$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d069b4df-7d4c-355e-9c61-b809eeab4e7a.roa File: d069b4df-7d4c-355e-9c61-b809eeab4e7a.roa (raw, json) Hash identifier: 2is6MNuMpbPn8Rrw/zTT3h5Z+3XEeB364LtQcMTjChs= Subject key identifier: BE:3A:AE:C0:AF:EB:0B:70:18:72:9F:1A:13:02:2D:8D:8F:32:FC:D4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B7C6A0EE377BA4989000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d069b4df-7d4c-355e-9c61-b809eeab4e7a.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 16625 IP address blocks: 23.221.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b7:c6:a0:ee:37:7b:a4:98:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=f1d1f0f2-8f78-4d85-b9be-593fd3f55125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d0:db:f7:58:d5:b0:5a:19:67:3b:3f:74:aa: df:0a:9f:db:48:d9:a6:b3:1a:cd:4a:dd:ef:b0:c4: 81:e8:b5:ad:5a:ca:81:37:3c:a4:d0:9d:90:13:27: c5:45:3d:fe:84:ed:b3:97:bf:6e:b7:5a:78:72:5c: 29:5c:2d:cf:08:02:59:6c:cc:ae:b1:a4:51:3d:57: d6:32:37:50:d5:f3:9d:56:30:e9:36:cb:db:f1:a9: eb:6c:36:2d:b3:97:54:b4:90:6a:e0:62:a9:a6:f5: ff:4a:39:0d:a6:72:a1:22:07:14:ce:de:9d:dc:95: f3:89:ac:c1:0c:c8:39:48:2b:ae:f2:ad:f4:e5:7c: 79:e1:88:36:ff:a6:b8:7f:8a:17:79:09:09:b2:01: 2d:39:63:e3:37:b3:8e:71:c9:6b:8c:af:c6:bc:af: 6c:ed:be:6f:a6:79:55:5e:91:cf:3f:a6:00:d7:f5: a0:0c:5c:8b:39:ce:cf:7f:02:68:2f:dd:65:af:b3: 0b:50:19:a2:a8:94:39:8d:0e:bf:9b:47:67:16:b5: 73:69:78:c8:00:00:ed:d0:e0:45:c5:f6:41:5a:82: 4e:a0:cb:e5:76:b4:5b:52:b1:5d:d8:d6:05:3a:67: 7a:d0:ff:1e:04:71:13:78:25:0e:a3:e8:ce:a4:c5: f3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3A:AE:C0:AF:EB:0B:70:18:72:9F:1A:13:02:2D:8D:8F:32:FC:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d069b4df-7d4c-355e-9c61-b809eeab4e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:7a:70:d9:ce:c7:b9:7e:10:37:bf:09:67:3f:09:7e:e6:6e: 20:0a:dc:e7:ed:15:e6:a3:b3:87:19:b6:1f:3c:e1:65:ee:84: 22:24:ef:e3:17:fe:87:7e:a2:9a:ee:b4:1f:5b:7f:e2:99:d2: 9e:31:68:f4:8a:69:21:79:a5:e7:e6:9e:bb:d8:46:96:22:a6: cb:91:22:75:c6:91:ed:5c:1e:9b:3f:56:44:8c:e7:5f:9d:9b: a0:a5:6a:c9:88:3e:2e:df:2f:d0:b5:c4:72:7e:d8:6c:89:ef: 6c:35:d9:80:23:17:fd:91:de:d0:90:90:19:85:62:d6:b8:1f: ab:85:25:2f:dd:38:99:01:73:00:fc:3a:2f:d2:0d:b7:cf:e6: 8e:89:d2:36:01:d1:d0:53:1c:7d:47:88:3e:08:36:62:96:ce: 0b:8b:96:9d:b4:6c:0d:77:bf:71:0d:d2:7b:91:0b:1e:1a:fc: 67:c3:a7:a5:ce:ac:96:be:81:52:8f:7a:d9:7f:73:5c:f2:07: 28:bf:a8:37:af:b7:ad:c0:a4:a7:5e:ce:45:27:a9:bb:d2:82: c5:b2:44:56:4e:61:fa:e8:21:dd:9b:66:58:da:e7:0e:33:99: c3:5b:9a:4d:ff:81:54:76:d1:80:b3:f1:73:fb:0c:85:ee:a9: 1d:bc:d5:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLfGoO43e6SYkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ZjFkMWYwZjItOGY3OC00ZDg1LWI5YmUtNTkzZmQzZjU1MTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9Db91jVsFoZZzs/dKrfCp/bSNmmsxrNSt3v sMSB6LWtWsqBNzyk0J2QEyfFRT3+hO2zl79ut1p4clwpXC3PCAJZbMyusaRRPVfW MjdQ1fOdVjDpNsvb8anrbDYts5dUtJBq4GKppvX/SjkNpnKhIgcUzt6d3JXziazB DMg5SCuu8q305Xx54Yg2/6a4f4oXeQkJsgEtOWPjN7OOcclrjK/GvK9s7b5vpnlV XpHPP6YA1/WgDFyLOc7PfwJoL91lr7MLUBmiqJQ5jQ6/m0dnFrVzaXjIAADt0OBF xfZBWoJOoMvldrRbUrFd2NYFOmd60P8eBHETeCUOo+jOpMXzewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL46rsCv6wtwGHKfGhMCLY2PMvzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDA2OWI0ZGYtN2Q0Yy0z NTVlLTljNjEtYjgwOWVlYWI0ZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF90UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFl6cNnOx7l+EDe/CWc/CX7mbiAK3OftFeajs4cZth884WXuhCIk7+MX /od+oprutB9bf+KZ0p4xaPSKaSF5pefmnrvYRpYipsuRInXGke1cHps/VkSM51+d m6ClasmIPi7fL9C1xHJ+2GyJ72w12YAjF/2R3tCQkBmFYta4H6uFJS/dOJkBcwD8 Oi/SDbfP5o6J0jYB0dBTHH1HiD4INmKWzguLlp20bA13v3EN0nuRCx4a/GfDp6XO rJa+gVKPetl/c1zyByi/qDevt63ApKdezkUnqbvSgsWyRFZOYfroId2bZlja5w4z mcNbmk3/gVR20YCz8XP7DIXuqR281WE= -----END CERTIFICATE-----Generated at Sat Jun 7 13:47:54 2025 by rpki-client