$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a1dd8ef-6c83-3bb4-b37a-403111fe5c38.roa File: 7a1dd8ef-6c83-3bb4-b37a-403111fe5c38.roa (raw, json) Hash identifier: gQwpFQUq4fF4SCY42Si7wNR51H5EMH/inCEIQACUpzE= Subject key identifier: 1B:2C:14:DE:D3:B9:27:A8:5C:43:85:CF:23:67:55:FB:42:21:51:D2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498769D17760362DD3A75D0E40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a1dd8ef-6c83-3bb4-b37a-403111fe5c38.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.201.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:d1:77:60:36:2d:d3:a7:5d:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=45a498bc-f4dc-49ac-a58e-fbe1d2dceee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b7:0a:38:6b:19:30:46:5c:cb:1b:4e:d6:85: 88:35:e0:ac:c6:18:95:ff:8f:64:9c:df:27:64:61: b3:de:90:b8:e1:26:6c:38:4f:2a:24:e8:c8:0f:fb: 19:e0:e3:e4:92:4e:a8:3e:5b:7a:0c:d6:07:f3:98: 34:04:e9:4d:ae:ae:50:09:a9:62:60:d5:39:58:db: a1:16:48:74:28:a3:b9:9b:32:4f:92:58:2d:98:30: 1c:f8:b9:b5:ed:ca:c2:67:3a:01:94:0a:36:2e:af: ce:ca:96:d6:19:84:4e:53:9c:7e:5b:69:84:63:bb: 05:8b:ab:e9:fb:2e:60:6c:59:a8:00:19:8f:b2:63: 15:41:d2:3e:ba:61:ba:76:fb:29:96:f9:b9:11:5e: 7c:74:8a:6f:9e:37:7e:5b:df:ba:be:86:e4:74:5b: 8e:81:e4:2a:1e:c9:6e:4f:6b:49:42:a2:bc:9a:57: c4:3f:73:27:b0:69:f1:28:ed:55:66:11:3e:18:b1: f1:53:b2:ce:09:ae:24:65:58:db:2b:c9:9f:d4:66: 88:a6:af:91:a2:fb:d1:cd:99:0e:1f:22:30:9b:dd: be:ca:7e:2e:75:21:72:44:a0:0d:74:67:06:42:f9: 72:01:bc:c6:da:d2:59:5a:04:2f:11:d7:f9:2a:b1: a4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2C:14:DE:D3:B9:27:A8:5C:43:85:CF:23:67:55:FB:42:21:51:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a1dd8ef-6c83-3bb4-b37a-403111fe5c38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:33:a4:bb:e7:60:56:b9:5d:87:07:4d:f9:6d:6e:be:3f:d0: 86:e8:15:4c:91:6d:ef:78:ea:e2:be:78:fd:fd:fa:59:5f:5c: 2e:f9:bf:fa:87:d3:30:f6:36:eb:9b:fc:34:a6:85:f4:47:bd: 98:b4:42:cc:e4:c5:4a:c4:55:b7:24:34:a0:03:1a:d0:05:10: 08:04:e9:14:82:3a:37:8f:7b:7e:97:32:9d:be:4a:b9:6c:f2: 56:33:98:bd:e4:f3:64:ed:5c:75:61:25:46:65:94:7f:86:d4: dc:f7:05:04:c4:78:5d:fe:39:44:be:aa:42:a7:6e:56:cb:c5: 40:66:7f:b3:ed:87:cc:b3:4c:6d:d2:e7:ec:d2:1f:aa:b4:0a: 1b:04:0f:32:90:91:49:6f:c3:fd:15:9f:c8:26:80:67:a2:3f: 95:4c:f9:05:25:0b:05:95:dd:1e:ac:0d:16:fd:c1:9b:41:70: be:ab:d9:e8:24:d2:b4:6c:30:94:13:57:65:07:5d:6b:f3:0b: 80:24:53:bd:64:3e:6a:19:b4:27:47:15:36:b7:44:dd:61:89: 16:51:15:0c:71:13:93:52:07:5b:63:8b:95:81:e7:49:e9:0f: a5:c7:4b:f2:2a:47:01:8f:53:55:cc:cf:71:6b:f3:53:53:42: 86:31:38:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHadF3YDYt06ddDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk NDVhNDk4YmMtZjRkYy00OWFjLWE1OGUtZmJlMWQyZGNlZWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bcKOGsZMEZcyxtO1oWINeCsxhiV/49knN8n ZGGz3pC44SZsOE8qJOjID/sZ4OPkkk6oPlt6DNYH85g0BOlNrq5QCaliYNU5WNuh Fkh0KKO5mzJPklgtmDAc+Lm17crCZzoBlAo2Lq/OypbWGYROU5x+W2mEY7sFi6vp +y5gbFmoABmPsmMVQdI+umG6dvsplvm5EV58dIpvnjd+W9+6vobkdFuOgeQqHslu T2tJQqK8mlfEP3MnsGnxKO1VZhE+GLHxU7LOCa4kZVjbK8mf1GaIpq+RovvRzZkO HyIwm92+yn4udSFyRKANdGcGQvlyAbzG2tJZWgQvEdf5KrGklQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBssFN7TuSeoXEOFzyNnVftCIVHSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2ExZGQ4ZWYtNmM4My0z YmI0LWIzN2EtNDAzMTExZmU1YzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8nEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQzpLvnYFa5XYcHTfltbr4/0IboFUyRbe946uK+eP39+llfXC75v/qH 0zD2Nuub/DSmhfRHvZi0QszkxUrEVbckNKADGtAFEAgE6RSCOjePe36XMp2+Srls 8lYzmL3k82TtXHVhJUZllH+G1Nz3BQTEeF3+OUS+qkKnblbLxUBmf7Pth8yzTG3S 5+zSH6q0ChsEDzKQkUlvw/0Vn8gmgGeiP5VM+QUlCwWV3R6sDRb9wZtBcL6r2egk 0rRsMJQTV2UHXWvzC4AkU71kPmoZtCdHFTa3RN1hiRZRFQxxE5NSB1tji5WB50np D6XHS/IqRwGPU1XMz3Fr81NTQoYxOP4= -----END CERTIFICATE-----Generated at Sat Apr 26 16:00:08 2025 by rpki-client