$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/849ed731-b636-320e-8182-34b0590c9939.roa File: 849ed731-b636-320e-8182-34b0590c9939.roa (raw, json) Hash identifier: vH3q2MqsOn/IrDYYPztD8FMl0neUdww1firmafjx8d0= Subject key identifier: FC:C8:C0:68:D4:38:AD:A5:D6:B9:B5:DC:3E:39:E1:A2:C7:97:05:26 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF71382DB0C901588C7680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/849ed731-b636-320e-8182-34b0590c9939.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 35994 IP address blocks: 23.203.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:71:38:2d:b0:c9:01:58:8c:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=fc0c784e-ee0d-464c-b387-893eb182a739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:86:7e:40:f8:73:73:e8:bf:4e:f0:8b:4b:68: 08:da:77:69:2d:76:dc:43:12:9f:62:bd:8f:d4:c2: 9f:96:5f:53:31:95:cf:e3:d0:d3:d7:97:12:fe:80: 75:ba:c9:a5:67:9d:09:d6:fc:b9:c8:12:49:50:c7: 41:d5:8d:a8:c9:34:1c:2c:b1:05:ae:17:32:8f:e6: 18:ad:42:4a:a3:52:dd:77:4b:a7:50:e6:bf:c0:29: 9d:70:9c:71:e2:62:17:69:36:01:0d:e5:cb:1f:2a: 5e:fc:c7:a5:f7:7f:c5:71:0e:3f:93:d0:ca:33:66: 81:78:35:81:32:2d:b8:4c:ec:98:81:b4:3b:bd:f4: 77:20:df:67:bc:23:10:5c:70:5b:41:c3:86:e2:a0: 5b:c3:8a:6e:4d:be:74:bb:7d:17:db:76:e1:50:02: 60:42:d3:ba:46:f5:9b:85:d1:ee:26:20:ac:c8:d4: 40:01:85:4e:f6:05:d0:3a:b4:03:4d:de:b2:9f:24: 16:aa:fb:3d:9b:e8:6a:92:5d:26:f2:77:55:68:24: a9:03:e7:6c:19:db:3d:01:6c:29:8e:d4:1c:9c:1e: af:17:e9:79:b3:97:91:e5:9e:52:77:ca:cf:db:f9: e6:3c:2f:71:63:ba:4e:77:fe:fa:eb:86:fb:b3:10: eb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C8:C0:68:D4:38:AD:A5:D6:B9:B5:DC:3E:39:E1:A2:C7:97:05:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/849ed731-b636-320e-8182-34b0590c9939.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:70:0b:d6:9a:a5:bf:fb:cf:99:42:21:61:fc:36:d0:70:b1: 3a:91:ba:2e:10:76:0a:68:48:14:60:6b:6f:32:8d:1f:c0:28: 02:95:10:d8:4e:a0:2b:f6:54:77:7d:f8:00:2b:5e:07:a5:61: 34:2d:b2:85:76:4d:8e:6c:53:59:8f:b7:f4:3f:e5:76:06:cc: 73:7f:f6:f4:d6:c9:22:cd:8d:68:b9:85:eb:32:cd:45:e3:1d: 3b:ea:78:37:69:b4:24:f8:86:6c:dc:33:82:e3:c6:45:1c:eb: 70:d5:3e:e9:7f:50:f2:1c:33:f3:f9:90:e9:5c:97:1f:15:f8: 25:d5:df:02:13:9f:5f:51:b7:e6:5f:eb:f7:4c:fd:05:0e:f4: 96:9d:06:88:ee:8a:a6:88:27:70:ac:be:4f:69:fe:8e:91:1d: 1b:03:a4:a9:d8:73:9b:ca:d1:96:ec:32:bb:d8:3b:5b:26:fc: 1e:ef:46:92:95:dd:e3:cb:42:e4:ed:11:83:d4:92:97:fc:78: 40:1c:97:43:2a:54:40:73:b1:eb:07:f3:6c:a6:3b:ed:b9:63: fc:ab:aa:28:96:70:0d:f0:d7:55:da:fa:85:4f:7b:ad:71:11: a4:8f:a9:c6:4c:0a:0f:bf:84:10:d2:6f:79:fc:c2:13:36:ab: 84:a7:2d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz3E4LbDJAViMdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZmMwYzc4NGUtZWUwZC00NjRjLWIzODctODkzZWIxODJhNzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIZ+QPhzc+i/TvCLS2gI2ndpLXbcQxKfYr2P 1MKfll9TMZXP49DT15cS/oB1usmlZ50J1vy5yBJJUMdB1Y2oyTQcLLEFrhcyj+YY rUJKo1Ldd0unUOa/wCmdcJxx4mIXaTYBDeXLHype/Mel93/FcQ4/k9DKM2aBeDWB Mi24TOyYgbQ7vfR3IN9nvCMQXHBbQcOG4qBbw4puTb50u30X23bhUAJgQtO6RvWb hdHuJiCsyNRAAYVO9gXQOrQDTd6ynyQWqvs9m+hqkl0m8ndVaCSpA+dsGds9AWwp jtQcnB6vF+l5s5eR5Z5Sd8rP2/nmPC9xY7pOd/7664b7sxDrfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzIwGjUOK2l1rm13D454aLHlwUmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODQ5ZWQ3MzEtYjYzNi0z MjBlLTgxODItMzRiMDU5MGM5OTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8utMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpwC9aapb/7z5lCIWH8NtBwsTqRui4QdgpoSBRga28yjR/AKAKVENhO oCv2VHd9+AArXgelYTQtsoV2TY5sU1mPt/Q/5XYGzHN/9vTWySLNjWi5hesyzUXj HTvqeDdptCT4hmzcM4LjxkUc63DVPul/UPIcM/P5kOlclx8V+CXV3wITn19Rt+Zf 6/dM/QUO9JadBojuiqaIJ3Csvk9p/o6RHRsDpKnYc5vK0ZbsMrvYO1sm/B7vRpKV 3ePLQuTtEYPUkpf8eEAcl0MqVEBzsesH82ymO+25Y/yrqiiWcA3w11Xa+oVPe61x EaSPqcZMCg+/hBDSb3n8whM2q4SnLSE= -----END CERTIFICATE-----Generated at Sun Apr 27 05:45:08 2025 by rpki-client