$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25d826ef-7ca4-3998-8c07-e2034a4306d6.roa File: 25d826ef-7ca4-3998-8c07-e2034a4306d6.roa (raw, json) Hash identifier: pQIPiYsd9ScQpgWktVFVLTxbjXtz+S6LpNbnjBd97jo= Subject key identifier: 83:48:81:B9:CA:BB:63:8B:EE:B4:76:AB:CD:10:76:6D:7A:C4:CF:1A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A1B60111E21E3296A47D01900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25d826ef-7ca4-3998-8c07-e2034a4306d6.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.221.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:11:1e:21:e3:29:6a:47:d0:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=2a30ddaa-f294-4773-95e8-6eacf3295bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:31:e0:5c:fa:06:01:80:63:e0:d9:52:b4:12: e1:a0:28:83:2b:bb:53:c6:a3:9e:e6:d7:5d:bc:e2: aa:1f:81:df:c5:b9:ab:f8:37:ca:97:60:68:87:88: 95:c7:b0:26:b2:45:86:af:00:e9:29:57:b4:86:02: 06:e6:54:6e:7f:ba:dc:11:ae:8a:75:04:e0:53:4f: c5:d7:52:9e:87:fa:80:d8:52:c1:b1:c2:14:78:46: ee:ac:27:74:e0:1e:c7:56:79:74:67:39:51:9b:15: 9c:ec:18:e2:bf:29:63:ff:7b:a7:0c:35:9f:16:de: c5:84:1d:64:9f:c6:f0:c2:5c:93:1b:ab:7f:2b:b8: 35:03:c3:9d:96:f8:09:f5:fa:f3:8e:94:03:6f:48: c8:f3:bb:47:39:0a:30:ac:80:66:69:76:54:9f:31: b3:3b:b2:58:a8:b5:26:8a:24:29:bc:76:b3:27:dc: 53:86:2b:b4:3a:36:7c:ce:cc:ab:bf:0e:76:27:e1: 47:c6:c1:5d:74:a8:7e:6d:a0:2c:15:cd:3d:53:47: bb:94:d5:f7:18:03:6f:1e:90:a6:26:7e:5f:5f:9c: 2a:68:d2:49:be:73:81:b3:24:0f:30:18:7f:dd:67: a2:5a:d1:01:23:92:79:c6:15:eb:b5:9c:37:3d:2c: e5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:48:81:B9:CA:BB:63:8B:EE:B4:76:AB:CD:10:76:6D:7A:C4:CF:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25d826ef-7ca4-3998-8c07-e2034a4306d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:73:36:4b:83:7a:86:be:62:83:4f:c6:1c:c5:00:39:27:f8: 7a:d1:d5:0b:53:b3:41:39:19:3d:eb:cd:d7:ab:2b:fd:ec:54: 24:19:a0:8b:0e:16:b7:3d:e9:cc:89:08:bf:b5:38:c2:84:12: 78:14:32:d0:d5:76:c7:eb:4e:2c:e2:b0:aa:e7:53:6b:7d:43: d3:0f:77:02:40:a8:52:0c:b9:b1:c1:7e:6d:40:5e:30:b6:00: 74:90:75:10:50:0c:96:f8:bd:3c:eb:2e:c2:e1:bf:38:75:9c: 39:2b:b5:c2:bf:ca:5b:2c:5b:14:24:75:db:3a:94:0c:55:22: a2:51:e8:29:8a:76:6f:a0:90:de:2b:27:8d:bb:1d:4d:1a:89: 1e:ac:e6:eb:79:7b:4f:eb:53:5c:88:6c:dd:80:52:57:7d:8b: cd:ef:4f:bc:2f:74:0b:d0:96:f0:5e:80:55:a8:c2:30:70:a3: e1:da:54:2e:df:22:80:6a:9d:04:b7:cc:43:dc:cc:5e:4f:56: b5:49:ad:f2:f4:f7:fb:1b:29:89:96:f3:98:f0:8e:16:d1:57: 8a:74:43:6b:d6:ef:50:6e:05:6a:ad:2f:09:b0:00:af:02:ec: 7e:1f:9f:6c:9c:50:f2:78:32:67:8c:85:1d:84:75:f5:db:97: e3:74:f4:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYBEeIeMpakfQGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk MmEzMGRkYWEtZjI5NC00NzczLTk1ZTgtNmVhY2YzMjk1YmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jHgXPoGAYBj4NlStBLhoCiDK7tTxqOe5tdd vOKqH4Hfxbmr+DfKl2Boh4iVx7AmskWGrwDpKVe0hgIG5lRuf7rcEa6KdQTgU0/F 11Keh/qA2FLBscIUeEburCd04B7HVnl0ZzlRmxWc7Bjivylj/3unDDWfFt7FhB1k n8bwwlyTG6t/K7g1A8OdlvgJ9frzjpQDb0jI87tHOQowrIBmaXZUnzGzO7JYqLUm iiQpvHazJ9xThiu0OjZ8zsyrvw52J+FHxsFddKh+baAsFc09U0e7lNX3GANvHpCm Jn5fX5wqaNJJvnOBsyQPMBh/3WeiWtEBI5J5xhXrtZw3PSzlVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINIgbnKu2OL7rR2q80Qdm16xM8aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjVkODI2ZWYtN2NhNC0z OTk4LThjMDctZTIwMzRhNDMwNmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF904MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNzNkuDeoa+YoNPxhzFADkn+HrR1QtTs0E5GT3rzderK/3sVCQZoIsO Frc96cyJCL+1OMKEEngUMtDVdsfrTizisKrnU2t9Q9MPdwJAqFIMubHBfm1AXjC2 AHSQdRBQDJb4vTzrLsLhvzh1nDkrtcK/ylssWxQkdds6lAxVIqJR6CmKdm+gkN4r J427HU0aiR6s5ut5e0/rU1yIbN2AUld9i83vT7wvdAvQlvBegFWowjBwo+HaVC7f IoBqnQS3zEPczF5PVrVJrfL09/sbKYmW85jwjhbRV4p0Q2vW71BuBWqtLwmwAK8C 7H4fn2ycUPJ4MmeMhR2EdfXbl+N09O8= -----END CERTIFICATE-----Generated at Sat Jun 7 22:53:23 2025 by rpki-client