$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ec5d026-f49b-3b9d-b3c6-2fc1cb308ea8.roa File: 3ec5d026-f49b-3b9d-b3c6-2fc1cb308ea8.roa (raw, json) Hash identifier: VfEy/xz3Yh28TZvyFQbXNASnloBVFRTzFNW3gOf1wls= Subject key identifier: DE:99:3C:11:13:62:91:19:A5:5C:D3:F6:0A:6A:02:51:DA:29:31:1E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829D8D2631F26BF33065D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ec5d026-f49b-3b9d-b3c6-2fc1cb308ea8.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.204.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d8:d2:63:1f:26:bf:33:06:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=d6fed888-fe27-4a13-9c28-430c6241ba57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:70:3a:d2:c4:72:35:0d:e5:4c:06:56:a3:7f: 18:09:b0:9c:9c:2e:43:1d:dc:27:29:94:d5:29:9f: 33:ff:47:be:86:19:f7:4b:60:a9:85:a8:a3:48:24: 28:e3:b5:61:fc:ef:4d:88:64:8a:77:44:50:0d:67: 7e:5d:6f:45:34:47:49:f4:be:89:8c:a6:3e:71:db: c1:46:68:8c:65:ff:c6:df:8a:f2:de:dd:d9:b9:c2: 36:4a:16:5f:82:6b:6a:07:f0:6b:69:a2:f5:4e:5a: 79:27:74:79:64:8a:9d:df:57:6e:75:2a:25:3d:59: 83:ec:fd:f1:35:df:da:1c:15:a3:96:80:b7:47:6e: 58:a7:f9:d6:65:82:75:d6:4c:22:d9:55:aa:48:8c: 63:63:0b:00:d3:82:74:ef:71:4b:a2:91:21:e3:ce: bc:19:3c:34:68:6b:7f:3e:09:d8:67:6f:b1:b7:7b: fc:9a:cd:ff:fb:c7:5f:d4:31:b3:c2:54:8e:a8:f4: cd:61:f6:6b:13:c9:40:9a:61:54:4b:ec:16:53:06: 9d:96:bc:e1:27:3c:ce:62:05:65:ba:94:f9:e0:e8: 8b:2a:b1:54:af:27:07:6c:71:6b:60:83:8f:fa:e8: 18:f9:36:6c:09:f6:2b:12:3b:c0:1c:83:e9:5a:be: 73:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:99:3C:11:13:62:91:19:A5:5C:D3:F6:0A:6A:02:51:DA:29:31:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ec5d026-f49b-3b9d-b3c6-2fc1cb308ea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:32:43:70:92:91:99:15:12:fd:ab:fc:eb:57:ec:b7:f2:43: 23:d3:63:50:d0:36:37:a4:25:45:a8:25:28:ce:22:7a:c4:b9: c2:95:b0:9c:a5:4c:e3:a3:3f:4b:52:af:bf:10:7a:68:08:20: 1f:78:ed:64:50:3f:82:38:c0:39:51:96:19:aa:2c:67:8a:b6: 11:f6:8d:bf:fd:5b:54:19:03:d9:09:23:f7:4d:e2:f7:e0:fa: ec:5f:80:ed:1a:6b:20:a0:57:ed:a0:54:f4:f0:75:ac:df:d7: 34:d6:54:4d:52:04:4a:4e:6b:0e:d7:e8:bc:4d:d6:d7:60:a1: e8:d3:e6:b6:bf:36:3e:59:06:20:1d:38:52:be:f1:32:87:53: 1b:de:ea:02:5a:8e:52:6a:89:c9:e1:ea:6b:14:a3:de:d4:ab: 06:17:1d:e2:19:de:c2:7c:a2:25:28:60:05:48:4a:36:01:e7: a4:71:99:13:ea:66:cb:f3:6e:25:07:b1:6f:72:4e:41:dc:59: 32:ba:1d:46:84:0a:6c:8d:94:a1:5c:31:f7:5a:28:7b:20:ea: ee:8f:7d:8c:fe:f7:52:f3:57:df:18:03:8a:c6:54:76:52:17: 57:47:1d:e9:5c:68:64:4d:67:59:a0:b9:7a:1e:be:ef:00:d2: a2:ac:20:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdjSYx8mvzMGXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk ZDZmZWQ4ODgtZmUyNy00YTEzLTljMjgtNDMwYzYyNDFiYTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXA60sRyNQ3lTAZWo38YCbCcnC5DHdwnKZTV KZ8z/0e+hhn3S2CphaijSCQo47Vh/O9NiGSKd0RQDWd+XW9FNEdJ9L6JjKY+cdvB RmiMZf/G34ry3t3ZucI2ShZfgmtqB/BraaL1Tlp5J3R5ZIqd31dudSolPVmD7P3x Nd/aHBWjloC3R25Yp/nWZYJ11kwi2VWqSIxjYwsA04J073FLopEh4868GTw0aGt/ PgnYZ2+xt3v8ms3/+8df1DGzwlSOqPTNYfZrE8lAmmFUS+wWUwadlrzhJzzOYgVl upT54OiLKrFUrycHbHFrYIOP+ugY+TZsCfYrEjvAHIPpWr5zYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6ZPBETYpEZpVzT9gpqAlHaKTEeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2VjNWQwMjYtZjQ5Yi0z YjlkLWIzYzYtMmZjMWNiMzA4ZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF8zAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcyQ3CSkZkVEv2r/OtX7LfyQyPTY1DQNjekJUWoJSjOInrEucKVsJyl TOOjP0tSr78QemgIIB947WRQP4I4wDlRlhmqLGeKthH2jb/9W1QZA9kJI/dN4vfg +uxfgO0aayCgV+2gVPTwdazf1zTWVE1SBEpOaw7X6LxN1tdgoejT5ra/Nj5ZBiAd OFK+8TKHUxve6gJajlJqicnh6msUo97UqwYXHeIZ3sJ8oiUoYAVISjYB56RxmRPq ZsvzbiUHsW9yTkHcWTK6HUaECmyNlKFcMfdaKHsg6u6PfYz+91LzV98YA4rGVHZS F1dHHelcaGRNZ1mguXoevu8A0qKsILA= -----END CERTIFICATE-----Generated at Tue Apr 29 23:28:57 2025 by rpki-client