$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/839141f4-5efc-302a-a301-26aea15fbaa1.roa File: 839141f4-5efc-302a-a301-26aea15fbaa1.roa (raw, json) Hash identifier: 0pS2dhtV3IxprSBiT708Xf8roc05N3jsqZKiRDuYtBc= Subject key identifier: 3A:EA:49:33:2E:8B:94:80:3D:3C:E2:EA:47:74:CA:26:68:71:31:D0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829DAE6C2F0C895E9BBC180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/839141f4-5efc-302a-a301-26aea15fbaa1.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.205.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:da:e6:c2:f0:c8:95:e9:bb:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=1d10bec2-325e-4223-8d5e-2a1450b9c8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:52:5f:6c:a4:c9:44:48:cd:77:96:7c:95:af: 36:01:27:e4:7d:13:28:41:b0:21:73:50:1e:67:e7: e1:0f:4b:11:fc:9c:bb:59:53:e4:0f:8a:66:c1:8d: cb:70:48:18:c5:38:61:d3:7c:13:32:84:7e:f5:f2: be:fd:53:33:07:cf:49:72:94:8b:d2:a1:b6:fc:e1: 97:7a:a4:88:4e:27:f6:83:48:04:90:f6:55:34:d5: b3:02:43:11:ee:56:4e:77:61:dc:e3:f5:b6:ed:4f: f5:eb:b0:e3:96:62:d9:67:6b:0c:1a:c2:8b:4c:fa: ea:15:f0:be:52:da:71:f0:23:b7:7a:23:aa:57:02: 1a:7c:17:e1:e9:c4:86:d3:00:09:32:75:e2:28:06: df:f4:7d:ea:9b:02:a5:58:09:bd:21:22:3f:aa:10: e6:57:45:4a:14:07:0c:7f:e1:10:50:71:98:40:6a: 97:d3:fc:e7:e9:cf:f4:6d:35:f2:54:6d:ff:7b:e4: b8:9f:e9:43:23:d1:21:79:64:81:bc:e3:2b:03:31: a5:c4:e1:73:a1:76:04:3d:6a:43:36:33:17:8c:c7: e0:96:4a:59:39:61:20:09:19:f5:7a:b7:ea:81:09: c5:97:d5:6c:36:c1:7b:ee:fb:c5:cf:14:c5:62:04: 80:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EA:49:33:2E:8B:94:80:3D:3C:E2:EA:47:74:CA:26:68:71:31:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/839141f4-5efc-302a-a301-26aea15fbaa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:c7:af:97:56:32:27:3b:0d:96:a1:6b:28:b1:f5:d8:1a:6f: 9a:c4:83:ff:a1:0c:70:1a:a8:3b:08:3c:41:cd:e7:47:e8:b9: f7:b3:53:eb:1b:c0:7f:77:73:4a:20:ee:ae:34:8b:5f:0c:8e: 7a:72:2a:5f:17:41:84:e8:9f:b5:2d:64:06:0f:e7:be:b7:54: 72:08:e7:61:9b:c0:c6:bd:e6:13:95:97:c2:46:36:5b:56:2e: 4f:fb:ad:77:06:a0:c7:f1:1e:59:c4:bf:65:d2:ea:3f:f5:c7: 22:34:c6:55:4d:8c:30:08:a4:16:7c:9d:2e:c5:85:38:20:26: d5:34:5e:45:5d:7f:80:f2:1a:c0:ac:3b:21:1d:77:1e:f1:60: f5:7b:b4:55:2e:4d:fb:96:4d:7a:46:30:53:b1:d4:0d:a3:3f: 90:ba:28:74:80:f3:6f:8d:f5:cc:b6:94:1b:7f:4f:f3:5d:2a: 70:7b:88:43:29:da:27:42:2e:c5:8a:75:cd:9e:4c:8c:23:41: a5:0a:b4:6f:9a:c5:9a:60:4e:37:50:72:69:60:1f:1b:4e:a2: a2:c0:16:20:c3:38:f8:4b:0b:a0:8a:e8:59:c5:64:f7:49:f5: c5:df:f2:ca:fb:ab:f2:ee:47:14:a2:01:a6:0a:94:13:ca:dd: 74:55:0d:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdrmwvDIlem7wYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MWQxMGJlYzItMzI1ZS00MjIzLThkNWUtMmExNDUwYjljOGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFJfbKTJREjNd5Z8la82ASfkfRMoQbAhc1Ae Z+fhD0sR/Jy7WVPkD4pmwY3LcEgYxThh03wTMoR+9fK+/VMzB89JcpSL0qG2/OGX eqSITif2g0gEkPZVNNWzAkMR7lZOd2Hc4/W27U/167DjlmLZZ2sMGsKLTPrqFfC+ Utpx8CO3eiOqVwIafBfh6cSG0wAJMnXiKAbf9H3qmwKlWAm9ISI/qhDmV0VKFAcM f+EQUHGYQGqX0/zn6c/0bTXyVG3/e+S4n+lDI9EheWSBvOMrAzGlxOFzoXYEPWpD NjMXjMfglkpZOWEgCRn1erfqgQnFl9VsNsF77vvFzxTFYgSAdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrqSTMui5SAPTzi6kd0yiZocTHQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODM5MTQxZjQtNWVmYy0z MDJhLWEzMDEtMjZhZWExNWZiYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF83VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXHr5dWMic7DZahayix9dgab5rEg/+hDHAaqDsIPEHN50foufezU+sb wH93c0og7q40i18MjnpyKl8XQYTon7UtZAYP5763VHII52GbwMa95hOVl8JGNltW Lk/7rXcGoMfxHlnEv2XS6j/1xyI0xlVNjDAIpBZ8nS7FhTggJtU0XkVdf4DyGsCs OyEddx7xYPV7tFUuTfuWTXpGMFOx1A2jP5C6KHSA82+N9cy2lBt/T/NdKnB7iEMp 2idCLsWKdc2eTIwjQaUKtG+axZpgTjdQcmlgHxtOoqLAFiDDOPhLC6CK6FnFZPdJ 9cXf8sr7q/LuRxSiAaYKlBPK3XRVDRo= -----END CERTIFICATE-----Generated at Sat Apr 26 19:10:41 2025 by rpki-client