$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b80b3a56-1235-32e2-86b6-880254645285.roa File: b80b3a56-1235-32e2-86b6-880254645285.roa (raw, json) Hash identifier: 0zrCXZzG9fW1L6bkq7ZkTyzOGaC1TM2xrv1nsitdB3M= Subject key identifier: 7A:CC:06:3B:AA:F1:2B:B9:C4:0C:C4:61:B8:FC:4A:EE:5D:F3:F7:BF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E3297A6F820F1AE78B40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b80b3a56-1235-32e2-86b6-880254645285.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.205.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e3:29:7a:6f:82:0f:1a:e7:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=e8a3bf0a-0b7e-41a3-9eca-2b5f86d8d5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e0:98:ee:d0:a0:9d:a4:a1:af:15:6e:54:94: 87:03:0a:2d:2d:2e:7e:d3:68:c8:ac:1d:88:a0:9b: 52:d2:5c:03:35:ab:f7:a8:3d:20:7b:57:93:dd:8b: 16:b0:de:1d:bd:90:27:02:05:ca:18:7c:2d:1e:a6: e4:97:53:15:d2:3a:33:a8:1c:39:89:f1:72:ca:98: b7:b7:fb:30:a3:22:68:f9:e1:c5:71:59:d5:22:b7: bb:07:49:70:37:2f:77:ce:2f:57:0e:99:5a:0f:3a: 5b:91:8d:4a:51:1b:c8:75:d8:b7:ec:93:5d:59:dd: 2b:db:b2:68:cf:7b:ed:39:e6:b4:3f:0a:d0:bb:8f: ff:9a:95:a9:bc:ca:35:8d:5f:f6:3e:f4:58:6b:4e: 57:36:e3:53:bb:a9:9a:a0:c0:0c:ce:a0:44:5d:f3: f5:fc:e0:c9:22:05:15:3f:46:d4:94:98:d0:75:61: 7d:3b:c9:f0:93:10:3c:12:69:a1:b4:61:60:58:48: 3e:95:de:31:84:02:55:c6:92:91:1c:70:33:76:85: f1:f5:75:68:f5:3d:a7:7c:db:58:df:b0:ad:a0:6a: a1:82:28:dc:41:b4:4e:7d:5c:5a:2d:b9:d5:79:d0: 59:e5:18:66:d3:99:e6:0a:17:96:b7:21:26:1d:36: 4b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:CC:06:3B:AA:F1:2B:B9:C4:0C:C4:61:B8:FC:4A:EE:5D:F3:F7:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b80b3a56-1235-32e2-86b6-880254645285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:2a:0f:61:57:1d:fc:43:88:45:08:95:71:4d:0e:36:15:13: 9d:c1:8b:01:08:32:81:f3:9f:41:6b:8b:3c:af:e4:41:9c:81: a9:e7:87:25:46:da:a2:0a:97:c1:88:58:b2:32:65:1a:ba:24: 8a:80:e7:f1:25:14:fa:69:0c:6b:ef:38:09:eb:87:40:ea:d9: 4e:62:5e:33:15:36:71:85:3f:cd:80:26:33:49:2b:35:86:8b: e8:0b:04:54:07:83:4b:bb:12:42:ed:f7:9b:42:a5:67:b2:47: 99:5a:59:f6:50:1b:9b:5f:6d:ff:1c:b6:37:b2:6e:49:0f:9c: 1b:ad:47:1d:1c:2b:a2:f8:b2:47:f5:b7:ed:07:37:a8:e3:a7: 1f:8a:0b:04:12:13:68:7a:41:a8:40:6c:c4:0f:02:fd:f7:58: bc:1b:37:4e:41:73:c7:a7:a2:05:e0:b5:51:b3:68:6c:8e:fb: 87:3b:a9:1a:22:70:b9:b7:a5:9e:01:40:b1:2a:54:62:09:e6: e0:ba:12:03:76:86:34:f8:5d:20:4b:c4:4a:5b:f5:a4:2d:7a: d6:f6:a1:d0:de:fe:8e:35:1d:81:ce:bb:b2:fc:ef:aa:6b:29: a6:e4:0d:f1:53:c5:fa:97:37:9c:77:93:b1:28:87:53:af:85: e4:f9:18:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKeMpem+CDxrni0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk ZThhM2JmMGEtMGI3ZS00MWEzLTllY2EtMmI1Zjg2ZDhkNWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOCY7tCgnaShrxVuVJSHAwotLS5+02jIrB2I oJtS0lwDNav3qD0ge1eT3YsWsN4dvZAnAgXKGHwtHqbkl1MV0jozqBw5ifFyypi3 t/swoyJo+eHFcVnVIre7B0lwNy93zi9XDplaDzpbkY1KURvIddi37JNdWd0r27Jo z3vtOea0PwrQu4//mpWpvMo1jV/2PvRYa05XNuNTu6maoMAMzqBEXfP1/ODJIgUV P0bUlJjQdWF9O8nwkxA8EmmhtGFgWEg+ld4xhAJVxpKRHHAzdoXx9XVo9T2nfNtY 37CtoGqhgijcQbROfVxaLbnVedBZ5Rhm05nmCheWtyEmHTZL3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrMBjuq8Su5xAzEYbj8Su5d8/e/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjgwYjNhNTYtMTIzNS0z MmUyLTg2YjYtODgwMjU0NjQ1Mjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF808MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsqD2FXHfxDiEUIlXFNDjYVE53BiwEIMoHzn0Frizyv5EGcgannhyVG 2qIKl8GIWLIyZRq6JIqA5/ElFPppDGvvOAnrh0Dq2U5iXjMVNnGFP82AJjNJKzWG i+gLBFQHg0u7EkLt95tCpWeyR5laWfZQG5tfbf8ctjeybkkPnButRx0cK6L4skf1 t+0HN6jjpx+KCwQSE2h6QahAbMQPAv33WLwbN05Bc8enogXgtVGzaGyO+4c7qRoi cLm3pZ4BQLEqVGIJ5uC6EgN2hjT4XSBLxEpb9aQtetb2odDe/o41HYHOu7L876pr KabkDfFTxfqXN5x3k7Eoh1OvheT5GMQ= -----END CERTIFICATE-----Generated at Mon Apr 28 11:43:29 2025 by rpki-client