$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/254b66fe-32ed-32d6-8ece-59e39ff5e240.roa File: 254b66fe-32ed-32d6-8ece-59e39ff5e240.roa (raw, json) Hash identifier: ZaB//ys4S9BXy3ar/bWC7rk7+ZD7Uvl6T+VjJrkZ5vM= Subject key identifier: D4:5A:C1:B1:8B:F6:AF:49:09:1C:82:40:B8:2F:1B:AE:29:31:1E:05 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829D8E336BAAE1588DA3500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/254b66fe-32ed-32d6-8ece-59e39ff5e240.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.204.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d8:e3:36:ba:ae:15:88:da:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=4de8a795-fc3b-4f3f-95ed-e3f1619688b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6c:d8:09:84:47:55:3c:3d:8f:79:9a:9d:b1: e4:4b:aa:81:30:36:22:9a:11:09:9c:b9:68:e2:23: fb:6d:4d:67:10:c9:0b:fd:9e:f4:79:ab:9d:b6:19: 53:07:8e:9a:c5:62:48:db:4a:8a:e1:e2:de:11:20: a2:2a:7c:34:22:e1:f4:3e:f7:6f:1c:f5:db:c3:b3: c5:4e:cb:1d:60:ac:88:ed:0c:81:57:ea:27:07:7f: 8d:12:a6:1e:eb:cb:94:e2:1a:07:03:b2:60:56:0b: 17:4f:ff:09:e1:42:29:89:7b:7c:2e:22:ea:f5:21: e9:af:fa:c0:e9:02:0b:e3:b7:b3:47:28:65:7d:79: 0b:26:2d:49:fc:52:37:aa:62:86:2e:a8:95:02:b7: 0f:02:68:54:ee:79:36:b3:df:d2:82:08:a7:8f:90: 32:13:41:a8:7f:e2:70:f5:fb:1d:31:eb:c6:97:ac: e2:af:76:99:9c:d6:0d:6c:21:ea:c9:cf:44:6a:88: 52:87:7c:55:2a:62:36:a1:34:4a:06:19:33:ef:b0: f2:46:d9:2e:07:6d:e0:cb:da:ec:8e:8e:f1:ce:e3: 75:d3:cb:f4:f3:12:da:fb:0c:ef:1a:0c:e3:3f:fb: dc:ac:b1:50:87:51:bc:3b:93:c3:c6:6a:ec:a6:04: 31:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5A:C1:B1:8B:F6:AF:49:09:1C:82:40:B8:2F:1B:AE:29:31:1E:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/254b66fe-32ed-32d6-8ece-59e39ff5e240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:89:d1:98:66:f1:be:50:f6:03:46:b3:d9:8c:18:63:59:32: 42:0f:d7:f6:33:c6:7c:2c:9c:53:b6:12:11:ef:88:51:5b:1f: 84:58:ac:81:0f:ab:92:ff:2b:d6:a5:38:12:11:f9:3f:ab:2f: bf:f8:63:92:58:d6:8d:f4:9b:55:16:32:76:21:87:7e:85:21: 92:d7:f9:d1:0d:dd:cf:0b:36:fb:1d:2d:6f:ef:43:8b:f0:d6: 97:89:50:52:4f:3a:d2:f3:3c:00:44:a4:f5:db:2c:ae:f8:a0: d6:73:09:32:82:60:e7:50:15:a4:b8:8b:b0:9c:e7:e9:97:9e: 6a:c7:05:33:5a:11:6e:ef:16:ba:da:cb:77:5d:b3:83:97:4b: f2:17:9c:c1:f8:ae:20:cf:70:38:fc:bb:9a:92:2e:7b:26:ba: 09:91:ef:3a:c1:43:07:1f:1f:2a:17:93:e5:ef:5e:1d:3e:93: 0b:33:97:29:15:7f:ea:a5:18:5c:a6:fc:8d:31:58:1a:da:9a: a5:63:ed:58:6f:ff:d9:44:e8:7f:b3:47:0e:2a:86:f3:05:5e: 37:68:fa:9d:2d:6e:f1:ad:56:ed:af:7b:29:f7:da:bc:7d:f6: 34:a9:af:50:84:0d:af:7a:2c:b2:82:b1:b1:bc:b9:de:fb:9c: 69:90:ad:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdjjNrquFYjaNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NGRlOGE3OTUtZmMzYi00ZjNmLTk1ZWQtZTNmMTYxOTY4OGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2zYCYRHVTw9j3manbHkS6qBMDYimhEJnLlo 4iP7bU1nEMkL/Z70eaudthlTB46axWJI20qK4eLeESCiKnw0IuH0PvdvHPXbw7PF TssdYKyI7QyBV+onB3+NEqYe68uU4hoHA7JgVgsXT/8J4UIpiXt8LiLq9SHpr/rA 6QIL47ezRyhlfXkLJi1J/FI3qmKGLqiVArcPAmhU7nk2s9/Sgginj5AyE0Gof+Jw 9fsdMevGl6zir3aZnNYNbCHqyc9EaohSh3xVKmI2oTRKBhkz77DyRtkuB23gy9rs jo7xzuN108v08xLa+wzvGgzjP/vcrLFQh1G8O5PDxmrspgQx7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRawbGL9q9JCRyCQLgvG64pMR4FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjU0YjY2ZmUtMzJlZC0z MmQ2LThlY2UtNTllMzlmZjVlMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2J0Zhm8b5Q9gNGs9mMGGNZMkIP1/YzxnwsnFO2EhHviFFbH4RYrIEP q5L/K9alOBIR+T+rL7/4Y5JY1o30m1UWMnYhh36FIZLX+dEN3c8LNvsdLW/vQ4vw 1peJUFJPOtLzPABEpPXbLK74oNZzCTKCYOdQFaS4i7Cc5+mXnmrHBTNaEW7vFrra y3dds4OXS/IXnMH4riDPcDj8u5qSLnsmugmR7zrBQwcfHyoXk+XvXh0+kwszlykV f+qlGFym/I0xWBramqVj7Vhv/9lE6H+zRw4qhvMFXjdo+p0tbvGtVu2veyn32rx9 9jSpr1CEDa96LLKCsbG8ud77nGmQrSw= -----END CERTIFICATE-----Generated at Mon Apr 28 00:29:54 2025 by rpki-client