$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e615266-5431-3379-96dd-2efcf557e2d5.roa File: 5e615266-5431-3379-96dd-2efcf557e2d5.roa (raw, json) Hash identifier: Q5aF8+BgvcChgvOmNpzl9Ew/0GoBFcHnDRbzNRWmK6k= Subject key identifier: C2:19:78:53:D2:77:D4:34:D9:76:96:67:87:68:21:AC:BA:44:4A:06 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E1D0B040BCAB6868CF60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e615266-5431-3379-96dd-2efcf557e2d5.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.204.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e1:d0:b0:40:bc:ab:68:68:cf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=7a58c0f7-11de-46f5-8364-564cc49ae1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ed:69:11:85:f1:bf:24:52:58:e4:f6:ff:0d: ca:9d:29:9d:f6:40:98:a8:ba:ca:4c:6b:71:84:9c: 3d:a8:17:f4:75:e2:99:00:35:ca:41:90:f4:4e:80: 3a:8a:1d:64:1d:cd:ea:fe:ac:ab:61:ed:ab:94:b0: 58:77:8b:58:a9:ee:f5:46:3e:ee:eb:e1:8b:6a:c2: 58:71:d9:16:05:49:ff:ed:9d:25:52:63:98:4e:80: 38:94:f9:81:80:d0:a5:ed:86:0b:b1:4d:ca:91:a9: d2:5d:61:22:87:21:bd:2a:02:79:74:8c:0a:3f:83: 2b:e9:15:a2:57:55:d0:8a:99:a7:14:a7:52:37:52: 9d:f0:65:c4:6d:6d:3d:66:84:bf:64:37:70:a9:f2: 4f:4e:91:23:f8:59:37:30:5e:82:7c:b8:16:2a:78: cf:6f:97:e3:1e:86:8a:02:f5:ab:a1:b0:99:5e:b3: 3d:8e:60:9a:e1:f0:31:9d:9a:75:46:21:19:b3:20: e3:3b:67:15:cb:3b:e1:6e:fa:1b:6a:b4:e7:17:3d: 93:85:b5:8d:2b:73:e5:37:1e:53:af:c8:35:28:d4: fb:7b:e9:7e:7b:68:84:44:a7:94:7d:8a:c7:cd:74: c7:b6:d0:ff:2a:3d:c9:ac:a8:1f:47:c8:d9:e9:de: 07:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:19:78:53:D2:77:D4:34:D9:76:96:67:87:68:21:AC:BA:44:4A:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e615266-5431-3379-96dd-2efcf557e2d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d1:94:57:85:ad:ae:50:23:61:ae:80:1d:8a:2f:ff:0c:e4: 59:d0:6b:3a:5e:f8:ab:51:60:94:50:a2:b6:a1:e4:80:fa:66: 61:bf:bd:be:15:47:e7:7e:49:fc:4a:08:17:9f:38:56:e9:65: 11:1b:e6:b6:b7:2a:aa:4d:50:23:89:0d:2a:d1:21:fe:da:92: 3e:f7:d0:35:69:84:38:af:47:2f:fa:ab:0a:64:0f:95:a5:92: ac:9f:d4:d0:ac:e2:e2:63:49:6c:a6:01:bb:99:a3:fc:84:f3: 1f:4a:16:e0:ae:f8:52:1a:d9:38:47:bf:fc:54:38:b2:99:f2: f7:00:5a:fd:28:50:09:bf:70:62:f5:33:93:f1:87:86:60:23: 37:27:6a:ce:70:7e:d6:98:e9:05:72:b6:3b:c7:4f:aa:3c:58: 36:a1:2d:99:8f:d4:f5:f9:87:50:54:b2:1f:60:0d:37:fc:8b: 40:d5:61:8e:43:35:55:35:d9:64:7f:8d:27:13:06:d1:d3:bd: c4:ef:8c:31:0e:cd:08:28:51:b7:0e:de:79:cb:d9:12:da:52: f9:bb:b8:b3:73:67:d2:db:9b:81:ff:dc:8e:e5:f5:34:31:ac: 86:1a:a3:5b:9b:4d:fc:f6:66:b7:d2:23:07:2d:4c:ab:93:71: 80:b0:97:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKeHQsEC8q2hoz2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk N2E1OGMwZjctMTFkZS00NmY1LTgzNjQtNTY0Y2M0OWFlMWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu1pEYXxvyRSWOT2/w3KnSmd9kCYqLrKTGtx hJw9qBf0deKZADXKQZD0ToA6ih1kHc3q/qyrYe2rlLBYd4tYqe71Rj7u6+GLasJY cdkWBUn/7Z0lUmOYToA4lPmBgNCl7YYLsU3KkanSXWEihyG9KgJ5dIwKP4Mr6RWi V1XQipmnFKdSN1Kd8GXEbW09ZoS/ZDdwqfJPTpEj+Fk3MF6CfLgWKnjPb5fjHoaK AvWrobCZXrM9jmCa4fAxnZp1RiEZsyDjO2cVyzvhbvobarTnFz2ThbWNK3PlNx5T r8g1KNT7e+l+e2iERKeUfYrHzXTHttD/Kj3JrKgfR8jZ6d4HNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIZeFPSd9Q02XaWZ4doIay6REoGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWU2MTUyNjYtNTQzMS0z Mzc5LTk2ZGQtMmVmY2Y1NTdlMmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8xqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELRlFeFra5QI2GugB2KL/8M5FnQazpe+KtRYJRQorah5ID6ZmG/vb4V R+d+SfxKCBefOFbpZREb5ra3KqpNUCOJDSrRIf7akj730DVphDivRy/6qwpkD5Wl kqyf1NCs4uJjSWymAbuZo/yE8x9KFuCu+FIa2ThHv/xUOLKZ8vcAWv0oUAm/cGL1 M5Pxh4ZgIzcnas5wftaY6QVytjvHT6o8WDahLZmP1PX5h1BUsh9gDTf8i0DVYY5D NVU12WR/jScTBtHTvcTvjDEOzQgoUbcO3nnL2RLaUvm7uLNzZ9Lbm4H/3I7l9TQx rIYao1ubTfz2ZrfSIwctTKuTcYCwl+A= -----END CERTIFICATE-----Generated at Mon Apr 28 01:01:24 2025 by rpki-client