:fb:41:c0:bd:38:6d:de:36: 11:9c:be:d0:80:e8:ae:36:57:da:47:b0:29:87:9e: 74:1f:1f:6c:01:f2:ba:f7:4d:49:cd:e0:06:e2:62: e1:08:47:b5:5b:84:ef:63:1e:1f:c5:36:bd:30:38: 94:fc:b5:11:1c:67:26:c9:47:bd:3c:b7:87:95:27: 29:36:19:e6:7b:ca:42:39:76:64:4d:c4:11:02:cc: 67:2d:dd:16:82:9e:46:d4:4e:d9:c3:68:2b:fb:7b: e1:e8:54:eb:70:d1:af:78:e3:67:bf:c7:94:2f:6b: b3:1a:c1:de:b0:c6:c3:78:22:49:a6:77:56:b1:3d: 88:9d:e5:dd:fc:17:e5:90:bf:e8:72:d1:80:48:1c: 89:7c:a7:2a:1d:e8:44:ca:f1:cf:12:ec:88:d0:8b: 65:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1A:70:38:71:70:7E:CE:55:7F:BA:6D:8A:B8:4A:9D:C7:2A:23:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b25875ad-bd20-3930-b3c0-67bd36950327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:e0:d9:9c:df:12:22:63:84:ca:f8:7b:c3:02:4c:af:b7:57: 08:41:2d:17:e6:90:d5:4b:94:48:fc:4d:74:30:70:b3:a1:68: e9:c0:92:f4:7a:74:e3:24:69:11:4d:67:51:73:bc:3d:d6:eb: 20:cd:ba:b8:1b:79:96:90:25:bf:a7:9e:f3:99:44:22:a4:88: 50:f9:61:18:e1:b7:0f:f5:20:81:38:ca:5e:c5:91:92:dd:37: b2:65:d6:2c:cf:1a:01:f5:42:cb:46:79:84:31:b9:9b:54:5f: 36:a9:44:63:72:56:64:e1:91:f5:c7:42:82:e3:d0:6b:23:04: 6b:ba:93:16:66:5e:53:a8:32:5c:c2:6a:c0:51:29:44:b5:bd: 71:31:93:e9:33:0e:65:2a:98:44:b4:92:f9:c5:c2:5e:af:2d: 16:1a:11:15:9b:9c:ab:6d:7e:4f:79:83:98:b1:bf:12:44:30: 37:e5:31:a4:d1:f9:9c:22:29:c2:04:34:1c:fb:f5:b3:e0:eb: 68:f2:ea:c9:95:39:b1:17:c1:76:a3:7f:59:c7:5a:5a:27:77: 97:b8:00:41:43:05:e6:2d:3e:bc:8a:07:41:3c:db:3a:0b:e9: 74:c2:0a:10:45:11:15:9a:75:e2:be:a8:63:11:05:db:54:25: 5a:91:81:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6et7q3MsVI6iK9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk YTcyM2E2MDItMDA3Mi00ZjEzLWIwYTUtNWVlNzFlNjQwZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn955b0hd+yeIdKaw7n/E2y0K+tP8z4WT33b5 PDAL45luyYKPpHDcyIFknz8xO8vMydwV8ZaO6mk/g2o53Be9LFFaXIOKDp39yK1X 3cBJyhTEqjAJ3Nf5nr097AiuaD/E+0HAvTht3jYRnL7QgOiuNlfaR7Aph550Hx9s AfK6901JzeAG4mLhCEe1W4TvYx4fxTa9MDiU/LURHGcmyUe9PLeHlScpNhnme8pC OXZkTcQRAsxnLd0Wgp5G1E7Zw2gr+3vh6FTrcNGveONnv8eUL2uzGsHesMbDeCJJ pndWsT2IneXd/BflkL/octGASByJfKcqHehEyvHPEuyI0ItlgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEacDhxcH7OVX+6bYq4Sp3HKiOxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjI1ODc1YWQtYmQyMC0z OTMwLWIzYzAtNjdiZDM2OTUwMzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9s0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXg2ZzfEiJjhMr4e8MCTK+3VwhBLRfmkNVLlEj8TXQwcLOhaOnAkvR6 dOMkaRFNZ1FzvD3W6yDNurgbeZaQJb+nnvOZRCKkiFD5YRjhtw/1IIE4yl7FkZLd N7Jl1izPGgH1QstGeYQxuZtUXzapRGNyVmThkfXHQoLj0GsjBGu6kxZmXlOoMlzC asBRKUS1vXExk+kzDmUqmES0kvnFwl6vLRYaERWbnKttfk95g5ixvxJEMDflMaTR +ZwiKcIENBz79bPg62jy6smVObEXwXajf1nHWlond5e4AEFDBeYtPryKB0E82zoL 6XTCChBFERWadeK+qGMRBdtUJVqRgUA= -----END CERTIFICATE-----Generated at Sun Apr 27 02:38:11 2025 by rpki-client