$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/029c457f-31a5-3428-aca9-5a90e1ec84a6.roa File: 029c457f-31a5-3428-aca9-5a90e1ec84a6.roa (raw, json) Hash identifier: UU3gN1n8nnjYFr6j+5I2mOdP3/lBYHw5X477svAP6LQ= Subject key identifier: 98:96:01:49:D1:FC:53:0C:5F:33:BD:D3:7D:0C:B3:28:F4:19:FD:A1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E15267A10719DFF55A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/029c457f-31a5-3428-aca9-5a90e1ec84a6.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.204.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e1:52:67:a1:07:19:df:f5:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=5cec4a93-b702-4148-a83a-1eb2852dc3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:65:56:e1:a8:1d:73:3c:72:d3:e3:9c:b4:7b: d1:18:16:bb:db:97:20:b4:b8:0d:99:00:9f:1a:32: ec:73:1d:a6:08:99:42:7e:e8:95:63:f1:12:7f:1a: 3b:73:78:27:3d:a6:70:74:cd:60:3f:d1:aa:61:12: 48:bb:30:cc:b4:38:d5:b7:33:7b:ea:f4:43:3e:d7: 06:aa:38:7a:de:1e:40:55:78:07:af:38:2e:04:72: 55:cf:07:70:86:e0:ff:b8:c7:8c:c1:50:f4:73:04: c1:22:26:f0:e1:6e:d4:20:da:45:93:0c:96:e2:48: 09:61:08:db:60:a3:69:70:ba:74:e9:24:e9:56:89: 04:66:c1:c0:df:ab:8f:4a:96:98:ad:c9:72:6c:b2: 18:1a:21:d7:49:49:d7:12:67:a3:46:ba:59:0c:64: 87:76:9b:98:53:45:b1:10:a1:1d:16:46:74:0f:2c: 57:f9:b5:39:29:90:ab:87:12:9e:f2:e4:33:ca:b4: 15:87:79:b0:5f:ec:9a:03:7f:45:9e:62:b3:0d:ad: 3a:89:c8:a9:0d:b9:0f:be:8e:1a:96:57:17:97:b3: f5:26:7c:e1:04:05:94:41:33:b8:41:74:5a:66:8e: 8f:d5:da:c6:68:82:31:58:2c:47:1b:8a:bc:47:0f: 41:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:96:01:49:D1:FC:53:0C:5F:33:BD:D3:7D:0C:B3:28:F4:19:FD:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/029c457f-31a5-3428-aca9-5a90e1ec84a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:cd:75:0e:60:98:6f:69:d4:cc:c4:b8:d8:e2:01:98:71:0e: 26:84:79:a9:be:81:b7:57:5f:f3:47:d7:5b:f8:96:2d:48:0c: 48:a3:b8:ff:95:f0:12:25:b5:51:db:c7:f6:20:57:d1:c8:d5: 4e:04:da:a0:8d:da:77:59:07:18:1f:a4:35:dd:88:67:c6:11: f8:c0:ab:c1:95:46:3a:29:1f:d7:53:e4:d4:01:be:80:9c:68: d1:52:ec:ba:4f:f1:a3:6c:ea:48:5f:79:e6:56:33:69:31:c9: 8d:b8:51:31:b3:39:b8:1a:b9:52:d3:fe:ee:1f:28:0f:e6:fa: 6b:90:bc:9c:38:f1:20:64:c6:ff:7b:76:6c:fc:22:36:56:3f: 31:aa:8c:a0:ee:8d:de:6c:81:2e:72:ba:93:7c:b3:1a:b0:63: f0:07:af:75:38:a8:00:bf:38:f3:94:69:c3:eb:26:8d:33:f3: eb:c2:dd:54:f7:0c:55:7e:e5:eb:13:cf:96:28:a2:76:c8:82: 15:fc:db:d3:a5:60:fd:f4:28:dc:c9:f3:b2:96:7f:8f:4a:3b: b7:a1:ad:c9:cd:5e:fe:b1:4e:65:72:d1:90:d1:0b:f1:29:cc: 78:eb:9a:40:cb:aa:21:8c:1f:05:a3:0e:4a:74:f9:30:51:a8: 85:93:87:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKeFSZ6EHGd/1WoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NWNlYzRhOTMtYjcwMi00MTQ4LWE4M2EtMWViMjg1MmRjM2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2VW4agdczxy0+OctHvRGBa725cgtLgNmQCf GjLscx2mCJlCfuiVY/ESfxo7c3gnPaZwdM1gP9GqYRJIuzDMtDjVtzN76vRDPtcG qjh63h5AVXgHrzguBHJVzwdwhuD/uMeMwVD0cwTBIibw4W7UINpFkwyW4kgJYQjb YKNpcLp06STpVokEZsHA36uPSpaYrclybLIYGiHXSUnXEmejRrpZDGSHdpuYU0Wx EKEdFkZ0DyxX+bU5KZCrhxKe8uQzyrQVh3mwX+yaA39FnmKzDa06icipDbkPvo4a llcXl7P1JnzhBAWUQTO4QXRaZo6P1drGaIIxWCxHG4q8Rw9B1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiWAUnR/FMMXzO9030Msyj0Gf2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDI5YzQ1N2YtMzFhNS0z NDI4LWFjYTktNWE5MGUxZWM4NGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8xQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXNdQ5gmG9p1MzEuNjiAZhxDiaEeam+gbdXX/NH11v4li1IDEijuP+V 8BIltVHbx/YgV9HI1U4E2qCN2ndZBxgfpDXdiGfGEfjAq8GVRjopH9dT5NQBvoCc aNFS7LpP8aNs6khfeeZWM2kxyY24UTGzObgauVLT/u4fKA/m+muQvJw48SBkxv97 dmz8IjZWPzGqjKDujd5sgS5yupN8sxqwY/AHr3U4qAC/OPOUacPrJo0z8+vC3VT3 DFV+5esTz5YoonbIghX829OlYP30KNzJ87KWf49KO7ehrcnNXv6xTmVy0ZDRC/Ep zHjrmkDLqiGMHwWjDkp0+TBRqIWTh9s= -----END CERTIFICATE-----Generated at Sat Apr 26 16:10:43 2025 by rpki-client