$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f417a6c-7d5c-3e50-8404-ec7db9a6259d.roa File: 0f417a6c-7d5c-3e50-8404-ec7db9a6259d.roa (raw, json) Hash identifier: 3xoYCDqSgdEGKe8cHNM8R6q2hX4+1HHi0BuqX5KBhuo= Subject key identifier: FD:A0:B0:0E:B0:75:BE:00:26:40:66:C8:76:FF:25:9E:2E:74:75:CF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849780F1DF133970C9F156F2180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f417a6c-7d5c-3e50-8404-ec7db9a6259d.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 55836 IP address blocks: 23.192.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:1d:f1:33:97:0c:9f:15:6f:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=af125216-11a0-479a-9c48-0036c843bb40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:e4:03:80:b9:62:14:2b:01:66:5a:79:8d: 21:57:51:d5:2b:dc:04:fb:2c:6d:7f:86:5b:66:6e: 95:77:45:bc:5e:e1:f4:63:6e:bc:be:6d:05:82:41: 04:d8:93:e8:86:1c:29:0d:8e:46:e4:8c:a4:a9:de: 31:da:f4:5d:fd:91:93:29:39:da:3c:c9:9f:c6:bb: db:7a:10:86:97:75:72:0d:b4:b8:b0:95:7f:26:c0: ef:6f:08:06:d6:f5:59:70:a1:b3:15:94:41:91:8f: fe:15:1f:2b:bc:24:f1:ca:90:18:57:65:69:14:73: 03:57:48:dc:77:c9:ad:25:9e:e5:3a:e5:4c:c9:85: 47:b3:e7:04:1d:2a:b0:5d:48:48:7a:5d:72:a8:10: f4:0f:da:3b:70:00:78:0a:91:70:fe:22:c5:19:21: 1c:d7:f6:fe:12:79:4d:11:16:6d:8f:9e:8d:52:74: 41:9f:d8:27:eb:b8:e9:9d:fa:9f:a9:cc:f4:66:4f: ca:e5:00:73:f8:15:2a:aa:24:fc:b5:12:ba:2d:b5: f6:c7:1f:9c:1e:70:d4:32:b9:d3:f1:f8:21:4b:b7: 2a:79:02:5f:c3:85:21:55:48:45:a7:5e:b9:1b:a5: ec:a9:72:2b:89:33:8c:11:e7:f3:a8:9a:37:e9:30: 7f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A0:B0:0E:B0:75:BE:00:26:40:66:C8:76:FF:25:9E:2E:74:75:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f417a6c-7d5c-3e50-8404-ec7db9a6259d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.192.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:66:69:74:ef:85:af:96:0d:c5:30:5b:9d:9b:11:a9:60:e8: 63:19:23:82:b8:b3:af:74:b4:43:9d:24:dc:a4:d7:f5:f0:c7: c9:d1:6e:5c:0c:f8:9a:0d:6a:55:f5:35:8b:41:08:44:2c:5f: e8:0c:b2:43:1c:7c:8d:92:c5:e5:94:e3:3f:15:be:ba:69:19: 4d:83:90:7c:7e:d0:f0:99:b6:98:1e:90:0a:74:de:fb:56:f4: be:c2:8f:47:04:65:a7:21:54:aa:3f:e7:04:c2:6c:65:64:41: ea:38:95:b0:27:a1:4a:92:da:43:dc:90:fe:18:1e:a5:5b:5d: ec:27:b7:af:a9:25:fe:48:37:88:63:a5:68:a5:eb:fa:05:94: c6:9c:6b:27:e8:4e:0a:17:50:ec:1c:33:94:9b:5f:7e:b1:7a: 82:21:d5:e2:a3:9c:d1:0e:7c:f6:65:ac:f9:21:44:10:c0:c8: 58:0e:b5:64:83:54:23:d7:4f:25:1c:9a:4a:c1:96:7b:4c:97: 8e:68:c5:73:ed:17:3c:72:1c:32:91:37:f7:b4:8b:e2:cc:a9: cf:e7:74:60:fb:f0:38:24:b8:6e:6c:8c:2c:fd:8e:35:24:a2: b4:fc:33:fc:39:4c:31:78:0b:a2:d0:f8:37:ec:35:9a:3e:4b: 6d:4d:d1:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4Dx3xM5cMnxVvIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk YWYxMjUyMTYtMTFhMC00NzlhLTljNDgtMDAzNmM4NDNiYjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkrkA4C5YhQrAWZaeY0hV1HVK9wE+yxtf4Zb Zm6Vd0W8XuH0Y268vm0FgkEE2JPohhwpDY5G5Iykqd4x2vRd/ZGTKTnaPMmfxrvb ehCGl3VyDbS4sJV/JsDvbwgG1vVZcKGzFZRBkY/+FR8rvCTxypAYV2VpFHMDV0jc d8mtJZ7lOuVMyYVHs+cEHSqwXUhIel1yqBD0D9o7cAB4CpFw/iLFGSEc1/b+EnlN ERZtj56NUnRBn9gn67jpnfqfqcz0Zk/K5QBz+BUqqiT8tRK6LbX2xx+cHnDUMrnT 8fghS7cqeQJfw4UhVUhFp165G6XsqXIriTOMEefzqJo36TB/TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2gsA6wdb4AJkBmyHb/JZ4udHXPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGY0MTdhNmMtN2Q1Yy0z ZTUwLTg0MDQtZWM3ZGI5YTYyNTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8DoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClmaXTvha+WDcUwW52bEalg6GMZI4K4s690tEOdJNyk1/Xwx8nRblwM +JoNalX1NYtBCEQsX+gMskMcfI2SxeWU4z8VvrppGU2DkHx+0PCZtpgekAp03vtW 9L7Cj0cEZachVKo/5wTCbGVkQeo4lbAnoUqS2kPckP4YHqVbXewnt6+pJf5IN4hj pWil6/oFlMacayfoTgoXUOwcM5SbX36xeoIh1eKjnNEOfPZlrPkhRBDAyFgOtWSD VCPXTyUcmkrBlntMl45oxXPtFzxyHDKRN/e0i+LMqc/ndGD78DgkuG5sjCz9jjUk orT8M/w5TDF4C6LQ+DfsNZo+S21N0Vg= -----END CERTIFICATE-----Generated at Sat Apr 26 18:34:00 2025 by rpki-client