$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d95496f5-ca71-31a9-8f2e-1e542919b3aa.roa File: d95496f5-ca71-31a9-8f2e-1e542919b3aa.roa (raw, json) Hash identifier: qhsSAb88o6vXfLaIjFqZCZil/voDDOmZ2PTuRyV4qhM= Subject key identifier: D7:7E:70:B4:2E:61:7C:89:F1:2E:50:00:B9:79:C6:5F:B9:BE:8F:38 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF49CBA152308B477D91700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d95496f5-ca71-31a9-8f2e-1e542919b3aa.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.211.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:9c:ba:15:23:08:b4:77:d9:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=764574f8-abaa-403f-9620-450b8bed4051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:99:8b:30:90:b1:b3:b6:fa:7c:c7:c5:ba:67: a7:be:a2:a6:2c:a5:c7:2e:44:a5:3f:56:5e:63:b8: b9:87:dc:cc:d2:ea:51:e1:72:15:da:c2:93:ee:74: bd:5a:bc:90:ac:c0:19:67:c2:92:d6:74:c0:c3:6d: 20:50:b4:12:1d:dc:25:bd:86:43:22:11:60:ba:60: 93:da:b9:8b:cb:d3:4d:35:25:5a:b7:a2:e7:68:72: 92:ef:0c:80:8b:6f:50:9a:2e:ab:72:66:c0:b0:8a: bd:34:0d:02:0c:e0:41:ce:48:ee:17:fb:3b:dc:36: 42:85:f3:73:89:0d:a3:6c:76:0c:bd:e9:b6:7a:75: 86:bc:06:f5:0c:7e:e9:94:cb:55:b7:e8:11:ea:65: e2:a0:38:dc:d3:64:02:4e:16:b1:f9:7e:7f:2a:e0: 3f:80:f4:8e:ff:8d:9c:23:66:f4:c4:14:56:6a:7d: 1e:05:37:a3:a8:35:14:7a:72:e4:0b:b3:5e:eb:5a: 35:83:30:cc:79:a2:d7:7c:03:24:74:1c:9e:69:74: 73:bf:83:53:3b:07:73:cd:24:04:79:49:8d:9b:24: 38:43:4e:c6:bc:29:d2:1b:17:16:1c:cd:d1:13:3c: c0:6e:13:c9:b7:37:30:46:9d:29:60:d1:15:23:1c: 57:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7E:70:B4:2E:61:7C:89:F1:2E:50:00:B9:79:C6:5F:B9:BE:8F:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d95496f5-ca71-31a9-8f2e-1e542919b3aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:88:61:5f:8e:1d:53:ab:75:42:85:b8:b6:4a:06:c3:32:29: 85:10:f8:32:df:36:bb:40:37:eb:6f:be:95:5d:49:6a:67:9a: 18:66:a3:e4:47:c7:ec:9a:d1:eb:ef:8b:d4:2e:10:46:48:ff: d1:a6:e1:47:57:c1:b2:f9:14:c8:47:20:9d:70:59:07:b7:e3: 34:c2:c9:0a:90:11:29:2f:05:db:81:2e:15:f2:45:5e:75:7b: 4a:a3:6e:50:6a:46:36:32:0c:b3:96:fd:7f:02:e1:2c:c1:f6: c2:76:67:52:b6:6d:09:11:c8:fe:a0:df:82:ed:18:f4:8f:f6: 0a:17:c3:4e:5c:17:3c:18:b6:cb:77:fc:ea:6a:12:4d:a9:4a: 17:db:37:b1:87:e4:2b:48:fe:79:bb:01:26:55:4f:bd:4c:b3: 46:2a:45:9b:ad:1b:51:5e:60:53:3a:56:ba:a6:b3:1c:73:b7: 85:ca:d8:b2:22:6d:74:a2:3b:11:f9:3f:9e:26:e5:09:cd:7b: a2:87:c9:ce:2b:c3:81:aa:c0:07:80:1a:07:d8:af:80:d6:95: 08:5c:30:ec:b3:f9:7f:68:7e:1c:e7:26:18:59:58:75:0a:e3: d5:09:10:d1:91:34:a8:f8:3f:7e:e4:a2:40:ef:35:e8:ed:aa: 46:d3:35:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9Jy6FSMItHfZFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NzY0NTc0ZjgtYWJhYS00MDNmLTk2MjAtNDUwYjhiZWQ0MDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZmLMJCxs7b6fMfFumenvqKmLKXHLkSlP1Ze Y7i5h9zM0upR4XIV2sKT7nS9WryQrMAZZ8KS1nTAw20gULQSHdwlvYZDIhFgumCT 2rmLy9NNNSVat6LnaHKS7wyAi29Qmi6rcmbAsIq9NA0CDOBBzkjuF/s73DZChfNz iQ2jbHYMvem2enWGvAb1DH7plMtVt+gR6mXioDjc02QCThax+X5/KuA/gPSO/42c I2b0xBRWan0eBTejqDUUenLkC7Ne61o1gzDMeaLXfAMkdByeaXRzv4NTOwdzzSQE eUmNmyQ4Q07GvCnSGxcWHM3REzzAbhPJtzcwRp0pYNEVIxxX5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNd+cLQuYXyJ8S5QALl5xl+5vo84MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDk1NDk2ZjUtY2E3MS0z MWE5LThmMmUtMWU1NDI5MTliM2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9NkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuIYV+OHVOrdUKFuLZKBsMyKYUQ+DLfNrtAN+tvvpVdSWpnmhhmo+RH x+ya0evvi9QuEEZI/9Gm4UdXwbL5FMhHIJ1wWQe34zTCyQqQESkvBduBLhXyRV51 e0qjblBqRjYyDLOW/X8C4SzB9sJ2Z1K2bQkRyP6g34LtGPSP9goXw05cFzwYtst3 /OpqEk2pShfbN7GH5CtI/nm7ASZVT71Ms0YqRZutG1FeYFM6Vrqmsxxzt4XK2LIi bXSiOxH5P54m5QnNe6KHyc4rw4GqwAeAGgfYr4DWlQhcMOyz+X9ofhznJhhZWHUK 49UJENGRNKj4P37kokDvNejtqkbTNQE= -----END CERTIFICATE-----Generated at Sun Apr 27 00:51:03 2025 by rpki-client