$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87929612-bcbe-3cd7-b635-f1d289884be4.roa File: 87929612-bcbe-3cd7-b635-f1d289884be4.roa (raw, json) Hash identifier: E6FfgG4TFUIYleKZM9yxJreNqhmZ9IEpnW7XpSKkRGA= Subject key identifier: 8D:74:3E:A6:70:4C:F0:83:93:8A:B5:B9:F8:5B:B2:4E:EE:A8:ED:0E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858497544697382A8229A05EF5480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87929612-bcbe-3cd7-b635-f1d289884be4.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.223.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:69:73:82:a8:22:9a:05:ef:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=85dd9daa-a376-464f-bd27-38847bcf7d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:44:37:ca:74:0b:05:9a:4e:0e:36:22:ad:6c: 8f:6b:c0:da:26:1d:6c:80:7d:55:9d:09:fa:73:1b: c6:86:42:b0:e7:f0:75:12:e6:83:cc:e4:15:0c:9a: 74:c4:80:50:1a:c8:c0:24:83:89:1a:55:b3:b4:55: 88:ad:aa:c6:5c:cc:43:d3:6f:be:89:76:ed:b8:56: df:a6:96:1c:61:50:00:cb:71:20:57:f8:b0:f7:12: 7f:4e:ef:d2:af:4a:de:c7:f1:e1:0b:4c:a6:62:fc: 50:02:41:2d:27:ea:27:d4:f4:d3:71:af:b5:db:7e: da:a5:b4:3b:fa:4e:8c:7d:6b:59:81:a2:54:d0:78: 63:e6:49:3b:f0:ad:44:48:4d:45:59:4f:3f:5c:dd: ab:c1:dd:f5:e8:cf:35:10:8b:6e:4e:9c:0b:69:95: cf:ee:b8:a6:df:c1:e2:7d:3d:45:51:7a:97:8c:8d: 57:9e:1a:3f:3f:d6:48:51:4a:c4:cf:51:83:d5:74: 5e:da:01:49:b2:a5:78:6f:78:0c:10:d0:2c:ba:5a: fb:b8:00:78:d9:45:d0:9f:fc:52:d4:f2:56:f0:69: e2:64:ae:c4:79:be:a3:8a:93:9d:a7:98:0b:d2:1b: 52:01:d8:a2:f5:be:2e:e7:cc:74:99:94:5c:95:d9: 81:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:74:3E:A6:70:4C:F0:83:93:8A:B5:B9:F8:5B:B2:4E:EE:A8:ED:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87929612-bcbe-3cd7-b635-f1d289884be4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:a4:5a:43:7c:ab:2c:1d:b8:82:99:af:6b:45:8e:c5:16:f1: 0c:1e:5b:37:46:8b:81:15:2d:b7:a2:f9:d8:8b:e8:20:aa:95: b9:18:26:75:cc:71:d8:26:b5:b2:37:9f:cd:55:04:a0:9e:91: ec:3e:e1:75:80:3f:c1:dc:95:60:d8:75:5a:85:04:74:43:88: ad:b9:93:bf:b4:ae:bd:9c:68:cb:e7:7d:42:7d:99:8d:c8:97: bc:17:72:27:c6:03:43:98:dc:76:c9:04:04:83:33:6b:0b:bb: 36:06:28:2e:32:72:ac:4b:14:70:55:0c:a5:3c:fa:ab:8e:f1: 2e:ee:93:22:bf:51:e4:05:47:ae:78:66:50:db:b3:16:a0:5b: cb:7c:a4:3a:0a:0b:07:18:78:a9:d5:87:ff:ad:97:dd:bc:03: ae:db:43:dd:5a:13:1e:37:4c:cd:90:f4:11:87:66:75:e2:ba: 9c:06:8d:26:d8:b9:84:7f:e5:7a:52:25:7f:c5:fd:9a:0a:f5: 5e:44:91:6f:2b:9f:da:88:c0:3b:39:f5:26:5d:ea:e8:21:22: 93:78:6e:76:8e:46:72:46:bb:f2:bb:65:e2:38:c7:de:0e:aa: 6e:9e:82:a7:10:cd:75:87:c0:82:a4:15:71:1e:ae:47:63:31: 7e:17:3a:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RGlzgqgimgXvVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk ODVkZDlkYWEtYTM3Ni00NjRmLWJkMjctMzg4NDdiY2Y3ZDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUQ3ynQLBZpODjYirWyPa8DaJh1sgH1VnQn6 cxvGhkKw5/B1EuaDzOQVDJp0xIBQGsjAJIOJGlWztFWIrarGXMxD02++iXbtuFbf ppYcYVAAy3EgV/iw9xJ/Tu/Sr0rex/HhC0ymYvxQAkEtJ+on1PTTca+1237apbQ7 +k6MfWtZgaJU0Hhj5kk78K1ESE1FWU8/XN2rwd316M81EItuTpwLaZXP7rim38Hi fT1FUXqXjI1Xnho/P9ZIUUrEz1GD1XRe2gFJsqV4b3gMENAsulr7uAB42UXQn/xS 1PJW8GniZK7Eeb6jipOdp5gL0htSAdii9b4u58x0mZRcldmBtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI10PqZwTPCDk4q1ufhbsk7uqO0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODc5Mjk2MTItYmNiZS0z Y2Q3LWI2MzUtZjFkMjg5ODg0YmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF98rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHukWkN8qywduIKZr2tFjsUW8QweWzdGi4EVLbei+diL6CCqlbkYJnXM cdgmtbI3n81VBKCekew+4XWAP8HclWDYdVqFBHRDiK25k7+0rr2caMvnfUJ9mY3I l7wXcifGA0OY3HbJBASDM2sLuzYGKC4ycqxLFHBVDKU8+quO8S7ukyK/UeQFR654 ZlDbsxagW8t8pDoKCwcYeKnVh/+tl928A67bQ91aEx43TM2Q9BGHZnXiupwGjSbY uYR/5XpSJX/F/ZoK9V5EkW8rn9qIwDs59SZd6ughIpN4bnaORnJGu/K7ZeI4x94O qm6egqcQzXWHwIKkFXEerkdjMX4XOgs= -----END CERTIFICATE-----Generated at Sat Apr 26 20:24:14 2025 by rpki-client