$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7effdf6-aeeb-3737-9e76-268bbf9c51ab.roa File: e7effdf6-aeeb-3737-9e76-268bbf9c51ab.roa (raw, json) Hash identifier: KHxdiQcO95sblfFm5NfGi/MOs7iW4Z2JOx9UpeOVrKg= Subject key identifier: D0:64:FD:E8:1B:96:90:BD:61:54:7C:77:4A:C7:D3:8A:46:3F:E7:99 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4BA039A60CA2CF3608DC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7effdf6-aeeb-3737-9e76-268bbf9c51ab.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 16625 IP address blocks: 23.222.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:ba:03:9a:60:ca:2c:f3:60:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=412a52a8-52f6-4e94-be20-eb4328db37eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cb:b5:3d:9b:f8:99:79:02:a6:92:0a:9e:6d: 8b:12:7a:7b:e1:ce:4d:b6:1b:1f:47:51:93:27:48: b9:ce:98:04:50:4a:64:3e:11:39:12:71:8f:07:0f: 77:ee:80:72:9e:21:44:cb:38:36:9b:60:90:2d:96: 99:a9:6a:cf:e0:21:b4:eb:22:c5:39:8b:6c:f6:67: d9:f2:1c:20:23:c1:fe:ed:22:96:fa:4b:21:ca:35: 0a:cc:e8:8e:47:b3:54:09:58:5d:92:70:69:0d:32: 04:62:54:a2:6a:03:98:f6:28:bc:39:3e:5e:cb:b2: 81:12:1e:93:21:b2:3a:89:8f:32:35:bc:22:12:23: a3:9d:0e:23:5f:05:9e:0c:66:f9:5d:89:1a:18:6e: 66:a7:a5:25:0e:b3:20:6c:48:ce:fd:77:22:1c:97: 36:94:4c:3b:9a:f7:48:7e:df:52:1a:78:ea:1c:0b: f0:0b:5d:7e:08:e3:ea:00:62:1f:5c:f9:9a:d9:b6: 4f:db:5d:99:85:23:e2:b2:f0:72:64:6e:c5:73:49: 75:f7:c5:81:a1:4d:94:fe:30:44:13:2c:6f:3b:17: b3:fb:93:0d:2e:8f:50:48:7b:26:7e:d3:c5:c0:0d: 32:aa:17:3e:0d:54:47:61:fd:1e:4e:47:8b:ef:00: 41:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:64:FD:E8:1B:96:90:BD:61:54:7C:77:4A:C7:D3:8A:46:3F:E7:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7effdf6-aeeb-3737-9e76-268bbf9c51ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:f3:87:f5:97:75:57:b4:7f:80:98:6a:80:4a:e1:23:4b:22: 02:99:30:b3:07:8a:46:e0:ac:e6:d5:c0:aa:f3:b4:2d:9d:2b: 50:3c:f6:c4:df:15:67:79:78:79:40:a6:af:8d:60:bc:31:43: 2b:d4:a2:f4:e7:a4:ac:64:fb:6a:39:03:49:6b:9b:e6:ac:75: 7d:03:5c:2f:d3:d5:0d:ac:e0:02:ff:b8:87:b6:e3:55:01:ad: 47:ff:cf:51:4f:77:e5:c0:fc:44:3b:af:17:e6:4a:86:84:52: 13:d4:48:65:37:0a:a4:86:5e:70:90:92:31:f1:39:62:91:0c: 86:c4:45:d4:c0:2c:e8:8b:7c:2a:4d:00:c2:52:f4:ff:9a:92: 9b:a3:0b:f5:21:28:7b:aa:d6:0d:06:30:60:37:fc:be:d5:8c: 21:0b:99:81:b9:b0:2d:b6:87:83:07:3b:d2:65:be:c7:e0:ea: 34:c7:3a:59:20:22:b5:ab:e8:0f:32:d7:b2:0b:01:5f:00:42: f3:54:b6:7c:cc:84:aa:01:03:60:31:1b:53:95:16:53:ba:6a: c1:b4:50:58:d2:2c:8b:62:fc:18:88:55:b9:4f:ce:eb:56:e3: e6:82:00:13:14:f4:bf:e0:7e:f8:5f:c0:8d:3f:50:7a:45:64: b0:44:26:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLoDmmDKLPNgjcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NDEyYTUyYTgtNTJmNi00ZTk0LWJlMjAtZWI0MzI4ZGIzN2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsu1PZv4mXkCppIKnm2LEnp74c5NthsfR1GT J0i5zpgEUEpkPhE5EnGPBw937oByniFEyzg2m2CQLZaZqWrP4CG06yLFOYts9mfZ 8hwgI8H+7SKW+kshyjUKzOiOR7NUCVhdknBpDTIEYlSiagOY9ii8OT5ey7KBEh6T IbI6iY8yNbwiEiOjnQ4jXwWeDGb5XYkaGG5mp6UlDrMgbEjO/XciHJc2lEw7mvdI ft9SGnjqHAvwC11+COPqAGIfXPma2bZP212ZhSPisvByZG7Fc0l198WBoU2U/jBE EyxvOxez+5MNLo9QSHsmftPFwA0yqhc+DVRHYf0eTkeL7wBBfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBk/egblpC9YVR8d0rH04pGP+eZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTdlZmZkZjYtYWVlYi0z NzM3LTllNzYtMjY4YmJmOWM1MWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF97IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3zh/WXdVe0f4CYaoBK4SNLIgKZMLMHikbgrObVwKrztC2dK1A89sTf FWd5eHlApq+NYLwxQyvUovTnpKxk+2o5A0lrm+asdX0DXC/T1Q2s4AL/uIe241UB rUf/z1FPd+XA/EQ7rxfmSoaEUhPUSGU3CqSGXnCQkjHxOWKRDIbERdTALOiLfCpN AMJS9P+akpujC/UhKHuq1g0GMGA3/L7VjCELmYG5sC22h4MHO9Jlvsfg6jTHOlkg IrWr6A8y17ILAV8AQvNUtnzMhKoBA2AxG1OVFlO6asG0UFjSLIti/BiIVblPzutW 4+aCABMU9L/gfvhfwI0/UHpFZLBEJpk= -----END CERTIFICATE-----Generated at Sat Jun 7 22:53:58 2025 by rpki-client