$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a6b5a7d-2972-3c38-b449-1cf4dad5f87b.roa File: 1a6b5a7d-2972-3c38-b449-1cf4dad5f87b.roa (raw, json) Hash identifier: RkDxVe6CEYza+epvmyMpZd9ggsBT+4Ky5EZRNfiT4AM= Subject key identifier: 30:C0:9A:FE:FB:FE:DC:19:FB:DA:22:88:5A:C0:97:D1:7B:E0:83:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829DC938DFF037FB187C200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a6b5a7d-2972-3c38-b449-1cf4dad5f87b.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.206.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:dc:93:8d:ff:03:7f:b1:87:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=7f6ce25e-a2ab-4d7a-8fc3-d484416a0367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:35:fb:2e:9f:77:b0:9d:d7:f0:bd:5a:3f:ca: b9:1b:78:59:93:28:0f:ed:75:32:d0:19:7f:af:45: e0:db:95:9b:f7:69:04:d4:09:32:14:6f:45:9d:5a: 09:4b:52:28:67:9e:1a:19:e8:7a:1b:89:a6:8c:03: 51:01:02:bd:09:fa:c1:6e:a1:f1:d9:ee:9d:1d:71: 4c:eb:df:9b:83:80:b1:21:3c:06:79:89:19:be:32: 6c:2e:57:dc:c3:08:82:2c:c6:b8:a7:b6:5e:41:c5: e6:e7:a1:31:2a:a4:00:c9:a7:df:fd:45:8b:d3:f2: 4b:7d:48:04:ca:8a:55:de:eb:86:d5:94:04:82:e8: b4:fd:ae:da:1b:b0:a4:4a:ed:a1:a0:90:57:ef:9f: a7:e3:a6:48:9c:5c:cb:03:be:d9:9e:57:db:99:1e: cc:18:7f:b8:82:87:ea:92:79:b5:2d:8c:d7:e9:06: ee:2c:ee:20:4e:ec:3c:05:76:99:f5:5d:85:0d:72: 88:61:5c:d8:00:1b:be:59:ce:97:fd:55:e6:89:ca: b0:56:ba:ce:2c:84:01:df:ad:23:77:06:e5:34:07: c0:b7:09:8b:85:74:c0:2a:85:84:1d:0b:4f:60:ed: 3a:31:b3:97:b1:95:e1:86:b4:7f:4d:65:be:e9:69: 1c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C0:9A:FE:FB:FE:DC:19:FB:DA:22:88:5A:C0:97:D1:7B:E0:83:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a6b5a7d-2972-3c38-b449-1cf4dad5f87b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:07:15:06:1f:99:48:7a:14:23:c4:1b:b1:70:d0:f9:0b:a4: c7:2e:7f:45:56:a6:e8:64:5e:89:04:a9:e3:3c:09:8b:bb:35: 1f:56:36:9b:88:c7:a9:e9:62:25:df:05:49:bf:83:27:e7:71: c2:a3:d9:9e:bd:4b:db:47:8a:c0:02:66:34:a5:0a:b1:6d:5d: da:83:81:9a:6a:7d:6e:a8:56:51:55:b3:90:da:c8:ae:4a:cd: 09:55:f3:df:f4:86:fb:38:d2:c1:bb:3f:82:72:f0:ee:06:ff: d9:f2:98:ca:e6:54:7e:74:5b:33:9d:a8:60:33:d5:e7:7c:31: 79:7b:5b:ba:42:79:32:c7:81:cb:e5:53:c0:58:38:91:be:41: af:eb:e2:ea:b3:cf:78:3f:53:24:da:cf:67:f7:ac:de:2c:62: 55:f8:84:35:f3:1f:be:bf:92:80:81:a4:97:55:fc:27:95:6e: 99:1e:5d:c5:03:bd:60:67:2b:3c:84:45:9e:45:71:76:32:58: a3:4d:a6:79:36:0f:05:78:93:8c:ad:24:ad:2a:a1:c7:94:ed: 30:2b:6a:27:79:77:6a:bf:08:96:e0:8f:5f:1f:d6:db:bf:f9: ee:0b:0b:37:09:f0:1d:13:7a:b6:d3:01:fc:b2:e3:4a:00:42: 7d:c2:21:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdyTjf8Df7GHwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk N2Y2Y2UyNWUtYTJhYi00ZDdhLThmYzMtZDQ4NDQxNmEwMzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDX7Lp93sJ3X8L1aP8q5G3hZkygP7XUy0Bl/ r0Xg25Wb92kE1AkyFG9FnVoJS1IoZ54aGeh6G4mmjANRAQK9CfrBbqHx2e6dHXFM 69+bg4CxITwGeYkZvjJsLlfcwwiCLMa4p7ZeQcXm56ExKqQAyaff/UWL0/JLfUgE yopV3uuG1ZQEgui0/a7aG7CkSu2hoJBX75+n46ZInFzLA77ZnlfbmR7MGH+4gofq knm1LYzX6QbuLO4gTuw8BXaZ9V2FDXKIYVzYABu+Wc6X/VXmicqwVrrOLIQB360j dwblNAfAtwmLhXTAKoWEHQtPYO06MbOXsZXhhrR/TWW+6WkcawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDAmv77/twZ+9oiiFrAl9F74IPcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWE2YjVhN2QtMjk3Mi0z YzM4LWI0NDktMWNmNGRhZDVmODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF87BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsHFQYfmUh6FCPEG7Fw0PkLpMcuf0VWpuhkXokEqeM8CYu7NR9WNpuI x6npYiXfBUm/gyfnccKj2Z69S9tHisACZjSlCrFtXdqDgZpqfW6oVlFVs5DayK5K zQlV89/0hvs40sG7P4Jy8O4G/9nymMrmVH50WzOdqGAz1ed8MXl7W7pCeTLHgcvl U8BYOJG+Qa/r4uqzz3g/UyTaz2f3rN4sYlX4hDXzH76/koCBpJdV/CeVbpkeXcUD vWBnKzyERZ5FcXYyWKNNpnk2DwV4k4ytJK0qoceU7TAraid5d2q/CJbgj18f1tu/ +e4LCzcJ8B0TerbTAfyy40oAQn3CIR4= -----END CERTIFICATE-----Generated at Sun Apr 27 02:53:14 2025 by rpki-client