$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8fe053f4-4cf9-3fd2-8e03-54de4a2f8625.roa File: 8fe053f4-4cf9-3fd2-8e03-54de4a2f8625.roa (raw, json) Hash identifier: 3PCtvcAyTr7TFatyTwqz0Jw6BhT/GDpNB0LGzPC7Acg= Subject key identifier: 99:73:19:CE:69:05:27:7C:6E:54:1D:90:55:C9:13:26:F5:CC:D8:F9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858491D71651430E056899A05CB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8fe053f4-4cf9-3fd2-8e03-54de4a2f8625.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.222.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:65:14:30:e0:56:89:9a:05:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=67a44a7e-badc-4223-b42b-6df873bf387c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6d:1e:17:ca:75:1c:7a:8a:83:11:b3:90:0e: 75:ad:f8:24:3f:f2:6a:a7:0b:96:98:c5:38:6b:8b: 8d:6d:e8:83:b5:3d:3a:80:b7:dd:c6:d4:a6:a4:73: f2:97:6c:5c:51:dd:c4:c3:b2:28:2e:b9:18:ed:2c: 7e:30:cd:32:4d:c4:89:38:3e:ad:72:44:2a:a5:06: 2a:bd:ff:07:1f:0d:a1:da:93:bb:12:5a:36:12:63: 5f:fb:4e:5c:34:77:41:2d:83:c2:b2:e3:61:ed:54: 00:1d:97:de:67:68:3a:03:99:99:54:07:5d:a3:cc: 26:2d:f8:50:a3:77:74:e7:fd:cb:f8:60:4e:4e:f5: 32:7b:08:35:ca:63:d2:39:01:cd:92:3d:c8:50:a2: a7:95:d6:d5:a6:fa:c6:93:dd:ab:92:b3:bc:1a:ea: 26:01:c8:f4:76:38:7e:ea:ce:da:fc:1b:68:2c:7a: 62:e5:89:ae:eb:2c:fe:93:30:bd:dd:64:de:15:66: f9:65:61:ae:51:75:5a:e6:8e:76:7c:04:b6:e3:05: 60:ed:de:98:22:6c:e6:12:50:29:4a:13:61:42:59: 97:89:5c:5b:59:f0:7e:f4:d8:5f:47:99:3c:af:81: dd:a5:55:5b:ed:23:8d:47:8b:e5:e5:92:2c:58:92: 6a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:73:19:CE:69:05:27:7C:6E:54:1D:90:55:C9:13:26:F5:CC:D8:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8fe053f4-4cf9-3fd2-8e03-54de4a2f8625.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:e0:00:71:91:17:0c:37:c5:fb:7b:12:e8:6c:ae:c4:ed:7d: 5c:33:3d:dd:f3:30:27:77:49:8f:33:b3:a5:e6:6b:48:01:2f: 6a:70:39:7b:91:bb:89:4e:02:81:55:51:a6:a4:77:f2:23:4d: 81:20:d5:26:e1:51:ae:16:f0:e9:9d:b3:c3:7b:a5:fd:f5:ed: 0e:ec:63:20:5a:40:7f:e4:60:1b:4e:e3:9c:74:1c:6e:6f:9b: c6:20:9a:4a:50:6b:26:00:a0:86:55:3a:8a:d5:45:31:41:ad: 72:77:ec:92:7d:0a:2c:cb:0a:64:c3:43:51:19:18:14:5f:f5: 74:38:8b:13:87:44:f2:1a:2a:6e:03:9c:4f:1c:fc:71:b7:52: 07:88:42:e5:93:68:81:eb:0e:04:8d:c1:80:f2:37:97:47:e7: 5f:90:4f:0b:c4:f3:81:fe:dd:8d:92:75:29:b0:78:1e:83:e6: ad:c9:8b:72:e3:fc:ef:47:b7:bf:fa:bc:e0:b7:6c:28:a0:0a: 2a:11:94:b6:83:48:e5:b8:cf:ff:77:52:c2:f1:79:cd:d2:98: 59:af:4c:d7:31:29:75:36:e7:03:df:fe:88:19:a0:40:b2:26: 0f:da:5a:21:22:72:af:78:fe:64:95:65:48:ac:6e:92:9b:89: 45:03:93:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWUUMOBWiZoFywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NjdhNDRhN2UtYmFkYy00MjIzLWI0MmItNmRmODczYmYzODdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy20eF8p1HHqKgxGzkA51rfgkP/JqpwuWmMU4 a4uNbeiDtT06gLfdxtSmpHPyl2xcUd3Ew7IoLrkY7Sx+MM0yTcSJOD6tckQqpQYq vf8HHw2h2pO7Elo2EmNf+05cNHdBLYPCsuNh7VQAHZfeZ2g6A5mZVAddo8wmLfhQ o3d05/3L+GBOTvUyewg1ymPSOQHNkj3IUKKnldbVpvrGk92rkrO8GuomAcj0djh+ 6s7a/BtoLHpi5Ymu6yz+kzC93WTeFWb5ZWGuUXVa5o52fAS24wVg7d6YImzmElAp ShNhQlmXiVxbWfB+9NhfR5k8r4HdpVVb7SONR4vl5ZIsWJJqBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlzGc5pBSd8blQdkFXJEyb1zNj5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGZlMDUzZjQtNGNmOS0z ZmQyLThlMDMtNTRkZTRhMmY4NjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF950MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXgAHGRFww3xft7EuhsrsTtfVwzPd3zMCd3SY8zs6Xma0gBL2pwOXuR u4lOAoFVUaakd/IjTYEg1SbhUa4W8Omds8N7pf317Q7sYyBaQH/kYBtO45x0HG5v m8YgmkpQayYAoIZVOorVRTFBrXJ37JJ9CizLCmTDQ1EZGBRf9XQ4ixOHRPIaKm4D nE8c/HG3UgeIQuWTaIHrDgSNwYDyN5dH51+QTwvE84H+3Y2SdSmweB6D5q3Ji3Lj /O9Ht7/6vOC3bCigCioRlLaDSOW4z/93UsLxec3SmFmvTNcxKXU25wPf/ogZoECy Jg/aWiEicq94/mSVZUisbpKbiUUDk9A= -----END CERTIFICATE-----Generated at Sat Apr 5 10:54:36 2025 by rpki-client