$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38703155-af34-3945-b64e-51185af137dc.roa File: 38703155-af34-3945-b64e-51185af137dc.roa (raw, json) Hash identifier: xxEFtgcNES7Ylx7NX2gCYkSF6OQqJhWro6XB4PZ6XZk= Subject key identifier: 2B:9F:05:99:44:14:D7:6D:B7:2F:A2:E3:BB:81:1A:C7:9E:FE:6A:9D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E29603F1DB6D4A053140 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38703155-af34-3945-b64e-51185af137dc.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.204.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e2:96:03:f1:db:6d:4a:05:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=d2c3e968-dc35-4642-ae74-ce0acdf903e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:65:3b:2c:ea:5f:41:96:ea:1c:dd:20:9e:81: fd:a2:e0:3e:7e:6d:4f:42:f4:50:e6:31:99:2c:65: bb:11:86:1d:79:f5:6b:c2:97:d4:a3:b1:ea:97:41: fe:34:a5:a6:4f:28:48:fa:a0:d0:fd:08:04:3f:e1: cd:7a:98:71:d6:29:e4:1c:97:be:72:4a:27:43:ac: b9:0e:56:47:8d:6f:9d:01:54:52:27:54:9f:c7:89: 51:97:48:ca:b8:6d:89:9f:dd:0f:df:52:93:62:25: a0:af:84:32:cf:1c:73:ff:6f:5a:c2:ff:0e:98:1f: 2d:d3:f2:bf:00:07:df:9b:14:81:a3:79:13:f4:f1: 24:36:f8:dc:e3:ab:11:39:51:08:a9:52:de:9e:21: 04:e9:54:2c:9a:36:45:f7:aa:3f:c8:2e:e4:be:00: 09:28:b6:01:b4:25:93:4e:62:0f:ad:f9:55:e5:e1: 6e:0f:c5:c5:78:1b:2d:fb:c6:16:9a:29:59:08:4c: 03:23:bd:43:b3:e0:16:45:94:18:9a:63:b8:e6:3b: f8:54:81:1f:6e:7b:00:e4:7a:d1:3c:b0:7e:8b:51: 46:bc:b9:aa:04:00:e4:8c:15:25:f0:be:2d:24:fb: da:9a:c8:93:3a:8d:d8:2e:91:a7:67:7e:b8:ea:1f: 4b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9F:05:99:44:14:D7:6D:B7:2F:A2:E3:BB:81:1A:C7:9E:FE:6A:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38703155-af34-3945-b64e-51185af137dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:d6:96:e5:e6:c7:ce:dc:d5:b4:59:b1:1b:41:fa:97:4b:16: e8:c4:1e:59:0f:cd:b1:50:e7:33:69:32:8b:88:e5:be:26:64: e4:cf:cc:2c:a5:3f:e3:42:be:76:b4:e4:7f:39:cd:9b:89:b3: de:e3:f9:53:23:d9:52:0f:24:cf:f6:1a:77:46:1e:e7:60:9b: 52:16:b8:77:d3:4f:62:5d:c6:d1:4f:56:a6:97:71:70:a7:78: 82:c3:c2:60:ac:27:15:cd:63:c3:d2:01:4d:a3:94:27:18:32: 8b:1c:f0:2d:32:3b:d0:17:14:38:20:54:82:ca:31:12:53:4e: 99:5b:92:31:d9:ff:22:3a:5c:c5:12:2f:02:b1:ab:59:7c:68: ff:fd:ac:2d:23:b4:99:cc:c1:85:40:a3:e9:c6:14:05:09:58: de:27:21:eb:24:a4:a8:ef:61:97:ea:ad:41:9f:5d:23:7a:d5: eb:f7:93:a0:16:88:69:f8:e7:26:25:6b:2e:32:52:3a:3d:80: a4:42:cd:cc:7c:d9:8c:76:f8:cd:21:b5:03:ab:76:61:cf:d1: e3:f8:53:33:a3:99:8f:fc:8d:c6:eb:b3:94:77:d1:be:a5:e7: 48:08:0b:e3:70:7f:2e:a2:44:d0:83:5c:a6:7e:ee:62:98:aa: a0:b3:31:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKeKWA/HbbUoFMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk ZDJjM2U5NjgtZGMzNS00NjQyLWFlNzQtY2UwYWNkZjkwM2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2U7LOpfQZbqHN0gnoH9ouA+fm1PQvRQ5jGZ LGW7EYYdefVrwpfUo7Hql0H+NKWmTyhI+qDQ/QgEP+HNephx1inkHJe+ckonQ6y5 DlZHjW+dAVRSJ1Sfx4lRl0jKuG2Jn90P31KTYiWgr4Qyzxxz/29awv8OmB8t0/K/ AAffmxSBo3kT9PEkNvjc46sROVEIqVLeniEE6VQsmjZF96o/yC7kvgAJKLYBtCWT TmIPrflV5eFuD8XFeBst+8YWmilZCEwDI71Ds+AWRZQYmmO45jv4VIEfbnsA5HrR PLB+i1FGvLmqBADkjBUl8L4tJPvamsiTOo3YLpGnZ3646h9L1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCufBZlEFNdtty+i47uBGsee/mqdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzg3MDMxNTUtYWYzNC0z OTQ1LWI2NGUtNTExODVhZjEzN2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8yYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbWluXmx87c1bRZsRtB+pdLFujEHlkPzbFQ5zNpMouI5b4mZOTPzCyl P+NCvna05H85zZuJs97j+VMj2VIPJM/2GndGHudgm1IWuHfTT2JdxtFPVqaXcXCn eILDwmCsJxXNY8PSAU2jlCcYMosc8C0yO9AXFDggVILKMRJTTplbkjHZ/yI6XMUS LwKxq1l8aP/9rC0jtJnMwYVAo+nGFAUJWN4nIeskpKjvYZfqrUGfXSN61ev3k6AW iGn45yYlay4yUjo9gKRCzcx82Yx2+M0htQOrdmHP0eP4UzOjmY/8jcbrs5R30b6l 50gIC+Nwfy6iRNCDXKZ+7mKYqqCzMSQ= -----END CERTIFICATE-----Generated at Sat Apr 26 19:19:48 2025 by rpki-client