$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cbc901f-4949-30c7-870a-f82f6f0660c4.roa File: 4cbc901f-4949-30c7-870a-f82f6f0660c4.roa (raw, json) Hash identifier: lfQESJAdmcF74OreGAK1lOeXb5F3YFvwfrHNv/MZFF0= Subject key identifier: 2B:59:EA:03:A9:73:7A:90:3F:95:7A:0C:3E:BA:07:39:5D:54:64:D4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849833A1082C02BD20DA1D1D280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cbc901f-4949-30c7-870a-f82f6f0660c4.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16625 IP address blocks: 23.197.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:3a:10:82:c0:2b:d2:0d:a1:d1:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=12a5ecd7-1eb2-466e-85c8-1db8564ef2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b7:03:6e:c0:d4:94:47:89:60:e3:3f:aa:cf: 18:98:9b:38:0a:15:ac:66:1f:15:1d:30:64:da:a1: df:01:0c:8c:91:15:cc:de:10:6f:cb:20:9b:98:cd: dc:85:85:67:b9:70:3a:e8:96:83:62:45:66:25:b6: 4e:4e:35:71:56:07:98:97:ab:38:52:ae:4c:f7:cc: f9:73:5d:a6:a4:1a:16:0e:bb:ab:84:5c:49:4b:b6: 58:43:fc:4e:b8:1b:b1:da:cb:ce:8b:5a:54:c3:18: 18:b6:e0:e2:f5:a7:ba:5a:d3:6f:c9:3c:f1:b2:b2: e9:93:fc:29:dd:28:70:cc:59:f3:bc:c8:06:e9:f6: 2b:1a:27:57:74:c1:46:73:4c:9f:82:f1:0a:95:88: 24:d0:ab:d9:87:67:8b:e0:d6:8a:14:66:86:e4:48: ea:bf:96:d7:f2:2d:02:cc:7f:0d:7a:a2:bf:69:ff: b1:de:b0:cb:43:16:7c:81:62:92:03:75:ee:ba:7b: 10:f1:68:6a:d1:6a:ae:8a:c1:34:53:b8:bd:2d:63: 61:89:3d:22:8d:16:18:71:55:ba:cd:fa:a0:32:d1: b7:15:89:08:f7:b0:d9:8c:72:89:e2:09:82:57:37: 88:ac:03:77:86:76:ab:df:bb:e5:fb:bb:f3:e0:6e: bb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:59:EA:03:A9:73:7A:90:3F:95:7A:0C:3E:BA:07:39:5D:54:64:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cbc901f-4949-30c7-870a-f82f6f0660c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:77:1c:fb:1e:64:4c:49:32:bd:4d:c8:4d:f2:8d:bb:82:e7: 24:a2:37:a6:fa:91:3b:f2:3e:58:6f:ff:4f:88:ce:d4:91:f9: 23:dd:b8:a8:27:16:19:95:a4:ab:65:07:ff:fe:64:7b:c0:40: 04:fc:54:db:c1:6b:15:77:36:26:61:2e:df:d4:51:e9:57:f1: 7a:e6:e7:69:a4:5d:67:7d:78:d8:c5:f5:c3:15:2e:dc:08:2d: be:eb:ec:74:7a:07:48:13:47:52:c6:c1:d9:41:0e:5b:04:ac: 08:3e:8f:59:56:ca:0a:51:af:e2:93:b1:17:69:de:51:0a:97: 84:f1:92:35:dd:69:c0:f7:60:7a:93:79:41:09:0f:0a:61:2a: 73:22:79:39:96:6b:8b:3d:10:65:14:3c:2c:2e:03:d6:4f:4d: ce:e5:02:55:c5:5e:57:47:0c:cd:44:81:47:65:19:ee:be:2f: f5:01:c5:cb:fd:7c:a3:97:e8:0c:3d:87:d3:f6:02:59:b2:df: 12:63:7a:5e:7d:0b:a8:ce:d7:d7:50:3f:7c:68:cb:d8:2f:d6: 26:e3:85:18:b9:7d:ed:a3:b1:5b:f2:cf:d8:28:49:e3:a2:f7: 80:e5:e8:f9:01:d6:0e:56:1d:0a:89:d8:75:56:9b:af:bd:0a: d3:35:38:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOhCCwCvSDaHR0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk MTJhNWVjZDctMWViMi00NjZlLTg1YzgtMWRiODU2NGVmMmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrcDbsDUlEeJYOM/qs8YmJs4ChWsZh8VHTBk 2qHfAQyMkRXM3hBvyyCbmM3chYVnuXA66JaDYkVmJbZOTjVxVgeYl6s4Uq5M98z5 c12mpBoWDrurhFxJS7ZYQ/xOuBux2svOi1pUwxgYtuDi9ae6WtNvyTzxsrLpk/wp 3ShwzFnzvMgG6fYrGidXdMFGc0yfgvEKlYgk0KvZh2eL4NaKFGaG5Ejqv5bX8i0C zH8NeqK/af+x3rDLQxZ8gWKSA3XuunsQ8Whq0WquisE0U7i9LWNhiT0ijRYYcVW6 zfqgMtG3FYkI97DZjHKJ4gmCVzeIrAN3hnar37vl+7vz4G67OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtZ6gOpc3qQP5V6DD66BzldVGTUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGNiYzkwMWYtNDk0OS0z MGM3LTg3MGEtZjgyZjZmMDY2MGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8XwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACd3HPseZExJMr1NyE3yjbuC5ySiN6b6kTvyPlhv/0+IztSR+SPduKgn FhmVpKtlB//+ZHvAQAT8VNvBaxV3NiZhLt/UUelX8Xrm52mkXWd9eNjF9cMVLtwI Lb7r7HR6B0gTR1LGwdlBDlsErAg+j1lWygpRr+KTsRdp3lEKl4TxkjXdacD3YHqT eUEJDwphKnMieTmWa4s9EGUUPCwuA9ZPTc7lAlXFXldHDM1EgUdlGe6+L/UBxcv9 fKOX6Aw9h9P2Almy3xJjel59C6jO19dQP3xoy9gv1ibjhRi5fe2jsVvyz9goSeOi 94Dl6PkB1g5WHQqJ2HVWm6+9CtM1OFI= -----END CERTIFICATE-----Generated at Sat Apr 26 22:18:45 2025 by rpki-client