$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14598a0b-af98-3c2f-90a3-e014b3d6e413.roa File: 14598a0b-af98-3c2f-90a3-e014b3d6e413.roa (raw, json) Hash identifier: wg0F1q3Bt/+IBekOfgUEXyLKnFft1noEGuVVNshNZKY= Subject key identifier: B0:38:F3:91:6C:D4:11:8E:4E:69:8F:86:91:27:F7:24:F6:D9:6E:73 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498769CF5E26696DC0511280E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14598a0b-af98-3c2f-90a3-e014b3d6e413.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.201.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:cf:5e:26:69:6d:c0:51:12:80:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=467d5a89-1dea-4882-9737-ea8adf206171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5f:38:ad:9a:d4:b5:ba:44:bc:f1:4a:45:7f: 01:b7:67:37:53:dd:89:e4:4b:34:3d:f3:ed:c1:d5: 1c:e7:98:f4:88:5a:bf:35:69:d8:61:5e:6c:68:f8: 8f:bf:fd:dd:2b:55:f5:fa:1f:27:94:c5:26:30:9c: cf:61:2d:85:a2:43:ac:f6:53:9d:ce:39:57:2e:9f: 65:bd:6a:bd:2d:a7:0d:5e:de:26:97:f5:57:be:5e: b1:b1:32:68:30:28:8f:93:06:ff:01:13:f2:aa:e6: 8b:2c:75:ad:3c:44:73:a7:ab:71:87:2c:eb:f4:d7: 0b:c2:90:cf:69:d2:2d:7b:66:e9:aa:3e:d8:c1:be: b2:0e:c7:9c:8f:0a:c9:69:22:a4:40:d1:7c:32:a7: c7:7d:aa:2a:a7:fe:31:12:a4:26:49:d9:a3:c0:ef: ff:bd:77:0e:fa:21:9f:c4:bd:f8:dd:44:39:59:01: 15:d2:14:fa:11:1d:4e:73:12:22:24:38:84:87:7b: 40:61:b1:e7:9d:c6:d7:b1:05:3b:54:16:17:c1:c5: 25:95:c0:9f:e4:1e:8f:23:cb:06:3c:12:55:4b:a9: 54:9e:e4:d9:5b:3c:6d:69:c6:06:ec:28:ab:c9:8f: 82:de:d7:b5:11:a3:db:1a:db:4a:de:71:45:7f:9c: d7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:38:F3:91:6C:D4:11:8E:4E:69:8F:86:91:27:F7:24:F6:D9:6E:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14598a0b-af98-3c2f-90a3-e014b3d6e413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:3c:58:1b:48:49:6b:9e:94:5d:a9:27:50:fc:b9:95:73:05: 05:9f:65:4e:68:45:3e:76:5d:19:32:65:c8:6a:94:2b:89:a0: 77:f6:38:44:66:d7:50:30:76:73:50:4b:c4:cb:98:7a:24:63: 15:67:c4:a5:67:db:d5:5d:ba:7c:a6:77:da:6f:10:04:b3:7a: fa:80:0d:5d:d3:88:08:9b:d2:f9:3c:46:7a:a7:67:2f:a6:0e: 5f:bc:17:76:3a:94:4a:19:f8:e1:70:d8:ed:a9:08:3d:e0:fd: 16:c0:d0:01:94:e9:b8:83:c0:c2:13:40:d2:d1:0b:4c:4b:2b: 89:9f:8f:9e:7a:71:2f:ff:d6:d7:7f:88:24:85:50:4d:94:ce: 4f:90:e9:cd:ab:53:fb:81:05:0c:03:b1:68:11:b5:82:78:95: 2d:cc:1d:d7:3c:5b:41:bb:83:56:75:78:77:c4:08:e4:de:ef: 1e:06:44:e0:98:e9:8a:03:19:5c:d7:e9:1b:17:a3:26:f1:8c: e0:66:31:fd:17:09:d7:f7:ac:37:89:8d:22:42:c0:08:fd:82: d1:85:1f:e9:e3:35:bd:41:2f:a5:ee:c3:ad:ff:3c:fe:37:15: 37:c9:73:0f:d0:2b:ed:a1:20:e5:86:ee:95:df:0f:e1:c3:1f: 77:76:dd:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHac9eJmltwFESgOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk NDY3ZDVhODktMWRlYS00ODgyLTk3MzctZWE4YWRmMjA2MTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkV84rZrUtbpEvPFKRX8Bt2c3U92J5Es0PfPt wdUc55j0iFq/NWnYYV5saPiPv/3dK1X1+h8nlMUmMJzPYS2FokOs9lOdzjlXLp9l vWq9LacNXt4ml/VXvl6xsTJoMCiPkwb/ARPyquaLLHWtPERzp6txhyzr9NcLwpDP adIte2bpqj7Ywb6yDsecjwrJaSKkQNF8MqfHfaoqp/4xEqQmSdmjwO//vXcO+iGf xL343UQ5WQEV0hT6ER1OcxIiJDiEh3tAYbHnncbXsQU7VBYXwcUllcCf5B6PI8sG PBJVS6lUnuTZWzxtacYG7CiryY+C3te1EaPbGttK3nFFf5zXCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLA485Fs1BGOTmmPhpEn9yT22W5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTQ1OThhMGItYWY5OC0z YzJmLTkwYTMtZTAxNGIzZDZlNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8kcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGc8WBtISWuelF2pJ1D8uZVzBQWfZU5oRT52XRkyZchqlCuJoHf2OERm 11AwdnNQS8TLmHokYxVnxKVn29Vdunymd9pvEASzevqADV3TiAib0vk8RnqnZy+m Dl+8F3Y6lEoZ+OFw2O2pCD3g/RbA0AGU6biDwMITQNLRC0xLK4mfj556cS//1td/ iCSFUE2Uzk+Q6c2rU/uBBQwDsWgRtYJ4lS3MHdc8W0G7g1Z1eHfECOTe7x4GROCY 6YoDGVzX6RsXoybxjOBmMf0XCdf3rDeJjSJCwAj9gtGFH+njNb1BL6Xuw63/PP43 FTfJcw/QK+2hIOWG7pXfD+HDH3d23ec= -----END CERTIFICATE-----Generated at Sun Apr 27 12:31:41 2025 by rpki-client