$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bbd6964-f971-3117-9db9-34a572d0fd9e.roa File: 8bbd6964-f971-3117-9db9-34a572d0fd9e.roa (raw, json) Hash identifier: +U9JJJZoZ9n5pvxOmRQoqIW76JRUQyVtlIgIFIcpS6w= Subject key identifier: E5:E2:6B:6A:B6:44:56:A7:F8:AD:10:E5:89:C9:2A:9F:DD:D2:3C:A2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4AE3C7386EED649B41880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bbd6964-f971-3117-9db9-34a572d0fd9e.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.220.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:ae:3c:73:86:ee:d6:49:b4:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=a38d0243-8e00-47a7-af00-2a2378fbe7bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bd:10:06:a3:9b:79:42:df:c6:6c:0f:ca:c8: e8:f5:ec:ea:96:3c:33:52:b5:9a:0c:0b:01:b2:e7: 82:4f:a1:6e:ed:48:70:34:10:1a:37:cd:bb:58:51: 8c:c6:a3:da:ba:03:00:f0:a6:49:e3:17:2d:a2:6d: 35:b5:1d:6d:48:ef:e2:66:39:82:a0:ac:1a:fc:d5: 93:dc:10:06:85:38:0a:8d:5d:89:f4:ee:32:eb:b7: 03:6d:4b:12:f6:3c:7f:f0:31:8a:ec:db:f0:bc:aa: 7a:74:00:6d:ea:a3:49:05:af:2e:5e:5b:ef:53:68: 55:d0:fb:07:b5:3a:96:fd:97:70:97:bf:7a:53:06: 07:d1:c7:dd:e3:79:de:aa:e5:21:f4:2e:55:00:51: e6:44:19:f9:60:91:33:bc:1e:b3:16:a9:2c:aa:29: c1:a4:3a:a6:b0:37:56:79:d1:47:40:5f:3f:49:2f: e1:ec:91:44:e4:df:8e:14:2d:75:80:ee:d7:0b:1f: 0b:ad:d3:32:3f:5d:80:3f:37:19:e7:28:6b:a6:f5: 99:08:a8:0f:1c:a0:28:fb:0a:41:fc:83:23:4a:8e: 12:64:27:00:8a:d2:61:b4:84:10:a0:db:3d:4d:0b: e6:cc:e9:98:96:06:33:0a:ab:d6:58:3d:f6:d9:02: de:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E2:6B:6A:B6:44:56:A7:F8:AD:10:E5:89:C9:2A:9F:DD:D2:3C:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bbd6964-f971-3117-9db9-34a572d0fd9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:39:4e:76:0b:cc:13:34:72:77:3f:f3:06:b8:d2:1d:f1:b6: df:36:fd:6a:68:26:6e:15:e5:f6:e7:b7:73:a0:63:ee:b0:44: 93:e8:ea:5a:e9:fb:ed:85:3e:b0:3b:6b:fb:e4:2d:6e:43:d2: 19:4b:c0:45:99:0c:4f:29:5a:c5:c2:a6:31:33:48:49:97:ab: 98:b6:d5:8e:c9:d9:5e:00:2b:56:18:cc:7a:eb:74:77:6a:06: 60:d2:07:6c:cb:1b:47:ce:61:7d:1d:48:3f:ea:cc:93:6c:d1: 89:d5:30:b8:af:bf:34:60:82:55:c3:6e:ca:ce:cb:e4:5d:98: fa:b2:8d:ba:bb:de:37:1f:a1:d8:bc:95:0f:59:15:8d:0e:e9: 05:ce:e3:86:81:ff:4f:62:3e:8b:f7:62:e0:6f:2b:bf:f0:89: 8d:93:0b:ac:b5:c7:fd:b5:6b:ba:79:20:b1:18:be:36:41:ef: 56:d1:b8:77:c5:1e:78:6e:6c:41:ad:2b:cd:d4:6d:9d:a0:d5: 60:8b:06:6f:2c:40:13:a7:49:f9:e1:fb:3b:00:b0:b2:ae:2d: 4c:52:a1:34:38:5c:e1:8e:11:72:10:72:09:41:23:65:14:81: 35:a8:f4:c4:58:d3:26:a1:74:c5:7f:ec:91:08:83:c0:11:41: b6:d4:32:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtK48c4bu1km0GIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YTM4ZDAyNDMtOGUwMC00N2E3LWFmMDAtMmEyMzc4ZmJlN2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL0QBqObeULfxmwPysjo9ezqljwzUrWaDAsB sueCT6Fu7UhwNBAaN827WFGMxqPaugMA8KZJ4xctom01tR1tSO/iZjmCoKwa/NWT 3BAGhTgKjV2J9O4y67cDbUsS9jx/8DGK7NvwvKp6dABt6qNJBa8uXlvvU2hV0PsH tTqW/Zdwl796UwYH0cfd43nequUh9C5VAFHmRBn5YJEzvB6zFqksqinBpDqmsDdW edFHQF8/SS/h7JFE5N+OFC11gO7XCx8LrdMyP12APzcZ5yhrpvWZCKgPHKAo+wpB /IMjSo4SZCcAitJhtIQQoNs9TQvmzOmYlgYzCqvWWD322QLewQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXia2q2RFan+K0Q5YnJKp/d0jyiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGJiZDY5NjQtZjk3MS0z MTE3LTlkYjktMzRhNTcyZDBmZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9xUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFs5TnYLzBM0cnc/8wa40h3xtt82/WpoJm4V5fbnt3OgY+6wRJPo6lrp ++2FPrA7a/vkLW5D0hlLwEWZDE8pWsXCpjEzSEmXq5i21Y7J2V4AK1YYzHrrdHdq BmDSB2zLG0fOYX0dSD/qzJNs0YnVMLivvzRgglXDbsrOy+RdmPqyjbq73jcfodi8 lQ9ZFY0O6QXO44aB/09iPov3YuBvK7/wiY2TC6y1x/21a7p5ILEYvjZB71bRuHfF HnhubEGtK83UbZ2g1WCLBm8sQBOnSfnh+zsAsLKuLUxSoTQ4XOGOEXIQcglBI2UU gTWo9MRY0yahdMV/7JEIg8ARQbbUMkw= -----END CERTIFICATE-----Generated at Thu Jun 5 18:30:31 2025 by rpki-client