$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e00b74cb-7a6c-3322-89d2-7c0c54dd0d39.roa File: e00b74cb-7a6c-3322-89d2-7c0c54dd0d39.roa (raw, json) Hash identifier: WMKCJnwCaejJCAN9PDos3wfxWQwjrLKI4XVcKQCCW6I= Subject key identifier: 32:A5:D2:F6:E7:26:91:35:BC:D0:FA:4C:68:21:72:77:F9:51:14:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849D6E095768199AE0C211E3800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e00b74cb-7a6c-3322-89d2-7c0c54dd0d39.roa Signing time: Tue 13 May 2025 12:09:19 +0000 ROA not before: Tue 13 May 2025 12:09:19 +0000 ROA not after: Mon 11 Aug 2025 12:09:19 +0000 asID: 16625 IP address blocks: 23.214.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d6:e0:95:76:81:99:ae:0c:21:1e:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 13 12:09:19 2025 GMT Not After : Aug 11 12:09:19 2025 GMT Subject: CN=17a9b81f-2861-464a-9913-82f307bf5510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2d:1e:51:7e:c4:b6:d1:d1:ab:76:cc:53:23: ff:5e:52:5c:1a:e0:08:45:22:8e:ef:bf:d0:95:e4: 73:9a:73:d9:22:70:07:99:9e:5a:ba:5e:16:0f:54: b7:55:ce:ad:bc:05:16:0a:90:22:63:a6:76:1e:ba: 0d:b0:6b:3f:41:4e:04:40:29:11:c6:5d:10:cd:00: 1b:a3:e8:b9:13:09:d6:bf:43:a6:49:f6:47:9d:97: c5:bb:1b:fa:27:5a:b3:74:17:f6:82:fe:a2:ea:bd: f4:01:6d:0f:07:44:f3:41:96:39:fa:2d:b9:17:2a: aa:6e:6e:a9:cb:e9:af:1d:29:76:c3:82:9f:bd:09: 11:d0:46:23:d0:8c:8c:38:e7:3a:4b:0e:a1:fe:2d: 91:7f:3e:a9:2a:8d:df:12:2e:98:f2:76:48:7f:85: 92:30:e1:19:fd:bb:50:38:a5:40:df:fc:1c:6d:39: 08:aa:05:84:ca:19:ef:54:93:89:95:89:0c:0e:27: 86:98:fb:c5:8c:78:cc:ba:86:41:1d:ec:73:05:6c: 77:3d:e9:90:8d:06:02:ec:d5:ac:56:d2:fb:54:df: b6:58:6f:62:95:41:f3:54:08:7d:b3:b2:54:50:0e: 9a:2f:a7:fb:71:2a:c1:45:9b:81:af:70:88:fc:78: 4c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A5:D2:F6:E7:26:91:35:BC:D0:FA:4C:68:21:72:77:F9:51:14:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e00b74cb-7a6c-3322-89d2-7c0c54dd0d39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:23:c2:51:4e:22:68:c9:07:9d:27:6b:38:4c:85:a8:93:2a: 98:c3:8e:d0:12:6e:4c:c6:36:1c:c5:52:85:88:b5:da:62:e4: d5:07:03:ce:c1:7f:02:a9:22:13:c3:71:f3:07:d9:7f:a1:d0: 26:fb:42:d9:c1:8d:ff:ad:67:1b:f4:a5:fb:26:ab:68:18:70: 6c:4b:ef:64:8f:f7:0f:30:61:f3:4e:52:fa:96:88:0d:f7:07: 34:fe:bb:b6:a4:1a:08:a8:cc:7d:c4:78:ff:d4:a4:b7:50:78: d8:3d:0b:bf:40:49:46:bf:43:85:9d:65:1e:48:bf:eb:32:47: 4e:12:4a:1f:cb:ce:48:7d:bb:73:9e:d5:93:46:b3:ca:23:06: 11:fa:7c:34:39:df:96:2f:27:7b:09:93:2b:4a:7e:19:e7:5b: d6:02:fe:66:c1:0b:8b:6c:18:41:5d:95:73:e6:46:c8:54:5e: c6:68:e8:99:27:d2:4f:b0:c6:83:50:58:09:89:59:68:94:53: 98:2c:82:ba:ab:66:59:2b:c6:94:e8:71:69:bc:7f:f3:82:34: 7a:b8:cb:55:82:9c:32:41:f9:6a:52:d6:12:af:ab:8c:53:dd: a6:c0:4e:7c:e2:69:d8:a4:3c:cf:1f:2c:d2:70:f0:34:6e:66: ed:e5:55:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnW4JV2gZmuDCEeOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMzEyMDkxOVoXDTI1MDgxMTEyMDkxOVowLzEtMCsGA1UEAxMk MTdhOWI4MWYtMjg2MS00NjRhLTk5MTMtODJmMzA3YmY1NTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy0eUX7EttHRq3bMUyP/XlJcGuAIRSKO77/Q leRzmnPZInAHmZ5aul4WD1S3Vc6tvAUWCpAiY6Z2HroNsGs/QU4EQCkRxl0QzQAb o+i5EwnWv0OmSfZHnZfFuxv6J1qzdBf2gv6i6r30AW0PB0TzQZY5+i25Fyqqbm6p y+mvHSl2w4KfvQkR0EYj0IyMOOc6Sw6h/i2Rfz6pKo3fEi6Y8nZIf4WSMOEZ/btQ OKVA3/wcbTkIqgWEyhnvVJOJlYkMDieGmPvFjHjMuoZBHexzBWx3PemQjQYC7NWs VtL7VN+2WG9ilUHzVAh9s7JUUA6aL6f7cSrBRZuBr3CI/HhMBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKl0vbnJpE1vND6TGghcnf5URSGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTAwYjc0Y2ItN2E2Yy0z MzIyLTg5ZDItN2MwYzU0ZGQwZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9bcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8jwlFOImjJB50nazhMhaiTKpjDjtASbkzGNhzFUoWItdpi5NUHA87B fwKpIhPDcfMH2X+h0Cb7QtnBjf+tZxv0pfsmq2gYcGxL72SP9w8wYfNOUvqWiA33 BzT+u7akGgiozH3EeP/UpLdQeNg9C79ASUa/Q4WdZR5Iv+syR04SSh/Lzkh9u3Oe 1ZNGs8ojBhH6fDQ535YvJ3sJkytKfhnnW9YC/mbBC4tsGEFdlXPmRshUXsZo6Jkn 0k+wxoNQWAmJWWiUU5gsgrqrZlkrxpTocWm8f/OCNHq4y1WCnDJB+WpS1hKvq4xT 3abATnziadikPM8fLNJw8DRuZu3lVUU= -----END CERTIFICATE-----Generated at Sat Jun 7 14:06:34 2025 by rpki-client