$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4de64081-dd66-3a80-b03a-5c650937d926.roa File: 4de64081-dd66-3a80-b03a-5c650937d926.roa (raw, json) Hash identifier: r45Di3T5tsp5IWm52j1n5+ielERKcJxsMigbItITbsk= Subject key identifier: FE:30:3E:DE:4B:60:00:5D:84:06:CF:DA:62:67:FB:22:34:31:06:1B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E16C675563A75AC20940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4de64081-dd66-3a80-b03a-5c650937d926.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 35994 IP address blocks: 23.204.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e1:6c:67:55:63:a7:5a:c2:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=da7aab13-a73b-40e7-9eff-068cd11453c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:01:d1:e9:6c:5d:09:3a:c7:03:2d:b1:82:bc: 35:44:ce:3e:ef:ce:27:3b:7d:ba:f5:36:50:e4:25: cb:29:59:76:3b:72:75:95:f0:93:e8:a6:7f:fb:3f: e2:83:c1:97:36:63:d8:e4:76:3e:37:fe:0b:16:1e: 08:f0:74:eb:6b:8b:4c:95:77:fc:46:fa:68:9f:10: 93:61:e8:93:9d:22:d7:ea:42:90:44:70:03:f2:c0: 77:39:43:97:a1:0e:50:4d:4d:8f:eb:2e:d8:c9:8b: d8:f6:07:32:45:cf:41:e8:b6:bb:19:79:94:ba:30: 35:95:6f:aa:66:ac:fc:96:18:4d:38:f3:16:86:fa: 2e:a5:d6:ae:f6:43:8c:30:68:9d:a8:c6:aa:8a:41: d7:47:53:1c:be:49:8b:46:fe:01:0a:ba:7b:65:6e: 22:3d:3b:7c:15:49:b8:09:9a:eb:b2:45:ea:a2:e2: ca:c0:9f:ce:9f:e5:72:5e:b8:8f:ca:07:c9:45:f7: d6:71:3d:57:91:dd:29:e1:16:ae:9f:36:f4:06:77: 62:49:0c:c7:13:38:44:1e:6a:80:2a:5f:96:46:7d: 51:40:af:82:15:84:0a:e7:ad:39:7c:99:e9:28:10: 1d:04:e1:22:03:c6:3d:ab:a7:70:96:15:e3:fa:0b: 75:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:30:3E:DE:4B:60:00:5D:84:06:CF:DA:62:67:FB:22:34:31:06:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4de64081-dd66-3a80-b03a-5c650937d926.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:4e:73:ff:6b:b8:f2:de:44:55:14:4d:39:2f:0b:89:40:bf: cd:c1:63:19:69:73:3a:08:9c:a6:a7:86:fe:6d:98:44:56:90: 39:9d:98:38:54:cd:db:78:99:78:44:3f:88:15:96:14:e9:24: 8c:1c:a7:99:35:e5:92:24:39:d7:df:27:dd:9f:4d:0e:20:e8: a8:df:38:3e:04:a9:6e:20:0b:82:75:8e:83:0a:af:27:28:f9: 2f:ba:c5:42:3d:4c:f1:f7:a6:f4:6c:e1:64:a0:d2:91:a8:81: 86:c3:c5:e4:c5:a8:d4:60:d4:a0:db:26:52:cb:5c:24:4c:e8: cc:6e:70:d6:b2:db:1b:30:6a:9b:f1:d1:cb:c4:37:f1:15:27: 42:6a:a9:3d:07:fd:96:41:ed:37:76:f2:97:25:82:ca:ef:75: 13:43:d4:77:d6:70:6e:d1:9d:21:e9:b0:6a:f3:fb:11:69:c7: 29:5e:61:57:6e:d9:af:57:20:a1:65:94:ef:5a:e7:0c:7d:6d: 98:56:19:9b:16:6a:4e:47:97:4c:8d:6d:70:2e:1d:47:65:b4: 0c:15:22:ef:a6:74:6a:e1:8d:1a:25:b2:f1:ba:a0:ab:0f:df: ae:e3:2b:11:a0:03:81:47:d1:9f:b4:1d:99:cd:98:31:6b:24: 9c:14:0c:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKeFsZ1Vjp1rCCUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk ZGE3YWFiMTMtYTczYi00MGU3LTllZmYtMDY4Y2QxMTQ1M2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQHR6WxdCTrHAy2xgrw1RM4+784nO3269TZQ 5CXLKVl2O3J1lfCT6KZ/+z/ig8GXNmPY5HY+N/4LFh4I8HTra4tMlXf8RvponxCT YeiTnSLX6kKQRHAD8sB3OUOXoQ5QTU2P6y7YyYvY9gcyRc9B6La7GXmUujA1lW+q Zqz8lhhNOPMWhvoupdau9kOMMGidqMaqikHXR1McvkmLRv4BCrp7ZW4iPTt8FUm4 CZrrskXqouLKwJ/On+VyXriPygfJRffWcT1Xkd0p4Raunzb0BndiSQzHEzhEHmqA Kl+WRn1RQK+CFYQK5605fJnpKBAdBOEiA8Y9q6dwlhXj+gt1BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4wPt5LYABdhAbP2mJn+yI0MQYbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGRlNjQwODEtZGQ2Ni0z YTgwLWIwM2EtNWM2NTA5MzdkOTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8xeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxOc/9ruPLeRFUUTTkvC4lAv83BYxlpczoInKanhv5tmERWkDmdmDhU zdt4mXhEP4gVlhTpJIwcp5k15ZIkOdffJ92fTQ4g6KjfOD4EqW4gC4J1joMKryco +S+6xUI9TPH3pvRs4WSg0pGogYbDxeTFqNRg1KDbJlLLXCRM6MxucNay2xswapvx 0cvEN/EVJ0JqqT0H/ZZB7Td28pclgsrvdRND1HfWcG7RnSHpsGrz+xFpxyleYVdu 2a9XIKFllO9a5wx9bZhWGZsWak5Hl0yNbXAuHUdltAwVIu+mdGrhjRolsvG6oKsP 367jKxGgA4FH0Z+0HZnNmDFrJJwUDOg= -----END CERTIFICATE-----Generated at Sun Apr 27 05:45:17 2025 by rpki-client