$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63ac2c72-b418-33fd-abcd-c5bf4dac6e1c.roa File: 63ac2c72-b418-33fd-abcd-c5bf4dac6e1c.roa (raw, json) Hash identifier: XstDn9cOzkktQvqL9KPkO3ubm6n/yjOMnVaMKle+bWM= Subject key identifier: B6:F0:7C:C8:94:47:F7:B0:CC:B0:D3:33:6D:DC:97:F5:B6:CC:AF:12 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F01A84B6DB168CD3B951DF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63ac2c72-b418-33fd-abcd-c5bf4dac6e1c.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 20940 IP address blocks: 173.223.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:84:b6:db:16:8c:d3:b9:51:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=c356ef81-f036-40d0-9222-4cc59315e823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c1:98:9d:d2:66:ec:5c:dc:51:18:c1:55:55: d6:50:85:1f:4e:08:e0:cd:ad:36:d2:91:87:c8:c9: 79:4a:a9:6d:29:a7:45:30:73:43:09:c3:57:97:ba: e3:61:b1:9a:94:37:d5:b5:cb:33:1c:0e:db:a9:d4: 8b:ba:83:99:f2:85:54:e2:d1:16:4a:29:9f:ce:33: 46:73:c4:e3:85:49:ff:28:65:df:a0:ea:52:95:46: 0c:aa:e9:1f:03:22:c9:65:7a:e9:81:45:34:7e:ff: ed:75:01:7a:c9:80:fe:1a:05:4c:9b:48:a8:02:7a: a2:81:64:56:a5:9e:4c:0b:3c:77:92:34:98:ae:b3: 37:ec:67:97:83:5e:02:7b:bb:cf:06:1a:c2:2e:10: dc:1a:3c:0b:6d:68:44:5c:3e:7c:fe:39:8b:1d:e1: 45:65:87:c3:20:86:ae:4c:6a:46:c8:e9:5b:60:1f: 09:e5:5c:1b:6a:79:83:04:72:4e:aa:8f:9c:de:ce: 02:08:2b:9c:7c:34:ca:a8:13:a9:0e:3e:e6:65:34: 7c:f3:62:cd:4f:15:73:35:b4:bf:15:ce:7e:84:4a: d8:64:73:9f:bb:f4:9f:ad:c6:df:06:00:50:0b:a7: a4:7d:4f:ab:63:26:1d:35:4f:b2:8e:cd:22:56:6a: 4c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F0:7C:C8:94:47:F7:B0:CC:B0:D3:33:6D:DC:97:F5:B6:CC:AF:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63ac2c72-b418-33fd-abcd-c5bf4dac6e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:07:11:a5:e4:0d:fe:35:a3:03:7a:49:7e:39:9d:04:89:3f: fc:97:f8:53:8e:2e:bc:dc:f8:1b:3b:34:d8:41:06:13:f8:c9: 2a:4d:69:4c:13:9b:4f:f2:ec:47:11:f3:c6:e7:d6:6a:0e:23: 11:7c:68:22:54:2a:ee:71:6f:a3:c2:e9:b4:a6:8b:43:7b:9f: 27:53:06:25:da:36:d9:94:84:3b:5f:c4:42:9c:d2:9e:83:de: c8:1a:cd:de:c6:28:fe:64:f0:91:bd:67:09:09:61:9d:82:64: 08:05:a4:2f:61:fd:65:f5:d5:a4:9e:ee:29:e8:df:12:93:3f: a5:33:a4:26:2c:17:43:73:1e:4e:10:e3:a4:da:9f:d7:90:f3: 31:45:40:c3:73:bb:97:0e:58:a4:81:9f:be:af:df:68:7b:ec: ea:1d:ca:d8:aa:c1:3b:2d:b2:ac:71:af:72:fd:b6:b9:19:71: 77:50:b9:c5:11:50:31:e7:b8:3d:92:f1:02:9a:80:90:e8:65: d0:46:5c:d5:7b:75:d4:16:34:16:13:07:78:e2:6e:f3:db:e4: a1:55:0f:78:78:00:8e:64:cd:57:e4:d6:0b:53:87:0b:ef:72: ef:18:d1:06:01:c1:d0:8c:4a:dd:94:77:fe:3c:14:26:e3:32: b9:19:bf:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGoS22xaM07lR3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk YzM1NmVmODEtZjAzNi00MGQwLTkyMjItNGNjNTkzMTVlODIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MGYndJm7FzcURjBVVXWUIUfTgjgza020pGH yMl5SqltKadFMHNDCcNXl7rjYbGalDfVtcszHA7bqdSLuoOZ8oVU4tEWSimfzjNG c8TjhUn/KGXfoOpSlUYMqukfAyLJZXrpgUU0fv/tdQF6yYD+GgVMm0ioAnqigWRW pZ5MCzx3kjSYrrM37GeXg14Ce7vPBhrCLhDcGjwLbWhEXD58/jmLHeFFZYfDIIau TGpGyOlbYB8J5VwbanmDBHJOqo+c3s4CCCucfDTKqBOpDj7mZTR882LNTxVzNbS/ Fc5+hErYZHOfu/SfrcbfBgBQC6ekfU+rYyYdNU+yjs0iVmpM+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbwfMiUR/ewzLDTM23cl/W2zK8SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjNhYzJjNzItYjQxOC0z M2ZkLWFiY2QtYzViZjRkYWM2ZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArd8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcHEaXkDf41owN6SX45nQSJP/yX+FOOLrzc+Bs7NNhBBhP4ySpNaUwT m0/y7EcR88bn1moOIxF8aCJUKu5xb6PC6bSmi0N7nydTBiXaNtmUhDtfxEKc0p6D 3sgazd7GKP5k8JG9ZwkJYZ2CZAgFpC9h/WX11aSe7ino3xKTP6UzpCYsF0NzHk4Q 46Tan9eQ8zFFQMNzu5cOWKSBn76v32h77OodytiqwTstsqxxr3L9trkZcXdQucUR UDHnuD2S8QKagJDoZdBGXNV7ddQWNBYTB3jibvPb5KFVD3h4AI5kzVfk1gtThwvv cu8Y0QYBwdCMSt2Ud/48FCbjMrkZvw8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:20:58 2025 by rpki-client