$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/041752f7-1682-3f67-84e4-53f0f1806949.roa File: 041752f7-1682-3f67-84e4-53f0f1806949.roa (raw, json) Hash identifier: 81PyYGOCRWy6IS3KgPoRCNQTLiGppj9BwnE0lkjcdQ8= Subject key identifier: 84:73:32:CC:7A:41:8F:8D:92:7C:4B:A8:48:30:71:4E:DF:E8:20:2B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849833A0C5F7D0A4DAD2AD2E600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/041752f7-1682-3f67-84e4-53f0f1806949.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.194.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:3a:0c:5f:7d:0a:4d:ad:2a:d2:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=596e4e76-d767-4cef-9a4b-467eb43dd085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f6:de:e4:77:40:71:67:87:f5:4c:b4:25:ad: bb:2f:6a:d0:3e:7a:24:b7:9d:ce:fc:4d:37:18:bc: 9b:56:93:e1:ef:fe:30:63:10:00:79:cc:eb:e8:2d: 8d:cf:c4:b4:31:a8:02:4c:80:a3:89:2b:7d:28:27: e3:c9:ef:8e:48:7c:73:0e:e3:9a:b4:72:42:87:18: 46:2b:16:20:fa:0f:62:4a:28:66:b9:57:2c:89:57: 2a:31:a4:5f:81:4a:c9:4e:a9:86:b9:d9:3b:b5:da: 66:26:4f:7d:a0:ce:0b:73:4c:f9:7f:a1:86:4b:58: 94:72:ad:4c:4b:7d:74:8b:33:ee:85:df:0b:2e:62: c0:1e:a6:58:31:68:b9:6a:76:00:eb:28:d0:fe:ab: 8a:12:69:02:7b:49:f6:97:32:d2:52:03:01:40:b4: 00:57:2e:27:60:ce:d5:89:9a:d7:95:de:e6:35:a4: 86:ad:4e:77:83:b0:32:33:c8:b2:46:44:7b:14:fd: f4:e1:c2:53:85:bb:32:86:5f:8b:57:93:c1:c8:71: 57:bd:ef:55:31:32:9c:b2:bb:1d:a5:9a:ab:5c:45: fd:47:b8:4c:40:39:8e:1c:d2:5a:46:05:9d:8e:88: 51:50:2a:d4:5a:d9:20:95:80:e9:5c:ed:b2:34:d9: 50:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:73:32:CC:7A:41:8F:8D:92:7C:4B:A8:48:30:71:4E:DF:E8:20:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/041752f7-1682-3f67-84e4-53f0f1806949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:7b:84:48:74:45:96:96:de:bf:da:34:74:f6:4f:30:03:a0: 09:4b:2f:1d:2d:32:e6:86:d9:8b:5e:d6:49:28:3b:82:fc:47: a2:11:b0:c8:52:0f:9a:26:78:d8:72:ff:b6:6a:9b:68:21:65: 1a:d0:35:33:91:e6:19:62:d8:4e:df:25:e3:9a:5d:52:b3:4b: d2:1d:a0:bc:e0:5f:a5:2b:08:e1:c9:99:c7:29:39:69:09:14: 8c:a9:14:98:cf:b1:7a:18:19:65:41:2c:48:db:38:b6:90:23: 05:b8:83:e5:e5:ad:19:57:7c:e5:8e:94:06:c2:80:08:8e:55: e1:ab:69:b5:4b:e3:f9:36:56:71:00:aa:34:53:f4:2f:62:c3: 4c:1b:6e:a0:7f:5e:c5:f1:28:eb:78:82:e4:b4:0e:34:5a:d7: 1b:e3:87:1f:27:4b:0d:37:64:87:fe:b0:0b:8e:03:63:16:0d: 5f:7b:81:2b:82:ba:71:a2:7d:71:02:51:40:a6:82:30:71:3c: 32:67:d3:42:eb:d7:e2:19:dc:53:4a:11:d3:fe:d7:72:25:df: 5f:a7:f3:cc:b7:f9:1b:b1:d7:ed:0d:47:8d:21:b5:91:69:1b: 48:b4:25:4e:ef:71:05:b4:5f:f3:22:e0:db:6c:a2:cb:a8:f8: 97:e7:eb:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOgxffQpNrSrS5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk NTk2ZTRlNzYtZDc2Ny00Y2VmLTlhNGItNDY3ZWI0M2RkMDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvbe5HdAcWeH9Uy0Ja27L2rQPnokt53O/E03 GLybVpPh7/4wYxAAeczr6C2Nz8S0MagCTICjiSt9KCfjye+OSHxzDuOatHJChxhG KxYg+g9iSihmuVcsiVcqMaRfgUrJTqmGudk7tdpmJk99oM4Lc0z5f6GGS1iUcq1M S310izPuhd8LLmLAHqZYMWi5anYA6yjQ/quKEmkCe0n2lzLSUgMBQLQAVy4nYM7V iZrXld7mNaSGrU53g7AyM8iyRkR7FP304cJThbsyhl+LV5PByHFXve9VMTKcsrsd pZqrXEX9R7hMQDmOHNJaRgWdjohRUCrUWtkglYDpXO2yNNlQHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRzMsx6QY+NknxLqEgwcU7f6CArMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDQxNzUyZjctMTY4Mi0z ZjY3LTg0ZTQtNTNmMGYxODA2OTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8KDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD97hEh0RZaW3r/aNHT2TzADoAlLLx0tMuaG2Yte1kkoO4L8R6IRsMhS D5omeNhy/7Zqm2ghZRrQNTOR5hli2E7fJeOaXVKzS9IdoLzgX6UrCOHJmccpOWkJ FIypFJjPsXoYGWVBLEjbOLaQIwW4g+XlrRlXfOWOlAbCgAiOVeGrabVL4/k2VnEA qjRT9C9iw0wbbqB/XsXxKOt4guS0DjRa1xvjhx8nSw03ZIf+sAuOA2MWDV97gSuC unGifXECUUCmgjBxPDJn00Lr1+IZ3FNKEdP+13Il31+n88y3+Rux1+0NR40htZFp G0i0JU7vcQW0X/Mi4Ntsosuo+Jfn64c= -----END CERTIFICATE-----Generated at Sat Apr 26 15:55:49 2025 by rpki-client