$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ac786d2-a7d5-34b5-b427-53a497c20e1a.roa File: 3ac786d2-a7d5-34b5-b427-53a497c20e1a.roa (raw, json) Hash identifier: /l+mTNXrzVIduH4apthTpvDYojm906Xc04acGeAx08k= Subject key identifier: BE:FA:86:2D:14:D3:9B:A2:10:63:D0:71:DB:0D:02:E1:51:2D:C5:67 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496FAF2667492E1116D0D1F040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ac786d2-a7d5-34b5-b427-53a497c20e1a.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 16625 IP address blocks: 23.200.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:26:67:49:2e:11:16:d0:d1:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=b9b11482-3d94-4dd3-9e55-a6c507efb185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f2:1a:e6:72:4a:ff:63:a0:d9:df:88:26:a0: b8:e6:da:5c:c8:7f:74:17:6e:d1:73:c1:c1:b8:73: ed:30:e6:fa:47:94:33:73:52:3d:f2:db:ea:3d:27: 0f:52:bb:8f:2e:4c:ad:8c:e6:4c:56:59:75:f6:90: 41:46:ff:d0:62:1b:4e:13:48:fa:53:57:f6:3c:87: eb:fc:48:bb:30:4d:eb:82:fa:eb:12:5f:3f:f7:56: 06:09:05:2a:a0:75:31:6a:d8:40:82:1d:64:c7:e9: ed:e9:fd:9f:1e:ea:ef:d7:b1:f5:cd:fd:8d:31:92: 63:69:83:2e:7d:db:02:37:c9:ff:df:40:cd:cd:5b: ed:2d:af:a7:60:ad:a3:92:4e:51:50:c8:b8:e6:fa: 8c:0a:d9:7d:d0:62:4d:9a:5e:f4:61:e3:a6:3f:3a: fe:dc:39:46:d9:e3:bc:3f:db:83:1c:ce:bd:cc:49: a6:2e:93:20:74:4a:9d:29:7e:ab:3a:a0:7a:95:cf: 0a:d8:a8:0f:8b:cc:cf:48:f0:bb:c1:87:09:55:7e: 29:7a:51:73:88:89:d4:cc:79:fe:b8:97:07:ca:33: b0:7f:46:a6:29:2a:41:3c:0d:cb:f9:a5:6f:dc:98: 10:e0:ad:3a:b8:26:75:3a:4a:04:49:f7:fe:15:92: cb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FA:86:2D:14:D3:9B:A2:10:63:D0:71:DB:0D:02:E1:51:2D:C5:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ac786d2-a7d5-34b5-b427-53a497c20e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:5c:d6:38:50:2f:7a:9a:9f:32:ef:01:95:1c:ba:6b:e0:6e: 75:78:9f:71:ba:18:30:54:f3:15:f6:28:6e:9b:11:1d:99:db: 63:b5:57:1e:c3:56:7b:64:38:4e:c6:68:67:76:f9:2d:42:3c: 77:52:fd:32:1e:9c:02:7b:2b:dd:44:71:85:26:13:a6:5f:44: f3:f8:b8:78:d5:5d:94:43:31:c4:a6:f9:fd:f7:e6:43:16:0e: b4:17:98:68:8f:a3:d5:bf:80:ae:30:e5:26:38:2a:97:e6:fc: c5:06:bd:d7:ab:67:68:63:54:5b:bd:73:9e:98:86:3c:4f:8c: 85:78:fe:bf:6b:a0:d4:74:2c:b5:e4:1c:8b:e3:b7:0f:18:1d: b9:25:4c:3c:c0:c4:76:fc:16:b9:b3:5e:e8:d1:3d:20:ac:5f: 44:0f:e4:a6:6b:74:39:7e:be:ea:70:13:31:66:b8:eb:07:0e: 48:d8:47:d5:09:ab:60:af:9a:57:43:75:e5:92:21:01:61:4c: 69:3b:67:3a:54:ed:6c:78:ea:c2:9b:46:67:ec:b3:a7:c1:64: dc:22:a3:3f:88:5d:c5:21:6c:ad:26:37:bd:ec:36:28:03:a2: e7:49:74:f4:a5:a2:8e:b0:67:26:31:39:ed:6a:fa:21:f8:72: de:5d:e4:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvryZnSS4RFtDR8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk YjliMTE0ODItM2Q5NC00ZGQzLTllNTUtYTZjNTA3ZWZiMTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPIa5nJK/2Og2d+IJqC45tpcyH90F27Rc8HB uHPtMOb6R5Qzc1I98tvqPScPUruPLkytjOZMVll19pBBRv/QYhtOE0j6U1f2PIfr /Ei7ME3rgvrrEl8/91YGCQUqoHUxathAgh1kx+nt6f2fHurv17H1zf2NMZJjaYMu fdsCN8n/30DNzVvtLa+nYK2jkk5RUMi45vqMCtl90GJNml70YeOmPzr+3DlG2eO8 P9uDHM69zEmmLpMgdEqdKX6rOqB6lc8K2KgPi8zPSPC7wYcJVX4pelFziInUzHn+ uJcHyjOwf0amKSpBPA3L+aVv3JgQ4K06uCZ1OkoESff+FZLL5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL76hi0U05uiEGPQcdsNAuFRLcVnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2FjNzg2ZDItYTdkNS0z NGI1LWI0MjctNTNhNDk3YzIwZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8iwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRc1jhQL3qanzLvAZUcumvgbnV4n3G6GDBU8xX2KG6bER2Z22O1Vx7D VntkOE7GaGd2+S1CPHdS/TIenAJ7K91EcYUmE6ZfRPP4uHjVXZRDMcSm+f335kMW DrQXmGiPo9W/gK4w5SY4Kpfm/MUGvderZ2hjVFu9c56YhjxPjIV4/r9roNR0LLXk HIvjtw8YHbklTDzAxHb8FrmzXujRPSCsX0QP5KZrdDl+vupwEzFmuOsHDkjYR9UJ q2CvmldDdeWSIQFhTGk7ZzpU7Wx46sKbRmfss6fBZNwioz+IXcUhbK0mN73sNigD oudJdPSloo6wZyYxOe1q+iH4ct5d5P8= -----END CERTIFICATE-----Generated at Sat Apr 26 23:40:11 2025 by rpki-client