$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/485ec3cc-860d-3b81-89dc-d8272b9a496c.roa File: 485ec3cc-860d-3b81-89dc-d8272b9a496c.roa (raw, json) Hash identifier: W1U1EiRBHZY08Z+sLZUjGHd1qpLjrOl2a4NlRtwrz+Y= Subject key identifier: 30:36:F8:30:7A:CF:0D:9A:7C:B0:8C:A8:90:85:96:DF:3C:59:09:09 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498769CF0AADC43A0B31675A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/485ec3cc-860d-3b81-89dc-d8272b9a496c.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.201.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:cf:0a:ad:c4:3a:0b:31:67:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=6458f820-38f5-4086-9ec7-bee6e6bb61d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:87:9b:ce:cc:c5:ab:1a:7e:33:ba:b1:60:af: 37:12:12:15:a6:21:c3:42:c3:24:80:88:8b:a6:af: bf:2c:94:92:e1:99:0c:eb:55:85:08:5d:8f:d3:df: 65:41:ff:f6:d4:0e:a4:a2:9a:00:85:1d:29:10:45: 5d:e3:a3:5a:26:60:d5:90:89:98:da:6f:62:2c:f0: bb:25:4f:21:97:6d:0e:dd:74:71:ba:67:e4:49:98: 92:24:0e:a8:66:99:51:09:ab:4f:3b:e5:8c:dd:83: a3:b2:61:b5:9b:52:98:d5:96:04:36:a2:f3:7a:04: b7:1c:c6:b3:52:be:b7:d4:2a:4d:b9:c6:8f:d2:8a: 86:cb:39:82:ee:69:8b:af:3e:08:57:38:f0:3f:e6: 34:6d:ab:97:8b:c2:c3:42:45:89:67:49:18:ff:90: b3:e8:62:8b:f6:b6:da:d6:4d:ed:c0:02:78:07:db: bd:8e:0e:af:4d:b7:48:d3:b6:54:fa:5b:c9:bb:94: 22:ae:fe:38:d3:9a:af:47:62:25:b8:e5:fc:cb:a9: 56:9e:94:32:9c:6c:64:cc:6b:42:19:dc:fe:52:a1: 54:f2:d5:8e:1e:31:a6:f6:a9:57:a5:55:14:21:0a: bb:6a:82:2c:ab:6b:6f:07:a8:79:af:ad:d5:49:5a: fd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:36:F8:30:7A:CF:0D:9A:7C:B0:8C:A8:90:85:96:DF:3C:59:09:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/485ec3cc-860d-3b81-89dc-d8272b9a496c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:4c:fe:39:63:b8:eb:78:41:0f:e1:ca:4f:d7:71:a4:be:6e: 7b:58:a8:81:59:ad:ec:c9:75:cf:28:41:29:be:12:61:8b:8e: cb:9f:c0:c8:fa:4b:ec:88:73:4a:6b:1c:3a:9b:18:10:e2:fb: 5b:de:1d:f1:8b:bf:ee:5b:65:09:39:67:08:7c:57:12:8d:ba: d9:ba:22:a6:9e:33:9b:5f:7f:db:f1:54:0c:a9:86:62:76:6e: 71:3d:30:e3:2c:b7:ac:77:85:4a:be:df:d0:4d:32:97:b7:a4: 34:54:a9:79:37:77:50:f0:76:08:af:bd:15:5e:32:49:da:16: 48:82:8a:5a:3d:e4:0e:64:e6:1d:aa:30:63:05:5f:c4:3f:55: 30:79:8f:7d:46:5c:03:e8:c2:ea:56:ac:38:0d:65:96:cb:03: 93:a7:fb:a5:77:74:a3:65:17:57:da:9c:8e:55:97:30:20:2d: fb:42:4e:f6:16:bf:44:dd:13:4a:52:c1:68:61:ff:29:b1:a5: af:d7:04:37:5d:55:b1:41:44:0c:f9:74:12:04:c0:09:94:76: cb:af:13:7a:a5:f2:68:c6:91:a8:b0:a5:f6:63:d9:da:e2:64: bd:98:84:77:a1:28:99:3e:e2:34:a9:96:0a:82:c1:fd:15:08: b1:22:0b:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHac8KrcQ6CzFnWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk NjQ1OGY4MjAtMzhmNS00MDg2LTllYzctYmVlNmU2YmI2MWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoebzszFqxp+M7qxYK83EhIVpiHDQsMkgIiL pq+/LJSS4ZkM61WFCF2P099lQf/21A6kopoAhR0pEEVd46NaJmDVkImY2m9iLPC7 JU8hl20O3XRxumfkSZiSJA6oZplRCatPO+WM3YOjsmG1m1KY1ZYENqLzegS3HMaz Ur631CpNucaP0oqGyzmC7mmLrz4IVzjwP+Y0bauXi8LDQkWJZ0kY/5Cz6GKL9rba 1k3twAJ4B9u9jg6vTbdI07ZU+lvJu5Qirv4405qvR2IluOX8y6lWnpQynGxkzGtC Gdz+UqFU8tWOHjGm9qlXpVUUIQq7aoIsq2tvB6h5r63VSVr93wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDA2+DB6zw2afLCMqJCFlt88WQkJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDg1ZWMzY2MtODYwZC0z YjgxLTg5ZGMtZDgyNzJiOWE0OTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF8kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZM/jljuOt4QQ/hyk/XcaS+bntYqIFZrezJdc8oQSm+EmGLjsufwMj6 S+yIc0prHDqbGBDi+1veHfGLv+5bZQk5Zwh8VxKNutm6IqaeM5tff9vxVAyphmJ2 bnE9MOMst6x3hUq+39BNMpe3pDRUqXk3d1DwdgivvRVeMknaFkiCilo95A5k5h2q MGMFX8Q/VTB5j31GXAPowupWrDgNZZbLA5On+6V3dKNlF1fanI5VlzAgLftCTvYW v0TdE0pSwWhh/ymxpa/XBDddVbFBRAz5dBIEwAmUdsuvE3ql8mjGkaiwpfZj2dri ZL2YhHehKJk+4jSplgqCwf0VCLEiC8Y= -----END CERTIFICATE-----Generated at Sun Apr 27 01:01:02 2025 by rpki-client