$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3aaaa0b2-15ef-3600-bcb6-4019d62b0553.roa File: 3aaaa0b2-15ef-3600-bcb6-4019d62b0553.roa (raw, json) Hash identifier: N5FhNgP3d0mPs2MdgAP5fxGHjViDU2auFX17dGB1sng= Subject key identifier: 50:ED:56:EC:2F:86:70:58:FD:DE:49:F4:E4:D0:CC:C6:E6:24:90:21 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849860474537BD02BE5BAF62F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3aaaa0b2-15ef-3600-bcb6-4019d62b0553.roa Signing time: Mon 14 Apr 2025 13:00:59 +0000 ROA not before: Mon 14 Apr 2025 13:00:59 +0000 ROA not after: Sun 13 Jul 2025 13:00:59 +0000 asID: 16625 IP address blocks: 23.199.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:04:74:53:7b:d0:2b:e5:ba:f6:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 14 13:00:59 2025 GMT Not After : Jul 13 13:00:59 2025 GMT Subject: CN=b84e3432-6a0e-49e4-a420-643fc4b84417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:02:7b:ec:ff:90:7a:ad:85:a5:f1:6d:e4:10: 4c:b5:d1:2c:8e:59:af:6a:ac:c0:01:58:7e:3e:24: b4:9d:3a:b8:f8:ad:ff:4d:7d:6b:13:e6:e5:07:77: 50:b5:50:42:48:00:71:e5:a6:37:72:e0:9f:f2:d7: e3:bd:27:92:2a:93:8a:4f:74:32:34:f5:2d:79:3e: 63:32:af:86:dd:35:ad:81:27:ad:c7:64:05:09:61: 3c:ca:c1:e9:85:f2:6d:94:42:02:f1:9d:3f:e8:94: cd:6b:d4:f1:b5:6d:6e:9d:8b:70:40:c9:1e:6f:48: 59:75:10:5e:5e:e9:3b:b6:59:41:3c:95:c0:3e:94: e4:c9:71:ab:54:6a:3a:fe:bd:6c:db:7e:bc:ac:45: 63:88:71:47:ca:15:91:63:19:f2:b7:ad:9e:39:52: c1:5a:0a:8a:48:68:ec:d1:62:8e:17:17:49:e7:b7: 9d:ce:4b:f9:1f:69:b0:16:d4:6b:d8:8f:6f:72:8c: be:2d:1d:c2:5c:c7:f2:a5:28:a2:d9:23:e3:e9:42: a3:69:f9:11:cb:ab:e4:86:b8:ba:dd:64:78:97:64: 84:26:06:32:7f:49:aa:49:e0:9b:54:87:a0:61:63: c5:64:25:a5:fd:25:3f:e5:68:57:15:2e:e5:f9:d1: e5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:ED:56:EC:2F:86:70:58:FD:DE:49:F4:E4:D0:CC:C6:E6:24:90:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3aaaa0b2-15ef-3600-bcb6-4019d62b0553.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:dd:d8:4c:52:7e:70:50:17:ee:be:da:b2:62:ca:95:4e:27: 93:97:e4:0e:90:6e:d1:f5:3b:fa:83:c5:00:76:2e:59:fa:c0: 34:8c:d7:02:7c:6f:ce:52:57:df:56:48:27:94:18:2a:ff:eb: d8:39:18:5d:5c:34:ab:89:c8:3f:5a:f7:42:e1:48:fa:ac:3a: 71:71:1a:13:f3:53:3f:e6:76:d2:cb:fa:52:35:f8:0c:98:73: e7:1e:17:19:b3:e7:ae:c9:dc:cc:ce:81:85:41:5d:4a:fc:d5: 79:88:de:58:ff:95:35:fd:9b:d2:5b:84:30:fe:4d:49:20:4e: 67:41:ff:63:e1:9e:5b:3f:ae:4c:80:98:67:7f:5f:2b:ec:77: 91:de:84:43:d3:0a:f2:36:95:80:89:d5:68:89:2f:0c:db:ad: 6c:3c:4e:46:9d:27:a5:05:49:16:3f:af:95:e4:85:3e:c4:1e: dc:f8:6f:4d:53:fd:cf:1c:04:1f:91:d4:a1:bc:05:39:ae:1c: 1f:6f:2e:65:e0:f4:62:7c:91:fc:5c:e3:eb:fe:c4:84:17:f4: 49:e5:bb:cc:94:8b:d3:90:df:4a:ee:18:fa:ca:36:8d:3e:f4: 23:3a:f7:86:fb:b1:b0:2a:bb:bd:a4:70:28:23:37:20:10:ae: e2:21:d6:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGBHRTe9Ar5br2LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNDEzMDA1OVoXDTI1MDcxMzEzMDA1OVowLzEtMCsGA1UEAxMk Yjg0ZTM0MzItNmEwZS00OWU0LWE0MjAtNjQzZmM0Yjg0NDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgJ77P+Qeq2FpfFt5BBMtdEsjlmvaqzAAVh+ PiS0nTq4+K3/TX1rE+blB3dQtVBCSABx5aY3cuCf8tfjvSeSKpOKT3QyNPUteT5j Mq+G3TWtgSetx2QFCWE8ysHphfJtlEIC8Z0/6JTNa9TxtW1unYtwQMkeb0hZdRBe Xuk7tllBPJXAPpTkyXGrVGo6/r1s2368rEVjiHFHyhWRYxnyt62eOVLBWgqKSGjs 0WKOFxdJ57edzkv5H2mwFtRr2I9vcoy+LR3CXMfypSii2SPj6UKjafkRy6vkhri6 3WR4l2SEJgYyf0mqSeCbVIegYWPFZCWl/SU/5WhXFS7l+dHlIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDtVuwvhnBY/d5J9OTQzMbmJJAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2FhYWEwYjItMTVlZi0z NjAwLWJjYjYtNDAxOWQ2MmIwNTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8fAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfd2ExSfnBQF+6+2rJiypVOJ5OX5A6QbtH1O/qDxQB2Lln6wDSM1wJ8 b85SV99WSCeUGCr/69g5GF1cNKuJyD9a90LhSPqsOnFxGhPzUz/mdtLL+lI1+AyY c+ceFxmz567J3MzOgYVBXUr81XmI3lj/lTX9m9JbhDD+TUkgTmdB/2Phnls/rkyA mGd/Xyvsd5HehEPTCvI2lYCJ1WiJLwzbrWw8TkadJ6UFSRY/r5XkhT7EHtz4b01T /c8cBB+R1KG8BTmuHB9vLmXg9GJ8kfxc4+v+xIQX9Enlu8yUi9OQ30ruGPrKNo0+ 9CM694b7sbAqu72kcCgjNyAQruIh1lo= -----END CERTIFICATE-----Generated at Sun Apr 27 01:10:35 2025 by rpki-client