$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64db5be5-ee05-31e0-a367-a438caf1f365.roa File: 64db5be5-ee05-31e0-a367-a438caf1f365.roa (raw, json) Hash identifier: uk3gBoRuwW9dvTWDpKh+/qcpnyZxE6y+LvyuNo20GAY= Subject key identifier: 7A:B0:FF:00:8F:DC:52:8E:C7:01:07:46:AD:5F:83:D7:FE:0C:E8:E2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498769D4BE082F6F6F2E5CEC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64db5be5-ee05-31e0-a367-a438caf1f365.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.200.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:d4:be:08:2f:6f:6f:2e:5c:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=d68d77a2-5876-412b-9a59-8c89129dded7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7e:a2:ad:88:f0:b8:3e:b7:a9:42:55:d9:64: 24:10:3c:a0:27:1d:f6:8f:c7:0d:7e:b7:45:13:a0: 7a:10:2a:6e:ac:76:60:ac:30:60:4c:f0:ac:25:4e: 89:f4:55:e4:7c:37:d0:aa:65:2c:04:32:1d:c3:29: 4f:02:24:2e:b2:f1:83:99:7f:6b:32:a9:e3:0b:d9: 95:9f:4b:dd:b0:d3:bb:77:ec:13:34:58:bb:e0:e4: 70:f7:71:1a:8f:30:a1:51:e7:6c:7b:8b:2f:dd:92: fe:75:34:48:06:73:9c:77:5a:65:ac:68:c1:38:f6: 23:a4:10:c7:2c:b0:94:66:39:ae:a7:7f:e4:58:b2: e0:f8:80:04:04:26:4c:61:23:18:c7:43:e9:93:e4: 3b:7b:5e:7d:9a:21:f4:77:76:00:96:e4:30:0f:69: 8e:4c:79:3e:1a:15:42:10:20:85:dd:a9:e4:14:c4: 39:09:64:55:09:0d:4e:11:e4:75:41:fd:57:6b:50: 35:dc:27:a6:16:2f:31:80:2b:c8:2d:55:f4:80:f3: 21:db:60:44:f6:1a:cc:43:22:63:40:67:3b:bc:7f: 71:6e:fc:3b:40:c6:c6:78:1d:c5:35:6e:e7:a9:15: fd:e7:93:89:0f:3b:83:b0:ce:0e:77:eb:24:23:9a: d7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B0:FF:00:8F:DC:52:8E:C7:01:07:46:AD:5F:83:D7:FE:0C:E8:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64db5be5-ee05-31e0-a367-a438caf1f365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:60:69:49:c0:81:9c:8f:9a:65:bc:7a:3e:67:31:1e:2e:d2: 5f:ab:dd:d0:91:c3:e8:d6:91:4a:2e:8e:6f:15:ef:ce:88:b1: 19:4b:91:de:d3:05:3d:1d:6c:a3:a3:d5:93:59:08:cb:cd:01: b2:4c:01:a0:d5:d9:ba:0d:92:54:1a:38:55:fa:b5:36:32:a5: 54:63:70:9a:4f:85:af:6f:3b:5b:d4:0c:0c:ad:ea:85:84:33: 2c:5c:3e:67:66:e2:55:92:16:c7:fd:e2:18:67:e5:1c:42:40: 77:07:6e:10:bc:6d:c4:eb:70:ea:74:f7:8c:b1:c6:5e:e7:84: 4b:ca:40:74:22:8a:50:00:2d:ef:8d:bc:12:53:02:e4:cc:5b: 07:24:60:a2:a4:b2:f8:f0:7d:d0:bd:32:c6:65:48:06:a7:fb: 56:a6:09:f0:e1:ca:66:00:55:78:9b:f6:f8:98:aa:3c:35:d1: 85:a2:8f:c7:ae:37:05:51:72:01:64:20:0c:d3:0a:6c:9f:e6: d3:1e:f0:d1:d7:e3:6a:2d:31:99:f6:f5:76:73:5f:42:dd:4f: 69:09:89:02:46:d2:f3:20:f4:53:85:4d:c0:5a:e6:cd:b8:47: cd:76:3f:5c:e5:72:66:f7:9d:78:0e:5b:d5:84:76:fd:76:88: 08:60:b3:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHadS+CC9vby5c7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ZDY4ZDc3YTItNTg3Ni00MTJiLTlhNTktOGM4OTEyOWRkZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH6irYjwuD63qUJV2WQkEDygJx32j8cNfrdF E6B6ECpurHZgrDBgTPCsJU6J9FXkfDfQqmUsBDIdwylPAiQusvGDmX9rMqnjC9mV n0vdsNO7d+wTNFi74ORw93EajzChUedse4sv3ZL+dTRIBnOcd1plrGjBOPYjpBDH LLCUZjmup3/kWLLg+IAEBCZMYSMYx0Ppk+Q7e159miH0d3YAluQwD2mOTHk+GhVC ECCF3ankFMQ5CWRVCQ1OEeR1Qf1Xa1A13CemFi8xgCvILVX0gPMh22BE9hrMQyJj QGc7vH9xbvw7QMbGeB3FNW7nqRX955OJDzuDsM4Od+skI5rXTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqw/wCP3FKOxwEHRq1fg9f+DOjiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjRkYjViZTUtZWUwNS0z MWUwLWEzNjctYTQzOGNhZjFmMzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8iYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExgaUnAgZyPmmW8ej5nMR4u0l+r3dCRw+jWkUoujm8V786IsRlLkd7T BT0dbKOj1ZNZCMvNAbJMAaDV2boNklQaOFX6tTYypVRjcJpPha9vO1vUDAyt6oWE MyxcPmdm4lWSFsf94hhn5RxCQHcHbhC8bcTrcOp094yxxl7nhEvKQHQiilAALe+N vBJTAuTMWwckYKKksvjwfdC9MsZlSAan+1amCfDhymYAVXib9viYqjw10YWij8eu NwVRcgFkIAzTCmyf5tMe8NHX42otMZn29XZzX0LdT2kJiQJG0vMg9FOFTcBa5s24 R812P1zlcmb3nXgOW9WEdv12iAhgs/A= -----END CERTIFICATE-----Generated at Sat Apr 26 15:58:34 2025 by rpki-client