$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16ed9aba-b6f8-33d8-b6d2-4ac1a5082aaa.roa File: 16ed9aba-b6f8-33d8-b6d2-4ac1a5082aaa.roa (raw, json) Hash identifier: L5WA9/9BfQ3wed4NsMq0/7BgbG4kNBPzGnguIGSpAeg= Subject key identifier: 61:E4:0D:7C:21:12:74:9A:F8:AE:5A:76:03:6F:3F:A8:8B:54:C6:EB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498339FEEEC57893805A50AC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16ed9aba-b6f8-33d8-b6d2-4ac1a5082aaa.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.198.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:fe:ee:c5:78:93:80:5a:50:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=14ea8bbd-4032-4dd9-a24c-20908d1e0f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3d:13:7b:12:fc:d4:3e:5e:c4:ab:0a:72:bb: 01:14:67:ff:82:29:88:bc:01:a1:09:07:df:90:f4: 35:1b:97:98:04:df:d4:2a:91:35:14:43:ca:7e:50: 28:d1:e9:91:a6:87:c7:f7:69:d3:e3:76:2e:47:62: ec:04:0a:b4:11:42:a2:ac:c6:4a:30:44:54:9b:13: 30:59:ff:02:61:5c:b0:e7:01:36:27:eb:8b:7a:96: b0:25:ce:07:91:cb:08:52:50:14:e8:9c:b6:bc:11: f8:4e:a5:60:8e:57:ad:3b:08:9b:3e:68:3c:ca:53: d9:9f:91:e0:28:95:9f:cd:98:11:87:21:79:bd:18: aa:51:aa:da:aa:22:c7:ce:58:0e:87:e4:af:cb:c9: 21:90:ed:62:69:77:a8:eb:39:31:c1:ef:9c:82:33: 0c:37:19:3b:32:08:e0:b1:05:bc:65:d2:39:77:d1: 43:1e:04:86:c9:03:76:e9:41:73:cd:93:9c:56:62: 69:97:d4:71:2c:81:1f:dd:a5:0d:72:0d:25:96:72: 4a:93:5f:31:00:8f:d1:40:da:09:b2:c2:29:d6:0f: f6:85:44:8d:40:3d:83:a8:d4:31:fe:07:6b:0d:a6: 30:f9:86:1b:3f:26:17:33:08:46:ba:41:e4:5d:bb: 6c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E4:0D:7C:21:12:74:9A:F8:AE:5A:76:03:6F:3F:A8:8B:54:C6:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16ed9aba-b6f8-33d8-b6d2-4ac1a5082aaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e6:08:e6:12:ef:13:86:ec:36:a7:b3:64:c3:3e:b1:f9:5b: 3c:f3:29:e3:89:ee:fd:4e:d6:d6:df:68:0d:b3:67:8b:fa:41: 66:da:24:39:f1:a3:9e:01:cb:58:64:72:a3:8e:0a:c7:1d:32: e7:be:33:92:6d:58:02:4f:e7:6f:6e:77:6c:51:f4:e3:3f:61: aa:2d:1c:7d:98:9c:23:c8:74:a1:47:53:6c:9e:84:54:26:e1: 35:db:b7:cd:22:20:af:68:11:9b:b5:5c:db:9b:3f:6d:f2:aa: 07:9e:f7:be:2e:f5:f3:ed:ea:7f:e7:ee:7a:ef:14:74:18:d3: f0:47:a8:d8:44:3a:db:25:d9:69:e0:de:2f:70:97:46:b1:94: 3e:ed:87:fa:ac:c4:81:29:74:25:a5:e5:da:49:eb:2a:53:2a: 29:b8:ce:df:5d:02:0d:84:b4:07:cc:9e:9a:84:0a:59:54:27: 72:3d:3e:e9:23:b7:f3:cc:7c:81:70:4d:fc:5b:3f:4e:35:ad: 74:5a:c2:4c:ca:1d:3e:e4:bb:6c:ae:29:62:c3:55:8a:74:10: c2:05:88:f3:cc:aa:f7:bd:86:4a:22:70:91:a7:47:9b:bf:02: ec:48:bd:3d:42:ea:84:96:6f:9d:99:3e:46:3f:e4:0d:55:4b: 59:dc:e1:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOf7uxXiTgFpQrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk MTRlYThiYmQtNDAzMi00ZGQ5LWEyNGMtMjA5MDhkMWUwZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD0TexL81D5exKsKcrsBFGf/gimIvAGhCQff kPQ1G5eYBN/UKpE1FEPKflAo0emRpofH92nT43YuR2LsBAq0EUKirMZKMERUmxMw Wf8CYVyw5wE2J+uLepawJc4HkcsIUlAU6Jy2vBH4TqVgjletOwibPmg8ylPZn5Hg KJWfzZgRhyF5vRiqUaraqiLHzlgOh+Svy8khkO1iaXeo6zkxwe+cgjMMNxk7Mgjg sQW8ZdI5d9FDHgSGyQN26UFzzZOcVmJpl9RxLIEf3aUNcg0llnJKk18xAI/RQNoJ ssIp1g/2hUSNQD2DqNQx/gdrDaYw+YYbPyYXMwhGukHkXbtslQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHkDXwhEnSa+K5adgNvP6iLVMbrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTZlZDlhYmEtYjZmOC0z M2Q4LWI2ZDItNGFjMWE1MDgyYWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8bXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzmCOYS7xOG7Dans2TDPrH5WzzzKeOJ7v1O1tbfaA2zZ4v6QWbaJDnx o54By1hkcqOOCscdMue+M5JtWAJP529ud2xR9OM/YaotHH2YnCPIdKFHU2yehFQm 4TXbt80iIK9oEZu1XNubP23yqgee974u9fPt6n/n7nrvFHQY0/BHqNhEOtsl2Wng 3i9wl0axlD7th/qsxIEpdCWl5dpJ6ypTKim4zt9dAg2EtAfMnpqECllUJ3I9Pukj t/PMfIFwTfxbP041rXRawkzKHT7ku2yuKWLDVYp0EMIFiPPMqve9hkoicJGnR5u/ AuxIvT1C6oSWb52ZPkY/5A1VS1nc4Z8= -----END CERTIFICATE-----Generated at Sat Apr 26 17:40:13 2025 by rpki-client