$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eac855e7-a308-366d-b7da-288233a4f01f.roa File: eac855e7-a308-366d-b7da-288233a4f01f.roa (raw, json) Hash identifier: oTa4ggdBaa2lw2g/c7IzT833SB/RTgt5lug6ndo0m18= Subject key identifier: FF:D4:D3:22:F7:D5:C7:A3:D5:BA:EB:2A:7B:49:CA:5C:E5:50:5C:14 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849A8E9E7B8630D3A9567A2BB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eac855e7-a308-366d-b7da-288233a4f01f.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.219.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:e7:b8:63:0d:3a:95:67:a2:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=cb44cef0-e07b-4c29-96ba-5bb07f7634df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:bd:69:a9:eb:f5:19:c2:e1:f0:28:a5:03:67: ef:92:76:02:a4:ca:93:80:fe:37:ac:24:49:d2:3d: 8c:89:8f:a6:be:2d:bc:89:d2:6f:93:97:06:d4:97: 01:c5:7e:55:46:54:27:c2:62:1b:c0:a0:4b:6e:52: 48:af:7d:92:0c:3a:c0:06:3c:85:25:d8:67:6c:8e: 29:47:0f:2a:60:07:c9:dc:43:1b:5d:d3:e8:4e:93: ea:95:87:3a:a7:ed:67:f2:3e:8f:21:f9:14:e4:9b: 7c:9d:8d:ca:15:3e:23:e2:5f:75:6e:c7:9b:67:5d: eb:61:82:9b:b7:df:71:66:6e:a9:14:ec:73:29:bc: bb:57:20:a7:26:af:c5:ef:7c:c5:24:8a:62:87:84: a2:72:fe:d8:fd:a1:6f:7f:ae:09:f0:cb:4f:42:56: 29:69:c8:bb:20:5a:cc:d1:78:79:f4:e8:4d:7b:a2: c7:1f:38:92:c4:8a:dd:f5:f0:43:12:15:40:e5:5b: fe:89:65:0b:3d:6f:0d:31:4d:f4:df:7b:26:f8:66: 1d:72:21:ea:17:ad:70:b3:56:c3:ab:8d:8c:c7:94: e9:74:1c:44:05:42:14:b8:5d:94:a9:c0:b3:14:f1: 99:be:7a:7b:55:a5:a2:4a:cf:73:75:24:c1:19:87: 3a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D4:D3:22:F7:D5:C7:A3:D5:BA:EB:2A:7B:49:CA:5C:E5:50:5C:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eac855e7-a308-366d-b7da-288233a4f01f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:14:df:c3:96:59:b9:82:61:2a:de:80:53:20:71:59:26:b2: 36:4d:c0:c9:2c:9b:db:9c:2d:c7:c3:29:90:6f:22:f1:47:a3: dd:14:7b:00:4a:b9:03:7c:18:03:e2:e7:37:71:ec:18:ff:25: e3:57:34:a7:9c:3f:39:bf:99:95:5e:c7:46:a6:18:54:89:98: 9c:21:3f:c7:ce:75:7b:c8:ee:6f:2c:1d:e3:66:bf:ff:db:a1: ea:54:10:43:18:92:70:60:d1:0f:43:1a:72:7f:2b:4d:fd:da: a4:ba:db:d0:b5:27:cd:9c:b6:40:dc:1c:26:de:44:51:0d:17: be:cc:70:4c:04:2b:26:25:99:5b:73:4b:f0:64:4f:2d:49:e3: 43:d0:8e:d8:ee:09:39:6e:b1:bf:44:ad:f4:dc:f6:c8:17:21: 9d:8b:60:9c:6b:7b:3e:ed:db:77:6f:c9:e0:a4:76:7e:85:dc: 93:1a:45:04:bc:81:23:53:75:73:32:42:01:d4:4a:25:d6:02: 21:70:fe:b1:c2:9f:77:1c:3d:03:46:b8:37:4f:d3:18:5e:a8: b1:89:ce:cf:ae:06:39:29:1c:8c:b6:aa:66:df:84:23:b5:92: 01:d5:20:53:58:3a:ad:1b:c2:30:d9:ee:2e:c6:32:d7:b5:2b: ad:28:0d:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6ee4Yw06lWeiu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk Y2I0NGNlZjAtZTA3Yi00YzI5LTk2YmEtNWJiMDdmNzYzNGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/b1pqev1GcLh8CilA2fvknYCpMqTgP43rCRJ 0j2MiY+mvi28idJvk5cG1JcBxX5VRlQnwmIbwKBLblJIr32SDDrABjyFJdhnbI4p Rw8qYAfJ3EMbXdPoTpPqlYc6p+1n8j6PIfkU5Jt8nY3KFT4j4l91bsebZ13rYYKb t99xZm6pFOxzKby7VyCnJq/F73zFJIpih4Sicv7Y/aFvf64J8MtPQlYpaci7IFrM 0Xh59OhNe6LHHziSxIrd9fBDEhVA5Vv+iWULPW8NMU3033sm+GYdciHqF61ws1bD q42Mx5TpdBxEBUIUuF2UqcCzFPGZvnp7VaWiSs9zdSTBGYc6hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/U0yL31cej1brrKntJylzlUFwUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWFjODU1ZTctYTMwOC0z NjZkLWI3ZGEtMjg4MjMzYTRmMDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9udMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQU38OWWbmCYSregFMgcVkmsjZNwMksm9ucLcfDKZBvIvFHo90UewBK uQN8GAPi5zdx7Bj/JeNXNKecPzm/mZVex0amGFSJmJwhP8fOdXvI7m8sHeNmv//b oepUEEMYknBg0Q9DGnJ/K0392qS629C1J82ctkDcHCbeRFENF77McEwEKyYlmVtz S/BkTy1J40PQjtjuCTlusb9ErfTc9sgXIZ2LYJxrez7t23dvyeCkdn6F3JMaRQS8 gSNTdXMyQgHUSiXWAiFw/rHCn3ccPQNGuDdP0xheqLGJzs+uBjkpHIy2qmbfhCO1 kgHVIFNYOq0bwjDZ7i7GMte1K60oDXY= -----END CERTIFICATE-----Generated at Thu Jun 5 18:25:51 2025 by rpki-client