$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c492ab2-3efc-3a46-a817-3304a16c622a.roa File: 2c492ab2-3efc-3a46-a817-3304a16c622a.roa (raw, json) Hash identifier: 0NBhD745uGazxQ324V2afmoDRfSPSO3sJSfzmjtc6VE= Subject key identifier: 8B:B5:21:64:E9:14:ED:5D:45:25:21:4E:C1:11:0E:0F:C6:B5:43:64 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498769CF2C479A9EE2FC6085C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c492ab2-3efc-3a46-a817-3304a16c622a.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.201.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:cf:2c:47:9a:9e:e2:fc:60:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=878b07c1-6590-4073-b6fc-e5de6ecd51d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8c:7c:30:7d:10:5b:d9:bf:e6:f4:06:4c:52: 8a:8a:f2:18:91:c2:91:61:ff:4c:e1:73:63:a7:9e: d6:aa:ad:76:85:c8:7d:c5:08:4d:57:65:01:c9:11: b5:60:bf:8d:a3:54:33:fb:f4:6a:eb:b1:82:2f:96: a3:b2:7a:db:c4:82:cc:20:72:f8:03:ae:9c:7d:32: 82:d6:81:6e:92:a3:29:d4:2b:17:4d:96:f0:1e:cf: 01:74:d0:e9:d8:b1:18:38:a9:0a:56:71:84:8c:b3: 80:72:d6:d6:23:21:ac:08:63:e8:eb:98:36:b1:37: 04:03:fe:27:ad:0e:a4:d7:3a:9c:99:e3:a1:86:92: fe:f0:04:8d:e7:31:07:11:e8:7a:e3:8f:ea:7e:61: a7:a4:67:f5:02:df:d1:6a:71:51:04:56:85:e9:db: 42:30:c7:63:5c:9a:88:47:0f:bc:a8:20:fc:70:9c: 43:c6:9a:e4:54:d2:b4:61:96:9a:aa:0c:b5:f6:38: 69:e3:e7:0d:c9:61:b2:b9:2b:35:3b:8a:a4:b8:76: 83:01:5a:5b:4a:a9:3e:cd:5d:a5:59:18:60:04:93: ed:c9:85:b5:58:8f:a5:22:ea:4e:b8:05:31:e8:69: 98:2f:4e:2a:88:c2:65:ec:ae:f1:71:d0:49:10:40: f4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B5:21:64:E9:14:ED:5D:45:25:21:4E:C1:11:0E:0F:C6:B5:43:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c492ab2-3efc-3a46-a817-3304a16c622a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:f3:6a:65:24:ed:c3:f5:19:58:1c:67:09:5e:e4:4b:7b:7c: d4:fd:1a:5f:3b:60:3f:f4:1a:3a:e9:c1:6e:7b:50:e2:95:52: 96:98:5f:45:08:e1:ce:9d:12:08:e8:fb:ef:68:51:ce:d2:35: 12:03:69:15:8b:a8:61:c6:dc:1a:60:f6:f9:9f:03:84:95:3e: a3:90:5c:81:c2:f9:85:4b:ce:3b:39:17:71:d7:44:41:68:4a: 4f:a2:aa:ad:94:18:75:45:5f:78:b2:df:1e:e0:ea:93:42:d0: e0:75:5c:e4:48:31:6e:fc:b2:55:90:ea:3c:38:0d:ab:f9:b8: 9e:e4:48:0f:21:6f:57:98:19:25:bd:18:1e:e3:ca:7f:c9:f8: 5f:73:72:ff:1d:7e:c5:fd:4f:17:66:ab:4e:57:47:22:38:cb: fc:8a:d5:68:9a:99:a6:84:52:aa:a5:c1:2c:4c:27:f0:7d:8d: 3a:e8:5b:9b:cd:65:22:4b:4d:39:8d:35:2f:c2:2f:a7:cc:5a: f3:4a:69:33:17:6d:12:d8:ca:29:6e:be:6d:e1:eb:f3:51:a1: 4f:35:e9:c2:46:05:7b:15:2c:de:ed:c8:a7:3b:31:16:3e:b4: cd:c3:a4:15:5e:30:e7:60:0a:3b:db:9c:34:41:8c:c8:d6:cc: 8e:03:a5:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHac8sR5qe4vxghcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ODc4YjA3YzEtNjU5MC00MDczLWI2ZmMtZTVkZTZlY2Q1MWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmox8MH0QW9m/5vQGTFKKivIYkcKRYf9M4XNj p57Wqq12hch9xQhNV2UByRG1YL+No1Qz+/Rq67GCL5ajsnrbxILMIHL4A66cfTKC 1oFukqMp1CsXTZbwHs8BdNDp2LEYOKkKVnGEjLOActbWIyGsCGPo65g2sTcEA/4n rQ6k1zqcmeOhhpL+8ASN5zEHEeh644/qfmGnpGf1At/RanFRBFaF6dtCMMdjXJqI Rw+8qCD8cJxDxprkVNK0YZaaqgy19jhp4+cNyWGyuSs1O4qkuHaDAVpbSqk+zV2l WRhgBJPtyYW1WI+lIupOuAUx6GmYL04qiMJl7K7xcdBJEED0iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIu1IWTpFO1dRSUhTsERDg/GtUNkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmM0OTJhYjItM2VmYy0z YTQ2LWE4MTctMzMwNGExNmM2MjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8kWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/zamUk7cP1GVgcZwle5Et7fNT9Gl87YD/0GjrpwW57UOKVUpaYX0UI 4c6dEgjo++9oUc7SNRIDaRWLqGHG3Bpg9vmfA4SVPqOQXIHC+YVLzjs5F3HXREFo Sk+iqq2UGHVFX3iy3x7g6pNC0OB1XORIMW78slWQ6jw4Dav5uJ7kSA8hb1eYGSW9 GB7jyn/J+F9zcv8dfsX9Txdmq05XRyI4y/yK1WiamaaEUqqlwSxMJ/B9jTroW5vN ZSJLTTmNNS/CL6fMWvNKaTMXbRLYyiluvm3h6/NRoU816cJGBXsVLN7tyKc7MRY+ tM3DpBVeMOdgCjvbnDRBjMjWzI4DpR8= -----END CERTIFICATE-----Generated at Sun Apr 27 18:39:08 2025 by rpki-client