$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a2f859c-fc0d-3623-a288-5bb83a498665.roa File: 8a2f859c-fc0d-3623-a288-5bb83a498665.roa (raw, json) Hash identifier: 0qDc9PjnJYo1jRz2KaqeGHmm4hH0FH1CEBTJQ4z9bTk= Subject key identifier: CE:55:BF:C6:63:7A:40:B6:30:A0:07:28:9B:14:EB:6C:92:EE:D7:D2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490F7C0691DA64316AE486C240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a2f859c-fc0d-3623-a288-5bb83a498665.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 16625 IP address blocks: 173.223.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7c:06:91:da:64:31:6a:e4:86:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=ed4acc4d-5b71-4905-83b1-da8bb3e08aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5b:7b:22:ca:15:7b:88:63:f8:a5:22:45:57: b4:3c:a2:cc:a7:47:b2:03:ed:85:21:41:7f:ac:ab: 43:43:97:2b:08:7d:28:37:7f:2f:35:cb:c5:59:53: 86:52:71:8e:89:d8:82:b8:ef:5e:49:0a:7b:c2:d3: e9:e8:2d:aa:21:28:91:cb:3a:6d:05:e0:4a:89:52: 3e:16:66:31:f6:58:7e:ed:ee:29:84:42:7c:5d:0c: b3:85:0e:a6:02:4e:9b:7a:d3:04:87:52:21:fa:06: 48:50:cc:cd:5a:34:2c:ab:13:c9:d8:0a:95:f7:f1: d9:81:56:b4:06:24:8a:88:91:a6:9a:07:71:2b:03: db:97:7d:2b:73:6c:55:8a:0d:1a:e0:77:16:b3:ee: 47:5f:9f:94:84:21:41:af:79:a8:6f:23:13:fc:4b: 06:2d:08:ab:0e:99:76:6c:1a:b9:cf:9b:65:0e:b0: 12:1b:15:36:2e:ae:8b:d3:7b:74:ec:b6:f6:6c:d8: 5a:e1:cc:20:db:57:3f:70:75:15:d3:10:a4:e4:59: ef:91:6c:c1:77:12:df:f4:f1:b2:97:a7:2a:63:70: 8c:b5:57:92:87:70:1d:a1:81:c5:85:c6:15:68:b3: 53:f1:86:a6:54:25:9f:86:0c:32:a9:36:a6:87:63: a6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:55:BF:C6:63:7A:40:B6:30:A0:07:28:9B:14:EB:6C:92:EE:D7:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a2f859c-fc0d-3623-a288-5bb83a498665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:4f:90:67:68:f8:54:95:55:a7:db:28:0c:fd:0d:0d:73:4f: 34:0b:88:8a:15:57:7c:ea:5b:42:34:67:0e:f5:c6:5b:e9:86: 02:9e:7a:b2:38:c2:19:35:67:e1:03:56:73:16:fc:de:ea:8a: d8:53:ad:75:47:37:0f:d7:b6:fe:df:ba:22:29:6c:42:20:3c: a3:0e:a2:47:63:49:21:43:3f:be:c8:ea:5f:0b:05:b9:31:3f: fe:0c:b2:68:50:d1:69:74:bc:03:60:76:be:c2:f7:00:ac:c6: 47:58:ee:a1:7d:c6:32:31:f4:8e:e0:8a:74:b4:76:12:c6:b3: c2:17:75:5a:60:a7:d7:46:02:3a:00:71:6d:5e:55:6a:b3:35: 1c:bb:db:8a:75:75:53:3c:6f:e1:61:aa:a4:35:6b:31:57:7a: d9:44:cb:1e:c0:27:7f:51:41:ef:b5:ef:19:72:7b:f3:f9:13: 57:a1:62:5b:1f:44:4e:9b:81:bf:61:ba:26:02:d5:40:ee:c9: 8c:1f:ac:08:a9:f7:4d:f0:5c:33:af:1f:9a:91:e6:48:38:66: c7:c2:c2:77:3c:04:d2:94:ae:57:0c:3b:f1:09:55:dc:1b:f2: 1d:a2:ab:24:30:c4:24:85:33:78:5a:18:cc:24:67:48:0c:ff: 06:d8:83:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPfAaR2mQxauSGwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk ZWQ0YWNjNGQtNWI3MS00OTA1LTgzYjEtZGE4YmIzZTA4YWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVt7IsoVe4hj+KUiRVe0PKLMp0eyA+2FIUF/ rKtDQ5crCH0oN38vNcvFWVOGUnGOidiCuO9eSQp7wtPp6C2qISiRyzptBeBKiVI+ FmYx9lh+7e4phEJ8XQyzhQ6mAk6betMEh1Ih+gZIUMzNWjQsqxPJ2AqV9/HZgVa0 BiSKiJGmmgdxKwPbl30rc2xVig0a4HcWs+5HX5+UhCFBr3mobyMT/EsGLQirDpl2 bBq5z5tlDrASGxU2Lq6L03t07Lb2bNha4cwg21c/cHUV0xCk5FnvkWzBdxLf9PGy l6cqY3CMtVeSh3AdoYHFhcYVaLNT8YamVCWfhgwyqTamh2OmbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5Vv8ZjekC2MKAHKJsU62yS7tfSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGEyZjg1OWMtZmMwZC0z NjIzLWEyODgtNWJiODNhNDk4NjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd88MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9PkGdo+FSVVafbKAz9DQ1zTzQLiIoVV3zqW0I0Zw71xlvphgKeerI4 whk1Z+EDVnMW/N7qithTrXVHNw/Xtv7fuiIpbEIgPKMOokdjSSFDP77I6l8LBbkx P/4MsmhQ0Wl0vANgdr7C9wCsxkdY7qF9xjIx9I7ginS0dhLGs8IXdVpgp9dGAjoA cW1eVWqzNRy724p1dVM8b+FhqqQ1azFXetlEyx7AJ39RQe+17xlye/P5E1ehYlsf RE6bgb9huiYC1UDuyYwfrAip903wXDOvH5qR5kg4ZsfCwnc8BNKUrlcMO/EJVdwb 8h2iqyQwxCSFM3haGMwkZ0gM/wbYg/Q= -----END CERTIFICATE-----Generated at Sat Apr 5 11:09:08 2025 by rpki-client