$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a62e32e-de24-3699-99f8-b3d6c7355292.roa File: 1a62e32e-de24-3699-99f8-b3d6c7355292.roa (raw, json) Hash identifier: A1CyLrQmbYmXRfJa9GqKRSPR443Aj42yZo7LnqYajN0= Subject key identifier: 2E:06:19:FE:5A:0F:EE:30:2B:2C:42:68:5A:CB:65:C0:FD:D0:56:D4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849860470A18784430DBC539300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a62e32e-de24-3699-99f8-b3d6c7355292.roa Signing time: Mon 14 Apr 2025 13:00:59 +0000 ROA not before: Mon 14 Apr 2025 13:00:59 +0000 ROA not after: Sun 13 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.199.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:04:70:a1:87:84:43:0d:bc:53:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 14 13:00:59 2025 GMT Not After : Jul 13 13:00:59 2025 GMT Subject: CN=c8b7122c-8a2e-4bca-9cc2-7c56d1df7f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d9:75:88:30:9f:cd:df:20:39:61:fe:ec:d0: 88:92:14:32:ef:a3:36:2e:d4:ce:2f:75:ae:31:6f: 15:c5:41:34:93:52:8c:05:1f:66:49:95:b9:01:ed: fe:3f:75:f9:09:ac:b9:09:6d:5f:bb:c4:fe:11:4e: 16:d9:3b:43:7f:f9:a1:ff:8f:bf:32:25:60:fd:5f: 27:6f:9a:a0:82:e7:6c:c6:52:d3:50:81:92:38:a2: 49:79:af:c6:1a:15:e3:d2:a4:aa:6a:5b:83:81:96: 03:c3:66:d1:41:b2:d5:70:16:87:44:0f:63:7c:c2: 7e:52:69:31:91:f4:af:01:b8:5c:71:ad:d5:15:f8: 81:16:ad:43:2f:a7:7d:9f:43:64:b2:ba:36:50:99: c1:18:65:9c:98:1d:07:b5:88:b1:19:ab:3d:f5:a3: fd:61:ca:7f:c5:eb:63:80:18:b3:43:93:4d:4e:d4: 23:b3:f9:1d:ea:d7:1e:94:fb:33:9b:e8:ea:51:da: 0d:40:be:ec:fb:36:c3:3a:17:09:fd:bc:7c:75:16: b3:f1:59:98:9e:50:9b:60:0a:59:ce:27:e8:80:59: 81:90:11:7a:9c:96:42:0b:e6:44:6a:87:ad:0a:f9: b7:e1:3f:9f:d5:e2:b4:71:e6:f9:14:1a:68:63:d9: a8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:06:19:FE:5A:0F:EE:30:2B:2C:42:68:5A:CB:65:C0:FD:D0:56:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a62e32e-de24-3699-99f8-b3d6c7355292.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:7b:c6:d4:55:f8:e5:41:1e:c6:0c:b1:a3:8e:36:e5:57:99: a6:cd:d0:7a:9c:9c:e1:02:21:36:93:c8:ad:1b:59:1c:b3:79: 99:69:2c:b2:e2:70:2c:17:2c:21:9e:b1:35:1a:af:2f:55:7f: da:a6:0f:a7:83:2b:2f:02:9b:ca:58:4c:5d:8e:4d:be:ec:df: e8:de:53:76:e1:df:9e:b2:3e:ee:8a:2d:c5:c7:e3:51:bf:50: c4:7b:55:11:c0:48:37:6d:9a:e9:c1:57:05:77:d5:93:eb:36: 7b:bc:f1:62:ee:5f:c5:aa:6c:31:53:6c:51:44:d4:15:60:d5: 5f:b3:69:62:a1:aa:3f:05:43:ee:09:45:51:ed:9e:78:49:3e: e3:7b:99:f8:58:eb:3e:19:9c:87:58:25:49:7c:4c:87:a0:91: 0f:4f:e4:eb:17:35:19:85:55:69:d4:86:fe:ad:81:5d:b2:97: d8:41:d4:e7:39:c9:a3:ba:57:b5:21:36:bf:de:8f:6e:52:18: 7b:f1:03:79:3b:0f:4d:4f:8f:33:f5:94:02:96:e4:ee:d3:10: 2b:82:11:cf:17:2c:23:e7:d2:40:03:1f:f0:ca:9c:6f:a6:95: ea:8e:61:31:5e:81:11:9c:41:99:b0:00:35:09:9d:17:54:a8: f8:48:f1:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGBHChh4RDDbxTkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNDEzMDA1OVoXDTI1MDcxMzEzMDA1OVowLzEtMCsGA1UEAxMk YzhiNzEyMmMtOGEyZS00YmNhLTljYzItN2M1NmQxZGY3ZjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdl1iDCfzd8gOWH+7NCIkhQy76M2LtTOL3Wu MW8VxUE0k1KMBR9mSZW5Ae3+P3X5Cay5CW1fu8T+EU4W2TtDf/mh/4+/MiVg/V8n b5qggudsxlLTUIGSOKJJea/GGhXj0qSqaluDgZYDw2bRQbLVcBaHRA9jfMJ+Umkx kfSvAbhcca3VFfiBFq1DL6d9n0Nksro2UJnBGGWcmB0HtYixGas99aP9Ycp/xetj gBizQ5NNTtQjs/kd6tcelPszm+jqUdoNQL7s+zbDOhcJ/bx8dRaz8VmYnlCbYApZ zifogFmBkBF6nJZCC+ZEaoetCvm34T+f1eK0ceb5FBpoY9moowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4GGf5aD+4wKyxCaFrLZcD90FbUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWE2MmUzMmUtZGUyNC0z Njk5LTk5ZjgtYjNkNmM3MzU1MjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8dAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACx7xtRV+OVBHsYMsaOONuVXmabN0HqcnOECITaTyK0bWRyzeZlpLLLi cCwXLCGesTUary9Vf9qmD6eDKy8Cm8pYTF2OTb7s3+jeU3bh356yPu6KLcXH41G/ UMR7VRHASDdtmunBVwV31ZPrNnu88WLuX8WqbDFTbFFE1BVg1V+zaWKhqj8FQ+4J RVHtnnhJPuN7mfhY6z4ZnIdYJUl8TIegkQ9P5OsXNRmFVWnUhv6tgV2yl9hB1Oc5 yaO6V7UhNr/ej25SGHvxA3k7D01PjzP1lAKW5O7TECuCEc8XLCPn0kADH/DKnG+m leqOYTFegRGcQZmwADUJnRdUqPhI8cI= -----END CERTIFICATE-----Generated at Sat Apr 26 17:44:56 2025 by rpki-client