$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8e86ffd-371c-3c61-8b6d-cb8eff4b275e.roa File: e8e86ffd-371c-3c61-8b6d-cb8eff4b275e.roa (raw, json) Hash identifier: YZSzlzjYDHP+9/SFDSMvv6RXwF30SFLBJYePSXU3PDc= Subject key identifier: 3B:02:6C:7A:16:03:EC:5A:BC:AD:85:16:51:D9:92:DD:B5:95:83:F3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849A8E9EB19917C84BA73742140 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8e86ffd-371c-3c61-8b6d-cb8eff4b275e.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 16625 IP address blocks: 23.219.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:eb:19:91:7c:84:ba:73:74:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=deb9a1a4-03b7-4a91-8bba-7c4391506940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8c:93:59:c7:11:11:b2:62:45:f8:bb:0e:b5: 5b:80:b6:f8:1a:fd:dc:4c:25:31:8c:3f:db:e6:7b: e9:d6:a6:df:d0:a7:41:e1:81:35:65:cc:a6:ab:9f: f6:08:fa:0d:53:b8:a4:18:0d:77:7b:b0:8b:e8:4d: 93:2d:9d:af:cc:41:a5:ba:ac:e4:99:5f:e3:3e:08: 15:1a:ab:a6:c6:79:88:77:19:40:04:08:5f:36:2b: f0:5c:6f:b6:70:e9:06:61:44:93:2f:71:ab:0e:fe: 71:22:92:6f:f3:dc:69:e2:3f:3f:ea:6b:9f:76:82: 98:cc:c1:e7:86:9c:b7:69:64:1f:e1:4b:a6:62:79: ff:5a:50:f5:55:36:e3:fd:e1:a0:28:2b:de:03:df: ac:d6:a6:2b:a4:0f:bb:e4:96:ad:0e:40:aa:f5:8e: 42:32:b9:9f:5a:f9:46:8b:82:03:1e:23:08:dc:36: bf:45:b6:81:fb:45:56:e5:ba:66:16:a2:6a:77:a7: 64:1c:30:7c:62:81:07:3a:74:99:fb:ae:ce:a5:59: cd:43:c1:e5:74:ac:26:03:4f:05:ff:08:17:a1:b1: 37:7b:d9:3b:f6:db:49:3d:c5:a9:5f:46:32:59:28: 63:6c:21:37:ce:78:5f:25:2b:69:61:5e:11:15:1c: 1e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:02:6C:7A:16:03:EC:5A:BC:AD:85:16:51:D9:92:DD:B5:95:83:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8e86ffd-371c-3c61-8b6d-cb8eff4b275e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a2:af:15:86:39:46:fe:b3:cd:72:3d:ce:fb:b7:33:39:e7: 09:2c:75:11:f8:5f:ba:08:44:c4:2e:d7:e9:95:ba:62:84:5c: 3d:6a:06:c7:38:89:8d:fe:31:2f:b3:68:f5:85:e8:ba:02:0f: 20:ac:52:b9:36:74:b4:20:a0:b8:b1:5f:45:c8:f1:c2:15:41: 74:93:ae:fd:fd:a2:4b:c2:20:46:dd:a3:80:38:85:af:6f:cf: 49:c8:5e:1e:b7:33:56:ce:57:12:f0:94:21:f8:ba:43:23:54: 7f:d6:ea:b6:8d:31:f7:a8:02:78:86:6d:ee:92:96:f9:6b:29: b5:3a:55:6e:b7:7e:96:59:a0:63:1c:53:49:22:3c:3e:52:b0: 3c:5b:ad:5c:d6:11:63:2d:03:7b:5f:09:d7:19:65:f3:b9:5a: cd:05:1c:ad:ba:86:5f:ff:84:cd:54:1e:cf:33:9e:22:fd:a6: de:49:2b:ff:cb:ec:0e:2a:c5:e5:48:30:e2:a2:79:1e:f5:ff: f6:53:f6:3d:ff:03:26:92:45:14:5a:cc:dd:cb:50:f7:85:45: 26:6c:e4:15:a4:4b:73:d8:67:01:59:41:3e:02:1f:91:30:b0: 6f:4d:60:fb:da:f7:ec:a6:30:09:47:b6:14:2f:37:40:48:4f: 9b:7c:82:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6esZkXyEunN0IUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk ZGViOWExYTQtMDNiNy00YTkxLThiYmEtN2M0MzkxNTA2OTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4yTWccREbJiRfi7DrVbgLb4Gv3cTCUxjD/b 5nvp1qbf0KdB4YE1Zcymq5/2CPoNU7ikGA13e7CL6E2TLZ2vzEGluqzkmV/jPggV GqumxnmIdxlABAhfNivwXG+2cOkGYUSTL3GrDv5xIpJv89xp4j8/6mufdoKYzMHn hpy3aWQf4UumYnn/WlD1VTbj/eGgKCveA9+s1qYrpA+75JatDkCq9Y5CMrmfWvlG i4IDHiMI3Da/RbaB+0VW5bpmFqJqd6dkHDB8YoEHOnSZ+67OpVnNQ8HldKwmA08F /wgXobE3e9k79ttJPcWpX0YyWShjbCE3znhfJStpYV4RFRwe+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsCbHoWA+xavK2FFlHZkt21lYPzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZThlODZmZmQtMzcxYy0z YzYxLThiNmQtY2I4ZWZmNGIyNzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9sEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeirxWGOUb+s81yPc77tzM55wksdRH4X7oIRMQu1+mVumKEXD1qBsc4 iY3+MS+zaPWF6LoCDyCsUrk2dLQgoLixX0XI8cIVQXSTrv39okvCIEbdo4A4ha9v z0nIXh63M1bOVxLwlCH4ukMjVH/W6raNMfeoAniGbe6SlvlrKbU6VW63fpZZoGMc U0kiPD5SsDxbrVzWEWMtA3tfCdcZZfO5Ws0FHK26hl//hM1UHs8zniL9pt5JK//L 7A4qxeVIMOKieR71//ZT9j3/AyaSRRRazN3LUPeFRSZs5BWkS3PYZwFZQT4CH5Ew sG9NYPva9+ymMAlHthQvN0BIT5t8ghY= -----END CERTIFICATE-----Generated at Tue Apr 29 14:29:52 2025 by rpki-client