$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76eab935-3070-3b55-93a5-e525d7df40d2.roa File: 76eab935-3070-3b55-93a5-e525d7df40d2.roa (raw, json) Hash identifier: V3LNgbJjJoQdEYXuZ2v9tBfJUxZxjCYQXumRZvpf/6o= Subject key identifier: BA:3E:0E:64:91:3F:3F:CC:B1:D7:D6:15:08:E3:CA:09:D4:7F:B0:F0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849E38A38EF023125FDE69AD000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76eab935-3070-3b55-93a5-e525d7df40d2.roa Signing time: Sun 18 May 2025 01:00:47 +0000 ROA not before: Sun 18 May 2025 01:00:47 +0000 ROA not after: Sat 16 Aug 2025 01:00:47 +0000 asID: 7552 IP address blocks: 23.205.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e3:8a:38:ef:02:31:25:fd:e6:9a:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 18 01:00:47 2025 GMT Not After : Aug 16 01:00:47 2025 GMT Subject: CN=33f2bb60-8275-4887-b5c8-f95783874b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:33:a9:7c:c1:74:a6:e1:29:a9:ac:f6:00:36: 7b:46:73:d8:3e:b4:a5:48:44:dc:72:93:a7:aa:f2: a5:7f:77:be:b6:59:06:10:bd:a9:45:44:3a:63:da: c5:af:dd:60:0a:38:74:c8:ff:52:e6:31:4f:ea:11: 5d:83:c4:69:c0:c5:b5:99:73:40:f1:3c:7a:68:6e: 4c:52:3c:34:65:80:d7:41:43:04:18:30:23:40:fc: 72:27:f8:96:94:da:07:4c:11:98:32:c6:5e:c6:4c: f4:29:90:2f:d2:c8:fd:0f:12:33:d1:96:84:97:3a: 89:48:f2:c9:83:db:4e:bf:19:bb:0b:f6:f0:e0:bc: e5:a9:ff:20:32:6f:cf:27:ec:31:a5:2a:19:13:07: 8a:6e:7b:09:20:31:b9:ba:d9:da:5b:d1:20:be:ce: 3a:a1:bd:bd:96:e7:3b:fb:66:a7:73:8a:84:85:89: af:8b:e5:2c:57:76:92:79:df:c3:19:6a:65:d5:4a: d6:0b:23:37:02:24:c0:53:ce:3e:8c:91:8f:88:13: 92:84:e3:26:fb:ec:6e:67:12:b2:01:79:ce:be:cf: 80:d6:37:cf:6f:6a:88:d6:48:d5:99:f2:ab:dc:97: 2a:0d:88:dd:0c:62:0b:fe:8b:39:35:44:e7:cf:56: 43:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3E:0E:64:91:3F:3F:CC:B1:D7:D6:15:08:E3:CA:09:D4:7F:B0:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76eab935-3070-3b55-93a5-e525d7df40d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:bc:df:e2:77:71:09:c4:b7:55:95:55:d3:d7:57:2b:8f:0a: fc:4c:f5:18:4c:fe:a0:33:c8:46:ec:1e:b2:39:81:fd:f9:06: 64:a1:9a:5f:a4:74:48:f1:db:58:01:b0:b0:8d:fc:5d:5e:77: 90:0f:97:ef:ec:41:4f:e7:22:24:7b:fd:ec:30:1b:7a:71:87: 56:29:6a:e0:0c:1f:b2:19:e1:56:65:4d:80:51:47:0f:d6:4f: eb:b7:85:61:a1:7e:03:0d:53:00:68:d9:13:c4:d0:36:a6:ca: 08:d9:5a:77:01:bd:57:a9:7a:9c:d4:c7:2f:8f:e9:0d:0c:3d: ba:f9:3a:eb:6b:05:86:fe:08:8a:ce:66:0d:d1:b9:38:98:f8: be:61:01:c6:23:cb:ba:59:2c:c7:40:ab:95:03:c8:d2:d0:7d: fa:9d:f2:4e:09:8b:43:78:c7:5d:95:a0:95:4a:77:d4:69:02: 63:2c:e2:b4:6d:31:ea:f9:03:56:4e:19:f2:bd:8b:c7:bd:3d: 7d:b6:d6:85:63:74:08:89:37:92:d5:92:05:d0:f3:dc:72:3c: 2a:4e:68:9c:99:7f:cd:7c:c8:d1:d9:44:9a:11:dc:c4:29:16: 65:58:61:cd:42:52:e8:fd:71:06:52:39:31:ff:36:ab:73:96: 4d:1b:3c:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnjijjvAjEl/eaa0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxODAxMDA0N1oXDTI1MDgxNjAxMDA0N1owLzEtMCsGA1UEAxMk MzNmMmJiNjAtODI3NS00ODg3LWI1YzgtZjk1NzgzODc0YjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzOpfMF0puEpqaz2ADZ7RnPYPrSlSETccpOn qvKlf3e+tlkGEL2pRUQ6Y9rFr91gCjh0yP9S5jFP6hFdg8RpwMW1mXNA8Tx6aG5M Ujw0ZYDXQUMEGDAjQPxyJ/iWlNoHTBGYMsZexkz0KZAv0sj9DxIz0ZaElzqJSPLJ g9tOvxm7C/bw4Lzlqf8gMm/PJ+wxpSoZEweKbnsJIDG5utnaW9Egvs46ob29luc7 +2anc4qEhYmvi+UsV3aSed/DGWpl1UrWCyM3AiTAU84+jJGPiBOShOMm++xuZxKy AXnOvs+A1jfPb2qI1kjVmfKr3JcqDYjdDGIL/os5NUTnz1ZDTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLo+DmSRPz/MsdfWFQjjygnUf7DwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzZlYWI5MzUtMzA3MC0z YjU1LTkzYTUtZTUyNWQ3ZGY0MGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF82oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAC83+J3cQnEt1WVVdPXVyuPCvxM9RhM/qAzyEbsHrI5gf35BmShml+k dEjx21gBsLCN/F1ed5APl+/sQU/nIiR7/ewwG3pxh1YpauAMH7IZ4VZlTYBRRw/W T+u3hWGhfgMNUwBo2RPE0DamygjZWncBvVepepzUxy+P6Q0MPbr5OutrBYb+CIrO Zg3RuTiY+L5hAcYjy7pZLMdAq5UDyNLQffqd8k4Ji0N4x12VoJVKd9RpAmMs4rRt Mer5A1ZOGfK9i8e9PX221oVjdAiJN5LVkgXQ89xyPCpOaJyZf818yNHZRJoR3MQp FmVYYc1CUuj9cQZSOTH/Nqtzlk0bPO4= -----END CERTIFICATE-----Generated at Sat Jun 7 04:26:03 2025 by rpki-client