$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d9ec3e3-4511-3b7d-b607-291e0255ff7d.roa File: 3d9ec3e3-4511-3b7d-b607-291e0255ff7d.roa (raw, json) Hash identifier: FEo+dEYzjLMw/V93MXNqyVOFrP74uY8jE1tLgtAY5Y4= Subject key identifier: 62:C1:32:11:4A:7A:19:EA:80:87:6E:DD:64:43:2D:A1:C3:37:69:78 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848CC7BA114738C06E171A771B8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d9ec3e3-4511-3b7d-b607-291e0255ff7d.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.220.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:a1:14:73:8c:06:e1:71:a7:71:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=f8658a48-82b2-4ec9-9430-8db28a8a535d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:11:88:58:e1:ea:91:7a:d9:4c:02:e7:67:fc: f7:9a:9f:0b:c7:a6:6d:3c:5e:5d:9a:a2:66:c1:a2: 54:62:69:1d:ad:fc:d3:a3:dd:9b:1e:67:dc:34:48: a1:3f:3e:53:fe:88:16:1d:d8:90:ec:3e:d8:09:2c: ad:4e:f9:e1:ef:58:71:cd:93:f7:1d:e7:1f:59:b2: e6:43:41:48:5a:36:68:d3:0d:0b:97:01:3d:4b:44: 33:c9:0c:05:d7:44:13:26:91:6b:7a:15:73:a1:16: 52:c4:4c:80:c7:3c:3f:f0:cc:fa:a3:35:dc:58:0f: 06:6d:54:23:a9:d1:af:21:7f:7e:68:ec:a5:49:83: 05:68:1d:a2:e6:ad:69:06:2d:4f:61:17:85:1c:5a: aa:61:cc:a9:23:b3:42:39:3e:9d:f6:60:10:ad:25: bf:6b:89:b9:24:c9:49:df:ce:a1:ed:11:c4:e4:20: e6:8c:9a:32:5d:e9:14:16:66:84:6f:e8:f6:9a:20: 06:db:6d:1c:27:47:bb:02:7a:76:26:63:f2:61:c4: 97:29:cb:58:33:34:37:77:66:10:f1:9d:05:6f:db: 48:7a:9b:d4:eb:6f:c5:e1:bb:08:54:7a:9e:e7:9a: 67:d3:86:6a:d7:0d:d6:f0:70:8e:53:00:b1:a8:37: 2f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C1:32:11:4A:7A:19:EA:80:87:6E:DD:64:43:2D:A1:C3:37:69:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d9ec3e3-4511-3b7d-b607-291e0255ff7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a7:aa:ea:e5:72:1e:57:42:26:17:b8:43:54:b5:25:1d:93: 33:cb:72:8b:74:b6:44:42:e6:2e:18:9f:fd:64:83:9c:c9:e7: 6c:f0:35:81:7d:a3:3d:78:7e:76:10:56:9d:60:5d:a1:3f:0b: 0a:fb:68:f2:7c:3f:54:fa:ce:99:1f:f0:d2:6b:9e:42:cc:f6: b2:2f:06:b3:37:72:f7:9b:ce:d8:e6:ce:84:96:7e:e8:57:01: 2a:b3:ef:01:6b:7a:a3:44:81:02:9f:b7:ef:37:84:64:d2:cb: 7d:cc:b8:b3:69:aa:8e:a6:0b:5f:b2:3f:36:b4:8d:a6:5c:9f: d6:4e:96:15:8a:69:28:6c:47:a9:52:7c:b1:56:74:ee:bd:47: cb:b4:46:fe:a7:c7:cb:cc:e9:ed:bd:c6:f4:7f:e3:5b:f4:e0: f1:66:e1:59:f8:14:90:88:99:5a:c1:c1:bd:74:9c:4d:3f:ee: ee:8f:52:70:52:3e:9c:4c:d1:c1:43:da:e3:19:e1:16:b7:fd: 3d:c0:30:03:14:c6:f2:43:47:bd:b6:57:5e:fe:77:e8:ad:63: eb:de:c6:71:c7:15:0c:fc:39:66:34:c3:95:fe:a5:f0:e0:fb: 93:77:49:d6:37:7c:96:e4:ff:0e:99:a9:77:b8:f3:fb:b4:29: b2:b1:8e:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe6EUc4wG4XGncbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk Zjg2NThhNDgtODJiMi00ZWM5LTk0MzAtOGRiMjhhOGE1MzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxGIWOHqkXrZTALnZ/z3mp8Lx6ZtPF5dmqJm waJUYmkdrfzTo92bHmfcNEihPz5T/ogWHdiQ7D7YCSytTvnh71hxzZP3HecfWbLm Q0FIWjZo0w0LlwE9S0QzyQwF10QTJpFrehVzoRZSxEyAxzw/8Mz6ozXcWA8GbVQj qdGvIX9+aOylSYMFaB2i5q1pBi1PYReFHFqqYcypI7NCOT6d9mAQrSW/a4m5JMlJ 386h7RHE5CDmjJoyXekUFmaEb+j2miAG220cJ0e7Anp2JmPyYcSXKctYMzQ3d2YQ 8Z0Fb9tIepvU62/F4bsIVHqe55pn04Zq1w3W8HCOUwCxqDcvNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLBMhFKehnqgIdu3WRDLaHDN2l4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Q5ZWMzZTMtNDUxMS0z YjdkLWI2MDctMjkxZTAyNTVmZjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHenqurlch5XQiYXuENUtSUdkzPLcot0tkRC5i4Yn/1kg5zJ52zwNYF9 oz14fnYQVp1gXaE/Cwr7aPJ8P1T6zpkf8NJrnkLM9rIvBrM3cvebztjmzoSWfuhX ASqz7wFreqNEgQKft+83hGTSy33MuLNpqo6mC1+yPza0jaZcn9ZOlhWKaShsR6lS fLFWdO69R8u0Rv6nx8vM6e29xvR/41v04PFm4Vn4FJCImVrBwb10nE0/7u6PUnBS PpxM0cFD2uMZ4Ra3/T3AMAMUxvJDR722V17+d+itY+vexnHHFQz8OWY0w5X+pfDg +5N3SdY3fJbk/w6ZqXe48/u0KbKxjl8= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:40 2025 by rpki-client