$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f4d369e-4a62-32d5-a300-26e259d68729.roa File: 7f4d369e-4a62-32d5-a300-26e259d68729.roa (raw, json) Hash identifier: Wm6jc9x6ZTHC3gNttrPDb7l9/tsh4Y0uFi7gy3YavHQ= Subject key identifier: F1:2F:87:03:DB:20:5C:DB:8B:AC:D4:84:B9:3D:FB:09:B9:D4:8A:5E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF6F645371275D5C837380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f4d369e-4a62-32d5-a300-26e259d68729.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.202.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:6f:64:53:71:27:5d:5c:83:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=5544c1b5-18ec-4c86-8818-4ea111ba88e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:bc:75:54:eb:5e:e7:6e:51:66:61:44:42: ec:1e:2c:4e:22:63:3c:b8:b8:be:9f:02:34:24:03: 29:c9:34:0d:35:22:45:06:bf:b5:35:d9:ab:7c:c2: e1:95:f2:74:1c:1a:ed:53:59:80:33:a5:0f:3e:01: 33:57:94:33:b0:03:a8:90:8f:b7:d7:7c:64:b2:98: b0:14:d5:e8:e4:d5:42:22:9c:99:de:c9:6d:98:6b: 27:0c:13:44:7a:91:89:bc:fc:d6:7a:33:37:bb:77: 60:89:d1:76:8c:f2:b2:0e:8a:93:d5:3f:5c:0c:55: 1f:8c:e5:06:65:25:6d:15:67:ff:10:8d:37:2a:5b: 2f:93:10:6b:4c:6b:f7:67:8d:48:d8:9a:40:39:dd: 30:8b:94:1a:cd:f4:a1:aa:a4:9a:bd:1e:dc:52:72: 59:b7:88:af:38:c2:01:45:d1:0c:55:a1:f1:53:2a: 7a:32:bd:e4:1c:4c:69:eb:a5:53:b4:74:cf:a6:39: cb:e1:c0:20:fb:76:92:dc:3a:94:2d:19:7d:ef:6c: 1a:c7:8f:f5:38:3d:c6:b8:85:72:ac:e0:a8:1e:f6: 5f:c4:33:42:40:ad:9e:c4:1d:ed:17:cd:f3:c0:2b: d7:04:d7:a5:7a:60:c2:40:6e:1a:4a:c5:f3:96:11: 8a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2F:87:03:DB:20:5C:DB:8B:AC:D4:84:B9:3D:FB:09:B9:D4:8A:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f4d369e-4a62-32d5-a300-26e259d68729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:13:e9:a4:32:15:65:b0:a1:fb:17:00:f9:87:1d:df:f4:40: 11:d2:33:2c:9d:ed:41:c1:ac:d9:b8:5b:d7:07:1c:fc:9d:2c: d7:1b:9e:98:08:22:eb:da:65:eb:f4:35:ec:c7:98:2b:9f:96: 33:4d:50:1a:bb:38:b0:9d:65:ea:3e:79:b4:c1:6b:64:a0:c8: a7:e9:24:58:e1:27:5b:85:80:03:1e:f6:5b:3c:41:a3:4a:1a: f6:81:7b:cf:52:c8:80:83:63:e6:f1:6e:87:1d:70:38:1c:ea: 85:1d:80:d7:eb:a0:84:43:44:e1:5a:a3:03:e3:e8:38:77:d7: 4e:15:b0:e4:0f:4d:2e:72:9a:2c:f9:c2:9c:05:70:c2:b0:04: 3f:4f:8f:6b:81:50:0b:c8:e6:ed:73:b2:e5:33:8c:a2:3c:05: d9:f9:2f:d8:3f:e7:7a:88:ec:01:2f:7f:3c:cb:f7:a6:44:da: a1:f7:21:4a:3c:44:63:9b:31:b7:6b:f2:81:57:5b:56:85:ac: 6f:00:f9:5a:d2:c6:8f:63:2b:8c:7f:22:20:f2:16:41:ff:6d: b9:92:4d:d7:ad:83:76:fa:ae:6d:c7:cf:38:f3:47:33:de:b4: 3b:20:98:97:3a:94:7e:6e:a3:e3:e5:45:a6:83:81:f5:f6:31: 6c:78:fd:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz29kU3EnXVyDc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk NTU0NGMxYjUtMThlYy00Yzg2LTg4MTgtNGVhMTExYmE4OGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMO8dVTrXuduUWZhRELsHixOImM8uLi+nwI0 JAMpyTQNNSJFBr+1NdmrfMLhlfJ0HBrtU1mAM6UPPgEzV5QzsAOokI+313xkspiw FNXo5NVCIpyZ3sltmGsnDBNEepGJvPzWejM3u3dgidF2jPKyDoqT1T9cDFUfjOUG ZSVtFWf/EI03KlsvkxBrTGv3Z41I2JpAOd0wi5QazfShqqSavR7cUnJZt4ivOMIB RdEMVaHxUyp6Mr3kHExp66VTtHTPpjnL4cAg+3aS3DqULRl972wax4/1OD3GuIVy rOCoHvZfxDNCQK2exB3tF83zwCvXBNelemDCQG4aSsXzlhGKuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEvhwPbIFzbi6zUhLk9+wm51IpeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2Y0ZDM2OWUtNGE2Mi0z MmQ1LWEzMDAtMjZlMjU5ZDY4NzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8pzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8T6aQyFWWwofsXAPmHHd/0QBHSMyyd7UHBrNm4W9cHHPydLNcbnpgI IuvaZev0NezHmCufljNNUBq7OLCdZeo+ebTBa2SgyKfpJFjhJ1uFgAMe9ls8QaNK GvaBe89SyICDY+bxbocdcDgc6oUdgNfroIRDROFaowPj6Dh3104VsOQPTS5ymiz5 wpwFcMKwBD9Pj2uBUAvI5u1zsuUzjKI8Bdn5L9g/53qI7AEvfzzL96ZE2qH3IUo8 RGObMbdr8oFXW1aFrG8A+VrSxo9jK4x/IiDyFkH/bbmSTdetg3b6rm3HzzjzRzPe tDsgmJc6lH5uo+PlRaaDgfX2MWx4/cQ= -----END CERTIFICATE-----Generated at Sat Apr 26 18:05:26 2025 by rpki-client