$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b922b850-b118-3c1b-80ba-79842d0a75a2.roa File: b922b850-b118-3c1b-80ba-79842d0a75a2.roa (raw, json) Hash identifier: kDA7NBKrA/Yg1T3z9WRvgarO2q4vtRml2ihzXZEBMIg= Subject key identifier: 7B:59:37:ED:ED:63:0F:87:B3:74:AE:56:0E:C5:28:86:2F:34:6A:96 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF483EDE22E29543035160 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b922b850-b118-3c1b-80ba-79842d0a75a2.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 16625 IP address blocks: 23.216.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:48:3e:de:22:e2:95:43:03:51:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=03ca9a17-81a2-4eb8-b817-ca0d588a9846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9c:80:5b:c7:e0:66:4d:6a:16:c5:f4:3e:9c: d8:18:f7:4b:fa:ce:ef:3f:2c:98:ca:ce:67:de:e0: 7f:1f:ed:2c:1c:37:98:86:46:99:31:07:bd:36:ca: 63:91:4c:16:3e:98:e9:4a:3b:bc:01:2a:95:9f:fe: 4a:49:dc:0e:64:78:69:10:a6:84:e5:0d:5f:df:ae: 95:c4:aa:72:6c:ef:d1:50:30:48:00:11:a5:71:11: 26:7b:33:c4:ab:2a:d3:ef:03:4d:e7:a1:24:70:79: f3:7c:82:d2:bc:69:56:70:8d:80:28:a6:0d:5c:4b: 1e:68:a5:bd:b6:68:b0:c0:44:be:b0:a5:d1:03:2a: a1:e9:d7:92:16:39:cc:6d:56:f4:d2:93:e8:ae:66: 47:f7:e1:b7:b9:51:40:c0:50:8a:56:e1:59:a4:83: e0:65:06:ad:63:cf:61:7b:39:90:5f:a3:12:52:67: 2a:5e:f8:7a:b6:45:80:18:f6:7e:ef:d0:e4:9e:60: 85:f2:ab:26:6b:b3:b8:65:e7:ba:83:74:34:67:86: 85:5d:60:19:05:d7:e2:12:c2:9a:72:28:7a:1c:78: e3:c0:2c:1b:11:3b:d9:7d:67:ee:fa:5b:c8:3a:2c: c2:f4:ab:b3:b8:19:98:80:75:55:03:dd:57:dd:5c: 83:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:59:37:ED:ED:63:0F:87:B3:74:AE:56:0E:C5:28:86:2F:34:6A:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b922b850-b118-3c1b-80ba-79842d0a75a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:6a:aa:1e:a3:4f:94:23:c7:23:96:d1:99:ef:b6:9b:b0:3f: f4:1e:f5:68:88:89:4d:70:51:65:0c:05:08:c3:46:a4:70:99: 9e:14:15:a7:ee:f1:13:32:e7:ee:14:0b:76:39:62:c1:fe:de: 8f:df:88:07:47:e6:80:f0:64:6b:37:9e:5c:c1:8c:e6:29:7c: 97:7e:67:d0:36:05:ea:45:d1:1c:09:e2:e7:99:83:51:27:bc: ff:91:1e:4c:f4:69:73:b8:da:4a:d8:7b:03:96:56:a4:86:ae: 7c:f1:53:3b:ec:e4:81:d3:22:c5:2e:97:78:8b:9b:c2:c9:c3: be:85:9f:68:ca:22:c0:17:13:dd:59:33:ce:a4:f8:51:02:54: f2:65:9f:92:6f:2e:80:d3:6e:a8:28:36:16:46:06:7d:c2:e2: a4:49:11:ab:c2:58:a8:59:7b:55:bd:8d:8c:76:3f:54:6e:83: 31:c1:5b:b3:d2:34:47:da:3f:1f:ac:ac:46:db:35:40:40:68: 85:0e:5d:80:62:4c:c6:35:38:e3:53:3a:42:49:5b:f3:74:fc: c9:6b:dd:71:9c:9e:94:db:ab:73:59:0b:69:da:0b:12:0b:5b: a7:8e:f9:94:b9:e3:e9:9f:8d:fc:58:00:9c:df:0a:99:88:51: e3:ac:b3:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0g+3iLilUMDUWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MDNjYTlhMTctODFhMi00ZWI4LWI4MTctY2EwZDU4OGE5ODQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45yAW8fgZk1qFsX0PpzYGPdL+s7vPyyYys5n 3uB/H+0sHDeYhkaZMQe9NspjkUwWPpjpSju8ASqVn/5KSdwOZHhpEKaE5Q1f366V xKpybO/RUDBIABGlcREmezPEqyrT7wNN56EkcHnzfILSvGlWcI2AKKYNXEseaKW9 tmiwwES+sKXRAyqh6deSFjnMbVb00pPormZH9+G3uVFAwFCKVuFZpIPgZQatY89h ezmQX6MSUmcqXvh6tkWAGPZ+79DknmCF8qsma7O4Zee6g3Q0Z4aFXWAZBdfiEsKa cih6HHjjwCwbETvZfWfu+lvIOizC9KuzuBmYgHVVA91X3VyDlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtZN+3tYw+Hs3SuVg7FKIYvNGqWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjkyMmI4NTAtYjExOC0z YzFiLTgwYmEtNzk4NDJkMGE3NWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9jKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNqqh6jT5QjxyOW0ZnvtpuwP/Qe9WiIiU1wUWUMBQjDRqRwmZ4UFafu 8RMy5+4UC3Y5YsH+3o/fiAdH5oDwZGs3nlzBjOYpfJd+Z9A2BepF0RwJ4ueZg1En vP+RHkz0aXO42krYewOWVqSGrnzxUzvs5IHTIsUul3iLm8LJw76Fn2jKIsAXE91Z M86k+FECVPJln5JvLoDTbqgoNhZGBn3C4qRJEavCWKhZe1W9jYx2P1RugzHBW7PS NEfaPx+srEbbNUBAaIUOXYBiTMY1OONTOkJJW/N0/Mlr3XGcnpTbq3NZC2naCxIL W6eO+ZS54+mfjfxYAJzfCpmIUeOss7o= -----END CERTIFICATE-----Generated at Sun Apr 27 06:30:34 2025 by rpki-client