$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65f52632-8fab-38a5-a649-b640d4b65b0a.roa File: 65f52632-8fab-38a5-a649-b640d4b65b0a.roa (raw, json) Hash identifier: lrc4PNgjhNvegVdemRSpHzfn1TyKcAhL4B5MlIklLxo= Subject key identifier: E0:17:90:71:9A:A9:22:A4:EA:9A:77:40:6A:9B:F1:86:47:DB:2F:22 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498769D5B4AED93A8455299180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65f52632-8fab-38a5-a649-b640d4b65b0a.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.201.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:d5:b4:ae:d9:3a:84:55:29:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=3ce83221-84ae-40b6-889f-943d33d4a7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:eb:a2:0c:b8:a7:bb:fd:df:d2:85:6b:9a:bb: c3:47:28:b4:32:d0:49:cd:80:84:f2:46:41:88:8a: be:b4:f4:0f:19:b3:db:d2:62:5e:2e:87:8a:32:47: 98:fb:4d:14:8b:f5:b7:9d:bd:ed:74:6e:87:7e:a9: 50:47:90:53:5f:05:c1:b5:19:ce:23:01:34:fe:66: 57:e9:96:e2:07:24:3c:96:8e:9a:1f:b2:9e:ef:af: bb:4a:7c:71:d7:4a:54:77:ac:fb:b8:9c:92:5a:79: 50:ee:da:3c:bc:c1:7b:e8:47:03:ae:10:21:3c:01: f0:eb:e5:cb:55:88:8e:50:24:ba:55:de:44:3b:e4: c0:f1:49:ba:cd:9d:62:26:97:bf:f3:62:03:b1:96: 8a:1b:7b:5c:06:16:dd:3a:f7:8f:fa:c3:f4:56:21: d7:82:fa:9c:00:0d:77:cf:e1:55:3f:94:df:be:a8: 7a:24:97:98:86:a2:7d:49:ad:f7:4a:66:4d:cf:53: f7:a3:2d:a1:21:1b:a2:8b:d2:5e:6d:e3:61:30:33: c0:be:e4:fb:80:a9:60:2e:24:e1:e6:a7:3b:7a:8c: b2:16:8e:36:78:aa:8f:0b:52:c2:26:78:bf:7a:a2: 43:21:65:50:70:53:f1:7e:71:08:b2:50:8f:78:53: e9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:17:90:71:9A:A9:22:A4:EA:9A:77:40:6A:9B:F1:86:47:DB:2F:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65f52632-8fab-38a5-a649-b640d4b65b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:bf:02:41:b9:d1:d1:04:f5:81:1f:28:de:3f:4e:61:f3:90: 69:c7:29:30:10:08:5c:d4:e0:da:3e:12:5a:ac:51:ae:4b:d7: 79:7f:a7:4d:c6:1e:ab:2f:da:31:de:ba:3d:c7:93:f8:e4:6d: a3:49:b4:d1:04:70:47:50:82:0a:b8:36:62:a1:aa:c6:9f:24: ea:7c:09:34:0b:61:28:ab:cc:95:03:bf:86:88:85:a4:c0:7a: 6b:bc:eb:35:d3:88:47:6f:c2:b3:f8:55:12:ca:6d:b3:05:45: 5c:99:94:09:df:bf:8d:04:71:27:2e:56:d0:34:c2:0a:56:fe: cf:50:49:69:4c:88:b9:2e:14:80:69:d1:3d:5d:68:ee:69:15: 44:e9:8c:4a:9b:09:b4:09:5a:4b:fd:d7:bc:ea:a6:29:07:29: 61:fe:31:de:65:31:8e:7c:d1:3a:78:1b:57:93:72:bf:fb:bb: 50:74:87:90:98:ea:56:d6:7c:dc:b7:33:fc:37:2e:11:f7:30: 48:57:ad:d5:1f:92:1e:59:ec:01:55:b2:d1:de:70:8e:8d:52: 74:25:7e:a6:8d:90:59:8e:f1:d1:62:10:f6:64:1a:da:4f:42: cd:a2:9a:40:0d:92:57:36:9b:5a:e9:56:24:ef:f2:f9:fe:67: 97:b8:bd:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHadW0rtk6hFUpkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk M2NlODMyMjEtODRhZS00MGI2LTg4OWYtOTQzZDMzZDRhN2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOuiDLinu/3f0oVrmrvDRyi0MtBJzYCE8kZB iIq+tPQPGbPb0mJeLoeKMkeY+00Ui/W3nb3tdG6HfqlQR5BTXwXBtRnOIwE0/mZX 6ZbiByQ8lo6aH7Ke76+7Snxx10pUd6z7uJySWnlQ7to8vMF76EcDrhAhPAHw6+XL VYiOUCS6Vd5EO+TA8Um6zZ1iJpe/82IDsZaKG3tcBhbdOveP+sP0ViHXgvqcAA13 z+FVP5Tfvqh6JJeYhqJ9Sa33SmZNz1P3oy2hIRuii9JebeNhMDPAvuT7gKlgLiTh 5qc7eoyyFo42eKqPC1LCJni/eqJDIWVQcFPxfnEIslCPeFPp8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAXkHGaqSKk6pp3QGqb8YZH2y8iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjVmNTI2MzItOGZhYi0z OGE1LWE2NDktYjY0MGQ0YjY1YjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8nFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC/AkG50dEE9YEfKN4/TmHzkGnHKTAQCFzU4No+ElqsUa5L13l/p03G Hqsv2jHeuj3Hk/jkbaNJtNEEcEdQggq4NmKhqsafJOp8CTQLYSirzJUDv4aIhaTA emu86zXTiEdvwrP4VRLKbbMFRVyZlAnfv40EcScuVtA0wgpW/s9QSWlMiLkuFIBp 0T1daO5pFUTpjEqbCbQJWkv917zqpikHKWH+Md5lMY580Tp4G1eTcr/7u1B0h5CY 6lbWfNy3M/w3LhH3MEhXrdUfkh5Z7AFVstHecI6NUnQlfqaNkFmO8dFiEPZkGtpP Qs2imkANklc2m1rpViTv8vn+Z5e4vbs= -----END CERTIFICATE-----Generated at Sat Apr 26 19:05:39 2025 by rpki-client