$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32c6fb7c-4c91-30c2-a73e-c3180d80ccfa.roa File: 32c6fb7c-4c91-30c2-a73e-c3180d80ccfa.roa (raw, json) Hash identifier: ZW6LjNBQbYnppE+HfXf83lAsdSMnY9a8/a+nVpp7qiI= Subject key identifier: 8F:75:25:2F:FE:B6:32:56:C8:3A:5C:A2:6B:1D:66:24:7C:EE:FE:0B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499F24BB937B1467ACFD0ADE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32c6fb7c-4c91-30c2-a73e-c3180d80ccfa.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.201.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:bb:93:7b:14:67:ac:fd:0a:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=db668fa6-d21a-43ee-a669-9fa419d557ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:09:5a:4e:94:72:7b:c1:b1:75:80:85:83:54: 8a:69:7d:48:fd:1d:56:26:77:c8:fc:ed:e3:db:6e: c7:5b:7d:ff:9b:a0:ec:0a:df:8d:ff:b9:40:f9:06: 03:33:78:5c:2b:b1:4f:fc:e6:07:ac:1c:c3:77:b1: 2c:56:82:98:14:e2:0c:40:17:e4:32:16:09:aa:51: 57:7b:9a:72:e3:c5:c8:03:72:c5:aa:c9:3a:50:9c: 0c:3a:a5:17:be:92:a7:a8:c8:ee:7e:5b:1f:0c:0b: 1e:83:4b:30:22:25:25:f5:a9:17:54:fc:65:ef:5e: f8:28:2d:f5:7f:eb:39:51:5e:a8:e8:0a:90:ea:5d: ad:9f:5b:37:3d:49:8b:50:7f:97:ba:32:a4:69:8b: ec:58:2e:2d:c7:48:09:11:8f:a3:d1:a8:55:0c:c0: e3:93:96:4f:26:52:08:ad:a2:71:a1:7c:db:90:e4: df:68:9f:77:b3:d4:39:a7:5f:ff:0f:04:ab:b4:05: 9a:28:e3:71:e1:9b:5d:74:79:be:a6:75:e9:b7:72: 70:ab:30:20:15:ed:64:39:f5:1a:c6:be:8e:36:a4: 22:43:3c:21:92:8d:d9:14:70:2d:6e:db:a3:da:f4: 5d:91:68:05:e5:c5:81:2a:07:93:62:15:2b:bf:3a: 15:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:75:25:2F:FE:B6:32:56:C8:3A:5C:A2:6B:1D:66:24:7C:EE:FE:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32c6fb7c-4c91-30c2-a73e-c3180d80ccfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:62:9e:9e:f8:1f:88:b2:53:65:8f:2c:c5:f8:a6:24:90:6b: 6c:7b:87:51:96:c4:36:24:17:e6:c8:fc:08:c4:99:56:b6:06: c6:e8:f3:99:3e:2f:00:dd:30:88:04:86:fe:57:cf:51:4c:64: 5e:c8:20:8d:d8:1c:96:67:52:6a:8a:9a:4b:cc:03:47:e8:4f: 86:d7:3f:58:98:66:3c:18:e5:30:83:92:00:27:82:0a:cb:f4: 09:d3:15:74:b2:1a:54:4c:a3:88:91:71:54:86:d1:e6:be:9a: 8e:a9:d4:21:f0:a4:a0:55:31:61:6c:20:56:87:8a:9b:4c:ff: 84:9d:dc:6e:92:53:57:8b:8e:21:6f:41:59:78:0d:d5:16:1f: 74:da:0d:17:dd:80:a4:de:cd:32:c0:cd:ec:0e:97:cf:29:97: 54:bc:aa:7f:d6:2c:5e:59:dd:1b:3d:fd:fc:19:ea:29:04:46: 1d:d9:2b:20:09:a0:3c:7d:70:99:36:18:0a:77:31:b9:f8:48: 71:dc:a6:4a:bb:6f:fb:a0:f0:f2:81:23:41:57:81:8c:7b:08: 39:a3:e8:66:05:bf:c3:75:69:ed:17:bb:52:8f:8f:0f:a8:3f: 4b:07:38:95:ec:87:f3:93:e2:5d:26:87:50:0b:10:9b:5d:81: ec:f3:f3:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLuTexRnrP0K3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZGI2NjhmYTYtZDIxYS00M2VlLWE2NjktOWZhNDE5ZDU1N2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQlaTpRye8GxdYCFg1SKaX1I/R1WJnfI/O3j 227HW33/m6DsCt+N/7lA+QYDM3hcK7FP/OYHrBzDd7EsVoKYFOIMQBfkMhYJqlFX e5py48XIA3LFqsk6UJwMOqUXvpKnqMjuflsfDAseg0swIiUl9akXVPxl7174KC31 f+s5UV6o6AqQ6l2tn1s3PUmLUH+XujKkaYvsWC4tx0gJEY+j0ahVDMDjk5ZPJlII raJxoXzbkOTfaJ93s9Q5p1//DwSrtAWaKONx4ZtddHm+pnXpt3JwqzAgFe1kOfUa xr6ONqQiQzwhko3ZFHAtbtuj2vRdkWgF5cWBKgeTYhUrvzoVnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI91JS/+tjJWyDpcomsdZiR87v4LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzJjNmZiN2MtNGM5MS0z MGMyLWE3M2UtYzMxODBkODBjY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8lgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpinp74H4iyU2WPLMX4piSQa2x7h1GWxDYkF+bI/AjEmVa2Bsbo85k+ LwDdMIgEhv5Xz1FMZF7III3YHJZnUmqKmkvMA0foT4bXP1iYZjwY5TCDkgAnggrL 9AnTFXSyGlRMo4iRcVSG0ea+mo6p1CHwpKBVMWFsIFaHiptM/4Sd3G6SU1eLjiFv QVl4DdUWH3TaDRfdgKTezTLAzewOl88pl1S8qn/WLF5Z3Rs9/fwZ6ikERh3ZKyAJ oDx9cJk2GAp3Mbn4SHHcpkq7b/ug8PKBI0FXgYx7CDmj6GYFv8N1ae0Xu1KPjw+o P0sHOJXsh/OT4l0mh1ALEJtdgezz8+g= -----END CERTIFICATE-----Generated at Sat Apr 26 19:05:48 2025 by rpki-client