$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0514a66a-e7fa-3b1d-8984-21f19a9f0f01.roa File: 0514a66a-e7fa-3b1d-8984-21f19a9f0f01.roa (raw, json) Hash identifier: xBzsAelBParKuYl4FBuIY+q8L8EvEGueuA06SlrHZLY= Subject key identifier: 10:2F:DA:BD:76:7D:3F:96:C0:A6:A3:12:A7:32:EF:6C:6C:CD:49:C4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4BA97A1CFB61F96EA9280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0514a66a-e7fa-3b1d-8984-21f19a9f0f01.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.223.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:ba:97:a1:cf:b6:1f:96:ea:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=c8bb1e34-b3b1-423b-b195-d415723daead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:89:a3:04:65:45:db:e3:07:36:26:4b:92:63: 9c:67:0c:92:47:ca:22:71:a1:a2:27:94:f7:c1:58: 46:81:3c:b8:79:29:f7:1c:45:e6:f8:63:c9:77:b1: 9c:aa:09:64:b1:94:63:85:38:f7:02:6b:2b:4a:6c: e9:7e:70:b0:d6:98:55:85:2e:94:53:09:8c:42:33: ad:62:02:05:b8:62:9c:72:e2:06:2d:d7:ba:e4:e2: 71:18:7d:27:44:66:78:00:e1:9e:dd:40:06:b6:78: 59:5c:b1:a6:bf:16:87:e6:8d:72:f8:21:ae:9f:2d: 22:a5:dd:7b:32:93:7c:0d:1e:dc:8b:a7:01:04:35: 7e:cf:2b:88:f6:ef:aa:db:7f:ab:83:98:24:a9:a3: 58:87:50:dd:fc:1c:b7:b6:b0:a4:d0:5c:b8:db:a8: 72:ff:fd:b2:14:24:dd:0e:98:65:93:13:ae:5a:ce: d0:38:97:2b:29:1f:1a:e6:87:a6:88:7c:7e:72:8d: 17:20:d3:a0:c6:b8:03:40:41:63:76:e9:b2:f3:26: 02:f2:f3:bf:64:f9:ec:5f:86:26:b6:a6:75:99:df: 27:47:2f:98:a7:43:ef:ec:7b:ac:bf:c7:17:92:6f: 11:24:fc:86:21:d0:1f:5d:41:07:2f:e9:f1:96:e6: 5a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2F:DA:BD:76:7D:3F:96:C0:A6:A3:12:A7:32:EF:6C:6C:CD:49:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0514a66a-e7fa-3b1d-8984-21f19a9f0f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ce:af:d9:0c:ab:d2:8c:3e:66:4d:ce:88:d0:46:77:0c:a1: 70:a1:d4:1e:7d:51:8b:51:36:82:cd:12:00:df:6f:e5:65:f0: 7f:59:ca:fa:28:9b:b0:8e:46:ee:76:b5:4b:5a:6e:04:67:3b: 11:86:a1:16:2a:22:3b:17:ac:ed:00:f4:a1:58:fa:a9:65:b1: 9c:8c:c6:43:82:e4:d0:10:68:c1:81:e3:70:07:20:02:68:23: d7:5c:fc:d7:6f:0e:1d:c1:bb:b9:b7:5c:d8:b4:5b:d4:bf:c2: 7a:ba:5f:4c:ec:6d:b8:53:bb:95:f1:00:bc:db:5f:54:d7:3f: 65:95:a5:74:ce:d6:50:09:99:fb:db:f4:32:6d:1a:cf:8a:a9: e6:22:49:59:48:8b:99:ed:74:4b:94:da:0a:68:e4:7c:31:76: 0a:68:85:ff:0b:54:62:a5:8f:51:5a:3f:6d:95:da:6d:4a:ed: bc:05:17:9c:23:92:09:ea:2b:87:d8:a1:12:12:9b:b4:53:2d: 81:fc:d8:01:80:35:df:3e:2e:f1:ef:51:4d:2f:57:c1:95:f7: 8e:ad:21:ca:1a:cf:92:58:be:aa:15:6b:e8:f6:8c:07:30:0f: 97:a1:c6:6e:bc:92:66:a3:d9:bf:2a:62:48:6d:3a:e4:89:3f: 80:29:cb:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLqXoc+2H5bqkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YzhiYjFlMzQtYjNiMS00MjNiLWIxOTUtZDQxNTcyM2RhZWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtImjBGVF2+MHNiZLkmOcZwySR8oicaGiJ5T3 wVhGgTy4eSn3HEXm+GPJd7GcqglksZRjhTj3AmsrSmzpfnCw1phVhS6UUwmMQjOt YgIFuGKccuIGLde65OJxGH0nRGZ4AOGe3UAGtnhZXLGmvxaH5o1y+CGuny0ipd17 MpN8DR7ci6cBBDV+zyuI9u+q23+rg5gkqaNYh1Dd/By3trCk0Fy426hy//2yFCTd DphlkxOuWs7QOJcrKR8a5oemiHx+co0XINOgxrgDQEFjdumy8yYC8vO/ZPnsX4Ym tqZ1md8nRy+Yp0Pv7Husv8cXkm8RJPyGIdAfXUEHL+nxluZaiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAv2r12fT+WwKajEqcy72xszUnEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDUxNGE2NmEtZTdmYS0z YjFkLTg5ODQtMjFmMTlhOWYwZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF98QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3Or9kMq9KMPmZNzojQRncMoXCh1B59UYtRNoLNEgDfb+Vl8H9Zyvoo m7CORu52tUtabgRnOxGGoRYqIjsXrO0A9KFY+qllsZyMxkOC5NAQaMGB43AHIAJo I9dc/NdvDh3Bu7m3XNi0W9S/wnq6X0zsbbhTu5XxALzbX1TXP2WVpXTO1lAJmfvb 9DJtGs+KqeYiSVlIi5ntdEuU2gpo5Hwxdgpohf8LVGKlj1FaP22V2m1K7bwFF5wj kgnqK4fYoRISm7RTLYH82AGANd8+LvHvUU0vV8GV946tIcoaz5JYvqoVa+j2jAcw D5ehxm68kmaj2b8qYkhtOuSJP4Apy4Y= -----END CERTIFICATE-----Generated at Thu Jun 5 18:15:00 2025 by rpki-client