$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4866ed91-3e5b-3100-af3a-736f170dcf1c.roa File: 4866ed91-3e5b-3100-af3a-736f170dcf1c.roa (raw, json) Hash identifier: ZG8HxDfaquxPD3/GpW3M/elqvA06N3oWRkrMCFZ556E= Subject key identifier: 79:8F:40:08:21:EA:96:88:D4:42:3B:B3:5A:22:75:C4:E4:DD:CE:DB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498769D064029D655B932F1E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4866ed91-3e5b-3100-af3a-736f170dcf1c.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.201.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:d0:64:02:9d:65:5b:93:2f:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=b6b50274-5b9f-4b49-8948-e0eb93ac9e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3e:a9:60:60:ff:6e:75:4c:c4:dc:81:ee:71: 8d:ed:a9:02:e1:1f:1d:c8:af:16:e2:1a:4b:0d:37: 6e:06:07:55:7b:37:2d:4a:d5:67:41:c8:ec:ca:4e: 3a:c4:14:a2:79:8e:91:4d:4d:2c:05:4c:98:5d:45: bf:89:86:13:af:72:d7:79:3c:3c:86:7f:41:ed:cb: a2:29:17:69:de:16:93:f9:45:d7:7f:18:90:da:bb: dd:ca:fa:c4:0c:96:cd:f2:37:53:cf:91:17:e5:db: 98:11:b7:36:fb:22:61:0f:cc:71:38:fe:25:4a:c5: e3:d6:0e:e8:93:a5:8e:3e:b4:ac:49:b2:34:30:07: 87:53:48:5e:5b:a8:ba:db:b7:ad:ba:0a:9c:cd:30: c1:1c:f9:b8:ce:e5:3b:5a:ec:7a:3a:a4:96:d8:42: e1:87:91:8d:a1:af:99:b3:ca:81:38:5c:19:dd:4b: e1:77:69:d8:ee:a2:9a:17:4e:ee:83:36:aa:b6:18: 8c:ec:6a:5e:04:69:00:6e:1e:d8:1b:ca:c0:26:ad: 3a:ec:49:6a:59:6d:b8:c5:7c:98:9d:12:a6:9f:92: 07:31:29:4f:dc:97:4c:2a:4b:41:2c:a3:b8:8a:f5: 5a:d5:36:f3:7c:f6:08:88:1f:88:05:80:11:91:50: 62:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8F:40:08:21:EA:96:88:D4:42:3B:B3:5A:22:75:C4:E4:DD:CE:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4866ed91-3e5b-3100-af3a-736f170dcf1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:20:7a:51:e9:a7:74:9e:c6:74:1c:48:51:65:a4:6d:a1:51: 49:56:fb:5a:f3:aa:9b:de:92:2e:3f:86:5b:b6:04:b0:2c:a0: 6c:57:26:83:19:5b:f2:5e:b0:64:45:76:19:f0:64:83:3b:c9: 63:f9:1d:1e:15:18:32:94:74:15:08:22:40:05:ab:8f:e8:fa: a5:12:ba:98:5b:47:c8:be:85:73:4d:f1:5a:bd:a7:6c:cd:9e: c8:a5:27:ab:51:ef:02:ab:9d:95:39:aa:41:40:a6:6f:c1:4c: cb:bd:80:fa:99:5a:d2:0d:d8:e7:86:73:8c:56:0f:8e:21:61: 46:f1:85:ff:93:11:b3:57:79:38:52:41:3c:02:b9:19:a2:df: 9e:38:8a:82:ba:e9:b8:7f:19:16:f0:b9:31:88:3f:5e:47:54: 9a:b3:5c:62:e3:17:84:8d:4f:f8:f0:29:e1:9e:e6:dc:2b:d0: dc:9c:fb:ff:ee:df:8b:1a:56:3e:06:ec:7b:38:68:81:13:38: 9f:68:50:00:92:57:35:84:87:9e:20:68:d7:90:a3:0b:f0:8a: 5f:fc:ef:66:2c:d7:86:4d:77:e5:19:7f:32:56:c9:37:7a:23: 8f:44:4f:cd:40:5b:06:7d:2b:b0:e4:cb:f1:85:a1:dd:89:a3: ac:13:da:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHadBkAp1lW5MvHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk YjZiNTAyNzQtNWI5Zi00YjQ5LTg5NDgtZTBlYjkzYWM5ZTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z6pYGD/bnVMxNyB7nGN7akC4R8dyK8W4hpL DTduBgdVezctStVnQcjsyk46xBSieY6RTU0sBUyYXUW/iYYTr3LXeTw8hn9B7cui KRdp3haT+UXXfxiQ2rvdyvrEDJbN8jdTz5EX5duYEbc2+yJhD8xxOP4lSsXj1g7o k6WOPrSsSbI0MAeHU0heW6i627etugqczTDBHPm4zuU7Wux6OqSW2ELhh5GNoa+Z s8qBOFwZ3Uvhd2nY7qKaF07ugzaqthiM7GpeBGkAbh7YG8rAJq067ElqWW24xXyY nRKmn5IHMSlP3JdMKktBLKO4ivVa1TbzfPYIiB+IBYARkVBioQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmPQAgh6paI1EI7s1oidcTk3c7bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDg2NmVkOTEtM2U1Yi0z MTAwLWFmM2EtNzM2ZjE3MGRjZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8k8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsgelHpp3SexnQcSFFlpG2hUUlW+1rzqpveki4/hlu2BLAsoGxXJoMZ W/JesGRFdhnwZIM7yWP5HR4VGDKUdBUIIkAFq4/o+qUSuphbR8i+hXNN8Vq9p2zN nsilJ6tR7wKrnZU5qkFApm/BTMu9gPqZWtIN2OeGc4xWD44hYUbxhf+TEbNXeThS QTwCuRmi3544ioK66bh/GRbwuTGIP15HVJqzXGLjF4SNT/jwKeGe5twr0Nyc+//u 34saVj4G7Hs4aIETOJ9oUACSVzWEh54gaNeQowvwil/872Ys14ZNd+UZfzJWyTd6 I49ET81AWwZ9K7Dky/GFod2Jo6wT2mQ= -----END CERTIFICATE-----Generated at Sun Apr 27 01:10:34 2025 by rpki-client