$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/506492aa-1377-3f6b-8220-7c46f8b12445.roa File: 506492aa-1377-3f6b-8220-7c46f8b12445.roa (raw, json) Hash identifier: cTHeQRyeYaQ5eCjtqLmb6VKsWHZEIbc/4JMcX5SIwNM= Subject key identifier: 47:E2:94:F8:92:83:15:4D:86:36:0C:C7:43:0B:20:DB:49:9A:AF:41 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E4C5764B0FFF9B24DBC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/506492aa-1377-3f6b-8220-7c46f8b12445.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.205.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e4:c5:76:4b:0f:ff:9b:24:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=e2074ef1-91be-4dbe-8828-698134062dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7c:3c:f2:51:73:0e:78:6c:f8:ec:7f:9a:a8: 0d:17:8d:84:1e:88:67:35:a7:ad:27:12:1e:fb:b0: 84:43:04:16:30:2b:e3:c0:ce:83:0a:23:28:55:cf: fc:ba:e1:e2:e6:9f:2f:89:92:85:87:2d:19:0c:11: 2e:0c:75:a0:61:92:98:3f:ea:f5:7e:e3:dc:fc:5d: c0:d0:83:a0:3f:c0:af:13:ab:8c:8b:23:f9:46:4f: 95:c7:52:46:70:2a:07:9e:a7:e9:b8:26:ab:66:98: d8:7a:ca:60:b2:a7:fe:06:e4:09:74:40:2a:9a:55: ba:0c:9e:00:dc:a7:7c:38:2b:2e:fa:07:17:98:fc: 79:ef:d5:0e:10:80:a7:98:02:7d:72:ae:43:4b:8e: 89:6b:2c:22:72:f4:7d:19:41:a2:99:c0:73:69:05: b5:f2:93:85:b5:77:df:b9:7b:f1:10:8b:3f:c6:ea: 4a:22:0b:d7:fb:33:26:0b:43:58:a6:64:71:d8:88: 01:46:2f:69:1d:86:13:bd:65:69:3b:a0:04:7e:9e: 82:9d:34:1d:2a:41:91:4b:71:84:df:d2:46:53:7e: 6e:ea:6d:ac:f0:9d:d0:b9:4b:3e:58:42:0f:0f:c1: dc:3c:9d:34:24:6a:c2:cb:85:3b:3e:1b:f1:2f:8f: 7e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E2:94:F8:92:83:15:4D:86:36:0C:C7:43:0B:20:DB:49:9A:AF:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/506492aa-1377-3f6b-8220-7c46f8b12445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:5a:1e:92:b9:a1:af:c3:2f:39:78:b7:e1:b1:75:6d:85:33: 43:3c:24:af:b1:53:19:bc:af:6a:a6:60:8a:d5:5e:6e:e6:d6: 26:2d:6c:53:52:fb:d1:3d:b3:69:36:d3:c5:ec:98:b6:3b:41: 4f:22:a2:fd:08:9c:0a:24:25:42:5a:e0:76:9f:bf:bf:2f:d3: 93:a5:56:c7:bd:3b:65:c2:67:b6:4d:22:39:6e:e8:69:50:24: 40:7a:86:fc:c8:55:ff:79:7c:31:c4:a3:03:3b:b8:26:0b:32: 5e:82:40:d3:f8:65:c3:cd:66:5c:f3:8d:29:6b:dd:90:3a:84: b0:4c:d6:c9:c0:d9:6b:97:f3:73:58:98:67:87:a2:77:5c:03: a3:80:70:0f:0b:66:75:87:3b:d5:17:36:6c:c0:1b:e3:de:96: d1:bf:37:b0:69:13:30:0d:2d:f7:71:1c:9a:58:ef:ef:ab:69: 6d:9f:71:24:04:2a:1a:2d:dd:de:f8:78:a4:da:1c:87:b3:e6: 85:a3:6d:6f:b3:90:a5:34:c3:85:96:b5:b9:39:a0:8b:20:f8: f4:13:67:dd:84:5c:18:be:39:5c:f6:0c:27:c2:07:45:4f:f5: db:ab:1b:79:8e:5d:c2:32:43:80:c7:d3:d4:de:be:ec:76:fc: 03:ef:41:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKeTFdksP/5sk28AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk ZTIwNzRlZjEtOTFiZS00ZGJlLTg4MjgtNjk4MTM0MDYyZGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXw88lFzDnhs+Ox/mqgNF42EHohnNaetJxIe +7CEQwQWMCvjwM6DCiMoVc/8uuHi5p8viZKFhy0ZDBEuDHWgYZKYP+r1fuPc/F3A 0IOgP8CvE6uMiyP5Rk+Vx1JGcCoHnqfpuCarZpjYespgsqf+BuQJdEAqmlW6DJ4A 3Kd8OCsu+gcXmPx579UOEICnmAJ9cq5DS46JaywicvR9GUGimcBzaQW18pOFtXff uXvxEIs/xupKIgvX+zMmC0NYpmRx2IgBRi9pHYYTvWVpO6AEfp6CnTQdKkGRS3GE 39JGU35u6m2s8J3QuUs+WEIPD8HcPJ00JGrCy4U7PhvxL49+wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfilPiSgxVNhjYMx0MLINtJmq9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTA2NDkyYWEtMTM3Ny0z ZjZiLTgyMjAtN2M0NmY4YjEyNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF83XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpaHpK5oa/DLzl4t+GxdW2FM0M8JK+xUxm8r2qmYIrVXm7m1iYtbFNS +9E9s2k208XsmLY7QU8iov0InAokJUJa4Hafv78v05OlVse9O2XCZ7ZNIjlu6GlQ JEB6hvzIVf95fDHEowM7uCYLMl6CQNP4ZcPNZlzzjSlr3ZA6hLBM1snA2WuX83NY mGeHondcA6OAcA8LZnWHO9UXNmzAG+PeltG/N7BpEzANLfdxHJpY7++raW2fcSQE Khot3d74eKTaHIez5oWjbW+zkKU0w4WWtbk5oIsg+PQTZ92EXBi+OVz2DCfCB0VP 9durG3mOXcIyQ4DH09Tevux2/APvQXs= -----END CERTIFICATE-----Generated at Sat Apr 26 16:06:12 2025 by rpki-client