$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f20c314-9626-37ad-ae50-b0f60b950a06.roa File: 4f20c314-9626-37ad-ae50-b0f60b950a06.roa (raw, json) Hash identifier: i/6q0a0J47D6ADwOP7dk+rY37YJmXlWwEREkPfDr5og= Subject key identifier: E4:2B:86:7A:F6:6F:1E:1B:CB:40:1F:5A:5C:36:EC:C7:ED:0B:EC:57 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848CC7BA0F58D6686CDF282C230 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f20c314-9626-37ad-ae50-b0f60b950a06.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.220.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:a0:f5:8d:66:86:cd:f2:82:c2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=efacf786-c724-4719-b1d2-2291f9ce54d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:97:30:e6:88:03:e1:93:dc:e3:b2:27:f4:1c: 6d:74:ff:24:ea:08:5e:0d:84:53:74:54:17:26:35: 18:79:dd:fc:46:98:d1:c4:df:82:22:7c:57:fe:da: f7:fb:a3:0b:42:f6:85:b0:87:e1:d0:79:80:78:e8: 1e:b5:e0:82:fb:17:34:95:7a:ae:97:ba:4b:18:d8: d3:e2:1b:0b:3b:14:3c:43:65:25:47:d4:b3:c5:08: 84:62:3e:51:2d:05:ba:2b:79:01:07:16:29:e8:69: 11:cc:ce:03:fc:cf:0b:96:98:47:97:bd:d3:34:4e: b1:98:07:af:9c:03:6d:ca:35:4a:9e:fe:8d:02:30: 30:b9:9d:ca:f9:61:d5:96:df:ee:b4:11:e3:be:bf: b9:d1:46:d6:d1:42:91:b6:cf:48:31:41:3a:8b:c5: b5:e0:d5:5b:c5:48:6d:97:fb:5e:ca:cf:86:88:f3: c9:c3:41:4c:45:4c:a1:15:d2:0e:1f:4a:8e:2b:d0: 30:9a:96:3e:24:d8:7c:5e:0d:e0:e5:34:8c:66:e7: 52:34:a5:d6:07:2c:5b:d0:95:3b:96:5f:1d:d9:18: fc:77:91:22:18:6d:ad:92:a5:aa:79:39:c9:41:13: de:2d:36:5c:16:ac:e3:a2:bb:90:f8:03:9a:87:5c: 79:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2B:86:7A:F6:6F:1E:1B:CB:40:1F:5A:5C:36:EC:C7:ED:0B:EC:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f20c314-9626-37ad-ae50-b0f60b950a06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:2f:17:02:e5:48:95:6c:fc:1f:11:90:02:9f:ad:59:36:49: 1f:d3:d1:6e:38:ae:71:ea:33:2a:d7:1e:9a:c8:2e:23:5c:2a: 45:10:d7:6f:8b:c6:9d:7a:87:1a:e6:ab:f9:2a:15:de:20:74: 28:b0:20:f6:f7:4d:33:19:c9:86:c0:b3:66:29:e7:06:1a:2b: 5d:38:79:65:27:07:f4:a7:19:e7:f5:a9:1e:0b:a2:1d:5d:6e: cf:23:99:96:ef:a8:7f:5e:50:bf:8d:0e:a1:82:73:58:f8:8b: ec:be:30:db:6d:c7:01:7c:15:7c:4a:0f:79:df:8a:fb:7d:98: 18:9f:b5:96:d4:8a:36:19:7c:e6:f2:d1:b8:05:da:5e:7a:d8: 43:c4:f8:02:90:87:2d:64:e6:1a:2e:65:21:27:23:37:f8:a3: 66:9b:a9:04:a5:49:84:1e:20:64:5b:2f:7e:f5:7f:d2:ad:a7: 54:e7:a2:be:a3:d5:7c:44:0d:e9:8d:b1:bc:59:35:a5:c8:27: 9f:3d:e7:0c:d3:61:d9:d4:76:66:10:77:14:11:a5:30:58:c4: bc:42:07:82:3a:26:5a:a2:9f:a6:76:6c:61:45:94:2e:95:8f: c5:9e:32:a3:71:e9:0f:68:19:9f:a5:3c:70:3c:68:02:d4:3d: 0d:8b:75:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe6D1jWaGzfKCwjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk ZWZhY2Y3ODYtYzcyNC00NzE5LWIxZDItMjI5MWY5Y2U1NGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5cw5ogD4ZPc47In9BxtdP8k6gheDYRTdFQX JjUYed38RpjRxN+CInxX/tr3+6MLQvaFsIfh0HmAeOgeteCC+xc0lXqul7pLGNjT 4hsLOxQ8Q2UlR9SzxQiEYj5RLQW6K3kBBxYp6GkRzM4D/M8LlphHl73TNE6xmAev nANtyjVKnv6NAjAwuZ3K+WHVlt/utBHjvr+50UbW0UKRts9IMUE6i8W14NVbxUht l/teys+GiPPJw0FMRUyhFdIOH0qOK9AwmpY+JNh8Xg3g5TSMZudSNKXWByxb0JU7 ll8d2Rj8d5EiGG2tkqWqeTnJQRPeLTZcFqzjoruQ+AOah1x5awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQrhnr2bx4by0AfWlw27MftC+xXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGYyMGMzMTQtOTYyNi0z N2FkLWFlNTAtYjBmNjBiOTUwYTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9xqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwvFwLlSJVs/B8RkAKfrVk2SR/T0W44rnHqMyrXHprILiNcKkUQ12+L xp16hxrmq/kqFd4gdCiwIPb3TTMZyYbAs2Yp5wYaK104eWUnB/SnGef1qR4Loh1d bs8jmZbvqH9eUL+NDqGCc1j4i+y+MNttxwF8FXxKD3nfivt9mBiftZbUijYZfOby 0bgF2l562EPE+AKQhy1k5houZSEnIzf4o2abqQSlSYQeIGRbL371f9Ktp1Tnor6j 1XxEDemNsbxZNaXIJ5895wzTYdnUdmYQdxQRpTBYxLxCB4I6Jlqin6Z2bGFFlC6V j8WeMqNx6Q9oGZ+lPHA8aALUPQ2Ldc8= -----END CERTIFICATE-----Generated at Sat Apr 5 11:07:15 2025 by rpki-client