$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f21ce3c7-767b-35e3-a6fc-43d422bf23c6.roa File: f21ce3c7-767b-35e3-a6fc-43d422bf23c6.roa (raw, json) Hash identifier: sC8rq3D2Yi/BeZVDj47kC3j5EjE8MIHq7UZf4vhM/pk= Subject key identifier: DC:3A:6C:17:FE:83:00:D3:BB:16:17:61:60:09:5B:EA:05:62:A4:D4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849D85FCE0C0C48E6C4A2A96D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f21ce3c7-767b-35e3-a6fc-43d422bf23c6.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.222.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:ce:0c:0c:48:e6:c4:a2:a9:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=576ff05e-b2f6-4786-9352-59d62b6b0920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:16:2b:94:1e:50:85:df:44:b4:31:9f:48:0d: 6e:01:54:bf:64:11:59:9a:07:cb:b2:2e:bc:5d:1c: 8d:4e:40:56:2d:30:92:be:a7:bc:c6:4a:69:e5:35: dd:4c:e4:a7:d8:c2:d2:1e:86:30:64:d3:72:67:96: 07:5d:17:2f:dd:50:34:dd:12:41:ce:55:3e:e2:e3: 14:94:a2:bf:20:e6:0a:dc:16:37:e9:ad:20:57:4c: 19:35:10:cb:9c:3d:75:3f:4b:ec:a0:ff:86:ba:c9: 83:af:77:54:a1:a4:20:48:af:b7:31:60:15:c0:a9: 9b:14:e8:3a:4c:09:4d:92:be:a2:aa:85:7b:4c:b6: 11:39:e5:7a:ee:80:7b:ab:7d:4d:05:63:5d:26:a4: 12:3b:f8:33:31:d5:21:d8:ac:05:0d:a8:41:1b:79: 22:c8:ac:60:20:c6:b4:69:75:50:ac:96:60:44:db: 43:3a:60:97:08:8b:ee:93:e1:09:67:21:fd:3e:44: 37:86:a8:e9:61:df:30:21:8c:e5:ee:65:c0:00:24: ac:46:c8:d9:ad:ad:85:54:e9:11:70:29:f0:b3:a6: 6e:59:c0:1f:eb:41:25:8d:3a:47:d9:c5:e3:f9:de: fa:2c:d0:a3:9c:b5:99:be:f5:d4:b4:29:1b:f3:d0: e5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3A:6C:17:FE:83:00:D3:BB:16:17:61:60:09:5B:EA:05:62:A4:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f21ce3c7-767b-35e3-a6fc-43d422bf23c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:57:97:18:a9:79:19:e6:23:92:d6:24:d6:5f:9c:88:13:5c: 4a:d1:09:8b:d8:af:f5:75:85:a9:0f:31:35:5c:9e:03:a6:71: 0d:6b:d0:3e:06:e3:86:3d:86:af:c7:0a:bd:04:88:3f:e4:ad: cc:44:78:7d:b1:85:09:54:58:e5:1e:2e:27:72:cd:35:4c:d7: 19:b4:91:51:f6:d3:6b:05:87:df:92:d7:9c:db:07:3f:3d:04: 75:f6:c5:40:cf:39:29:10:f9:7c:a4:b9:95:ba:82:27:c0:ca: d6:60:ea:1b:4d:49:0c:d5:a9:6c:cd:46:e4:2b:52:f0:62:fb: 55:a8:64:99:6c:3c:cb:70:a6:0e:74:f5:4b:ad:47:65:55:ac: b1:15:5a:ec:13:2b:8f:07:ac:c7:3b:1d:18:34:b9:4e:dd:b8: 8f:3e:d6:99:5d:cb:29:d7:f7:b6:9c:37:bf:60:d6:59:27:02: 0f:c9:16:06:b4:d3:0e:99:0c:82:ea:a1:27:08:c3:d8:0a:75: 00:07:77:4e:c3:4a:e0:b6:02:7a:a1:c0:89:cb:4c:91:67:2b: 68:fc:e7:9b:62:54:a3:a5:dd:9f:d6:22:56:b8:f2:51:c0:ea: 9f:7f:3f:37:52:4c:c5:71:97:fa:f7:ca:f9:9c:64:f1:9a:33: 4d:c3:d4:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX84MDEjmxKKpbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NTc2ZmYwNWUtYjJmNi00Nzg2LTkzNTItNTlkNjJiNmIwOTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhYrlB5Qhd9EtDGfSA1uAVS/ZBFZmgfLsi68 XRyNTkBWLTCSvqe8xkpp5TXdTOSn2MLSHoYwZNNyZ5YHXRcv3VA03RJBzlU+4uMU lKK/IOYK3BY36a0gV0wZNRDLnD11P0vsoP+GusmDr3dUoaQgSK+3MWAVwKmbFOg6 TAlNkr6iqoV7TLYROeV67oB7q31NBWNdJqQSO/gzMdUh2KwFDahBG3kiyKxgIMa0 aXVQrJZgRNtDOmCXCIvuk+EJZyH9PkQ3hqjpYd8wIYzl7mXAACSsRsjZra2FVOkR cCnws6ZuWcAf60EljTpH2cXj+d76LNCjnLWZvvXUtCkb89DlsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNw6bBf+gwDTuxYXYWAJW+oFYqTUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjIxY2UzYzctNzY3Yi0z NWUzLWE2ZmMtNDNkNDIyYmYyM2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF95gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpXlxipeRnmI5LWJNZfnIgTXErRCYvYr/V1hakPMTVcngOmcQ1r0D4G 44Y9hq/HCr0EiD/krcxEeH2xhQlUWOUeLidyzTVM1xm0kVH202sFh9+S15zbBz89 BHX2xUDPOSkQ+XykuZW6gifAytZg6htNSQzVqWzNRuQrUvBi+1WoZJlsPMtwpg50 9UutR2VVrLEVWuwTK48HrMc7HRg0uU7duI8+1pldyynX97acN79g1lknAg/JFga0 0w6ZDILqoScIw9gKdQAHd07DSuC2AnqhwInLTJFnK2j855tiVKOl3Z/WIla48lHA 6p9/PzdSTMVxl/r3yvmcZPGaM03D1HE= -----END CERTIFICATE-----Generated at Sat Jun 7 13:48:35 2025 by rpki-client