$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f03c03f-e3b1-3302-8499-6d9ac77b920f.roa File: 2f03c03f-e3b1-3302-8499-6d9ac77b920f.roa (raw, json) Hash identifier: POhii/T3i8o+SEPNLPXFRnVienlH0e1V8Jzekbvlk8U= Subject key identifier: 67:9E:63:6E:C7:B6:51:6E:E5:F8:DE:24:E3:BD:5E:7D:74:17:8F:47 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E3D3B153B7849A4D9980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f03c03f-e3b1-3302-8499-6d9ac77b920f.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.205.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e3:d3:b1:53:b7:84:9a:4d:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=0f7ddc93-2f41-405a-a356-54aceec892df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1f:8d:c6:e1:a7:31:ab:59:b3:b2:05:97:1d: 03:d7:27:74:e4:24:42:b9:92:11:9c:be:e7:fa:8d: ef:f7:e4:11:81:e4:62:1d:f9:e4:e0:ce:7a:11:a0: 80:6c:5b:01:8d:7c:17:19:df:d4:ac:59:c8:0d:a0: 6a:86:7f:21:e1:fc:1a:cc:cb:a7:5f:c5:40:ad:e0: 86:bc:29:c7:9b:f0:22:f1:be:8e:24:50:b4:88:41: 9c:5c:61:76:c1:f1:c3:ef:45:44:b7:fc:66:db:be: 34:98:40:ae:2c:6a:c4:87:74:2a:8a:80:ca:cb:be: 6b:cc:a3:87:51:c5:38:00:52:1f:c5:63:b3:ef:6f: 3e:89:24:11:7e:4d:21:57:98:77:47:62:1d:cf:ac: a7:ae:56:9f:e7:28:0e:79:98:a5:cf:2c:67:55:1b: a4:3c:45:12:1b:48:95:65:ba:15:1c:0c:8d:bd:99: ec:96:43:b0:c2:61:52:53:6b:99:14:18:4e:74:02: 5f:27:07:4e:53:b4:27:74:9e:b9:f4:f5:1a:a5:d2: 4d:f2:22:96:80:f6:b1:0e:b0:0d:13:88:5a:b6:d4: 13:fb:49:55:94:f2:eb:78:f1:25:73:d1:46:fa:e1: 1a:4f:2b:26:b7:12:98:1d:8c:e7:63:35:72:f5:4f: 6b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9E:63:6E:C7:B6:51:6E:E5:F8:DE:24:E3:BD:5E:7D:74:17:8F:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f03c03f-e3b1-3302-8499-6d9ac77b920f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:3c:27:4c:2c:d6:38:c9:b6:80:67:c3:1a:6f:63:fb:a2:09: 9f:09:fc:a9:dd:b4:97:cb:28:5e:0f:b8:a4:fe:a3:1b:d0:52: f6:6e:5d:8a:bd:39:db:87:98:fe:3f:c8:da:f2:53:e4:9b:64: 8f:7f:2d:fc:77:a5:e9:19:ea:60:49:1e:66:a6:aa:7c:88:68: 2a:c3:1b:bb:b8:23:50:dc:1f:79:3b:c0:b9:cf:60:f7:a3:1e: 80:7b:59:ef:8b:fa:b8:12:53:20:99:c2:32:b0:cf:fe:6d:96: d6:71:82:2d:ed:2c:a2:eb:80:07:06:20:c9:d8:fe:fc:1d:ef: 2e:16:28:d1:43:ab:e6:7e:54:c5:81:5f:94:1f:fe:17:18:6a: c6:1b:57:57:69:5a:eb:5a:16:31:b4:25:33:35:e5:14:bf:15: 1a:72:a6:5e:71:89:aa:2c:b2:8d:85:5c:bd:1f:67:44:76:aa: 5c:f3:0b:3d:61:63:49:0e:a0:aa:3d:f0:0f:88:aa:ec:37:5b: b4:4f:4e:1e:ee:0b:97:04:6e:17:a8:e3:9a:1a:18:5a:89:e1: 91:87:b0:7a:a5:99:1b:1e:2e:3f:ee:cd:8f:3f:11:26:21:5c: 27:15:29:da:df:a0:88:a0:9d:57:b3:f9:e1:92:ea:9e:bc:c1: 92:63:14:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKePTsVO3hJpNmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MGY3ZGRjOTMtMmY0MS00MDVhLWEzNTYtNTRhY2VlYzg5MmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh+NxuGnMatZs7IFlx0D1yd05CRCuZIRnL7n +o3v9+QRgeRiHfnk4M56EaCAbFsBjXwXGd/UrFnIDaBqhn8h4fwazMunX8VAreCG vCnHm/Ai8b6OJFC0iEGcXGF2wfHD70VEt/xm2740mECuLGrEh3QqioDKy75rzKOH UcU4AFIfxWOz728+iSQRfk0hV5h3R2Idz6ynrlaf5ygOeZilzyxnVRukPEUSG0iV ZboVHAyNvZnslkOwwmFSU2uZFBhOdAJfJwdOU7QndJ659PUapdJN8iKWgPaxDrAN E4hattQT+0lVlPLrePElc9FG+uEaTysmtxKYHYznYzVy9U9rCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeeY27HtlFu5fjeJOO9Xn10F49HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmYwM2MwM2YtZTNiMS0z MzAyLTg0OTktNmQ5YWM3N2I5MjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF81qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHs8J0ws1jjJtoBnwxpvY/uiCZ8J/KndtJfLKF4PuKT+oxvQUvZuXYq9 OduHmP4/yNryU+SbZI9/Lfx3pekZ6mBJHmamqnyIaCrDG7u4I1DcH3k7wLnPYPej HoB7We+L+rgSUyCZwjKwz/5tltZxgi3tLKLrgAcGIMnY/vwd7y4WKNFDq+Z+VMWB X5Qf/hcYasYbV1dpWutaFjG0JTM15RS/FRpypl5xiaosso2FXL0fZ0R2qlzzCz1h Y0kOoKo98A+Iquw3W7RPTh7uC5cEbheo45oaGFqJ4ZGHsHqlmRseLj/uzY8/ESYh XCcVKdrfoIignVez+eGS6p68wZJjFCc= -----END CERTIFICATE-----Generated at Sat Apr 26 19:09:38 2025 by rpki-client