$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f53f6872-c8d5-39ea-b595-e4e153d620d1.roa File: f53f6872-c8d5-39ea-b595-e4e153d620d1.roa (raw, json) Hash identifier: K0aFvGeXn5bt+7W5yfnGTj96UpzcNygO7EUTBVls7Y0= Subject key identifier: CB:F4:0F:FE:C0:FE:40:0A:6A:7F:8E:10:4A:0B:1B:C9:4C:F4:DE:AF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B0D1C91A9A513ACAA280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f53f6872-c8d5-39ea-b595-e4e153d620d1.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.222.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b0:d1:c9:1a:9a:51:3a:ca:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=3c5fa045-8ce7-4559-9ed9-96487fcce9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1c:da:0c:f1:71:f7:53:40:e9:78:f6:57:a8: 0a:1c:80:48:e7:f3:49:94:c7:65:56:51:a5:9d:99: 90:31:24:cc:07:01:6d:5d:83:49:1b:19:2c:6f:0a: 40:ea:94:c5:c7:9f:8a:fd:c4:b4:91:12:70:f2:03: 1b:f1:81:b1:00:57:d0:a7:83:42:00:af:e7:c3:87: 6c:b9:2f:6f:50:34:5d:ed:02:e4:2b:e8:a5:be:c2: 9d:2c:ec:d1:59:0d:5f:89:ba:3f:24:d0:87:b4:96: c2:a0:cd:73:09:7e:e9:f6:0e:c3:79:76:67:df:c6: 38:40:5c:cd:c7:61:c1:83:5e:7a:35:dc:f9:21:c8: e0:ca:52:cc:c4:fe:98:34:72:0d:19:1d:35:83:56: 29:f7:e3:17:30:ab:2e:67:df:54:36:6e:ac:f3:c3: 46:c8:60:85:95:e1:6c:95:1d:91:38:13:da:f3:aa: 5c:a1:c0:52:62:29:7d:58:bd:c1:c4:b4:9a:65:33: a1:ce:29:4f:11:16:93:da:bf:51:95:65:f2:f0:13: d4:fa:fc:da:3c:91:72:f3:8c:d3:f8:d7:42:01:bf: f5:9c:28:23:25:12:44:6f:5e:25:55:57:9b:66:85: ca:96:14:73:e8:3b:69:3d:48:4c:6f:cf:88:dd:27: 03:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F4:0F:FE:C0:FE:40:0A:6A:7F:8E:10:4A:0B:1B:C9:4C:F4:DE:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f53f6872-c8d5-39ea-b595-e4e153d620d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:ea:8c:a7:57:c1:60:02:d7:b9:51:78:35:a8:a3:59:13:e0: 3c:24:f1:1e:e0:26:28:dc:75:5f:32:1a:77:f1:85:86:c0:dd: 17:cd:d3:5f:69:76:85:15:64:7c:0b:78:87:42:8f:0f:b5:de: c5:b1:35:b1:ce:51:07:dd:6c:b2:ba:78:8d:15:35:f9:72:95: cc:54:2e:87:ab:40:b8:41:75:ed:3b:5d:97:24:fa:49:aa:b7: 29:3f:4d:14:76:86:e7:0e:5b:8f:c8:5c:fa:b5:0b:c2:2a:f1: 06:29:37:74:bd:1c:b2:83:42:23:81:0c:e5:d3:d5:a2:af:e4: 95:74:10:99:54:10:37:9c:a5:ea:15:8c:95:0c:64:73:99:1c: e0:d3:61:77:f1:90:16:ab:bf:7c:44:8a:66:a0:a2:c4:b2:73: 11:5d:1f:46:fe:c6:f3:2f:31:3d:bb:ed:50:19:0a:54:1f:7d: 60:30:f2:f3:90:12:06:d4:83:e4:89:91:4e:4a:57:19:26:ea: 5f:b4:34:6f:ef:86:ce:ba:4b:0c:f1:10:96:ba:88:0a:e4:ee: 87:9a:3a:67:8e:a8:b9:07:04:e1:a4:c7:bf:f8:29:74:a0:2a: 91:3e:60:f0:60:76:6b:8a:5b:54:b2:d3:13:73:da:4f:d1:1b: 72:26:6c:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLDRyRqaUTrKooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk M2M1ZmEwNDUtOGNlNy00NTU5LTllZDktOTY0ODdmY2NlOWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRzaDPFx91NA6Xj2V6gKHIBI5/NJlMdlVlGl nZmQMSTMBwFtXYNJGxksbwpA6pTFx5+K/cS0kRJw8gMb8YGxAFfQp4NCAK/nw4ds uS9vUDRd7QLkK+ilvsKdLOzRWQ1fibo/JNCHtJbCoM1zCX7p9g7DeXZn38Y4QFzN x2HBg156Ndz5IcjgylLMxP6YNHINGR01g1Yp9+MXMKsuZ99UNm6s88NGyGCFleFs lR2ROBPa86pcocBSYil9WL3BxLSaZTOhzilPERaT2r9RlWXy8BPU+vzaPJFy84zT +NdCAb/1nCgjJRJEb14lVVebZoXKlhRz6DtpPUhMb8+I3ScDLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMv0D/7A/kAKan+OEEoLG8lM9N6vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjUzZjY4NzItYzhkNS0z OWVhLWI1OTUtZTRlMTUzZDYyMGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF94HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDqjKdXwWAC17lReDWoo1kT4Dwk8R7gJijcdV8yGnfxhYbA3RfN019p doUVZHwLeIdCjw+13sWxNbHOUQfdbLK6eI0VNflylcxULoerQLhBde07XZck+kmq tyk/TRR2hucOW4/IXPq1C8Iq8QYpN3S9HLKDQiOBDOXT1aKv5JV0EJlUEDecpeoV jJUMZHOZHODTYXfxkBarv3xEimagosSycxFdH0b+xvMvMT277VAZClQffWAw8vOQ EgbUg+SJkU5KVxkm6l+0NG/vhs66SwzxEJa6iArk7oeaOmeOqLkHBOGkx7/4KXSg KpE+YPBgdmuKW1Sy0xNz2k/RG3ImbFo= -----END CERTIFICATE-----Generated at Thu Jun 5 18:17:48 2025 by rpki-client