$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898773ad-9e6a-34d6-9267-847bc44bf684.roa File: 898773ad-9e6a-34d6-9267-847bc44bf684.roa (raw, json) Hash identifier: NXNMVdAn6fxtK6KVUXKftO0LkZva7jnRbgjQgWEwtJo= Subject key identifier: 40:FD:7B:CB:66:CA:F3:E9:39:EB:C9:E7:3F:00:F3:62:91:71:84:34 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829DC83D77C685088458200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898773ad-9e6a-34d6-9267-847bc44bf684.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.206.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:dc:83:d7:7c:68:50:88:45:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=6f10b2ea-8d70-412e-ac2d-962491946fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0a:d8:c3:b0:a2:1a:e2:b9:e3:b1:36:ba:44: 28:99:54:89:8a:60:ac:88:c4:51:3d:f4:05:38:f9: 2a:05:d7:a3:77:d5:7f:27:81:a3:95:a6:30:c7:0b: f8:95:13:e0:59:36:00:f9:0e:d0:10:a1:70:85:af: a6:04:39:ab:03:d4:7f:bb:8b:78:f9:5a:06:9c:a5: f6:c4:d5:b7:d3:cc:ad:ca:e6:21:b5:86:75:78:d5: 4c:7b:c9:fe:7b:69:8c:62:6f:64:5f:60:9c:77:f4: d0:b9:7e:bc:fa:91:48:6a:11:b8:b1:54:f3:1d:d0: a7:51:e4:ae:26:ef:e6:d7:0c:56:f3:1d:f2:c1:b3: 0b:ac:d1:88:cf:dd:6f:e7:c6:6f:50:f5:7c:d4:3f: 3e:f0:e2:45:ba:6d:db:d1:86:8b:d2:23:d9:df:09: b3:16:81:2c:e8:7f:d2:87:4b:25:39:61:b1:ee:74: 9a:d3:cc:b4:f1:a7:15:02:f9:bb:1b:53:62:f5:7f: 77:03:9e:5b:4d:13:72:8a:f3:b6:0d:d5:51:1a:cb: 77:8a:6c:34:2b:5f:bf:11:75:c6:c7:ef:ab:94:25: 74:83:22:2c:0a:68:af:e0:65:51:50:b2:87:d9:08: 5f:92:a0:fa:ea:0f:cc:78:55:8d:fb:6b:a2:26:4f: 36:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FD:7B:CB:66:CA:F3:E9:39:EB:C9:E7:3F:00:F3:62:91:71:84:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898773ad-9e6a-34d6-9267-847bc44bf684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:71:a4:6a:51:ab:04:04:00:09:60:7b:d7:48:81:45:58:df: ef:52:ca:bb:35:25:51:67:fa:36:94:53:b3:9e:4c:e9:f5:c1: 7a:6c:8d:55:e6:94:be:e6:d6:05:e7:4b:12:5e:d9:63:78:fd: 03:6e:a5:73:82:ca:ec:0f:87:b0:32:12:20:26:cd:25:3b:98: c9:37:3d:1a:72:4a:81:a4:b5:bf:7a:f8:27:1f:32:a9:5f:2d: 12:ed:6c:0e:4a:54:83:c4:42:2a:c2:ce:09:a2:9e:34:e9:e7: 9d:04:d0:e8:e2:8c:e5:6f:ae:ce:d9:34:10:39:1d:54:19:ac: 10:62:c3:e1:9e:c7:33:f3:14:b5:ea:aa:a8:f9:69:81:bb:26: be:c9:38:9e:0d:16:41:03:ec:63:08:54:69:1c:e4:62:23:f2: 30:4f:26:ee:d3:bb:c3:b3:83:48:0c:ca:82:dd:7d:09:cb:6e: 89:cd:92:f7:06:d2:32:4b:13:fe:ef:d5:81:6d:97:c9:99:4e: f1:46:77:8f:98:1d:ab:a8:d9:2d:d1:ac:b2:87:ad:f7:14:48: f7:49:44:bf:c8:eb:23:ff:3e:c2:1e:e4:2a:e9:6a:b7:d0:b4: 9e:11:a3:52:d0:1b:5a:a3:8a:bf:63:ef:2f:5d:03:7d:7b:5e: 09:b6:2b:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdyD13xoUIhFggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NmYxMGIyZWEtOGQ3MC00MTJlLWFjMmQtOTYyNDkxOTQ2ZmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgrYw7CiGuK547E2ukQomVSJimCsiMRRPfQF OPkqBdejd9V/J4GjlaYwxwv4lRPgWTYA+Q7QEKFwha+mBDmrA9R/u4t4+VoGnKX2 xNW308ytyuYhtYZ1eNVMe8n+e2mMYm9kX2Ccd/TQuX68+pFIahG4sVTzHdCnUeSu Ju/m1wxW8x3ywbMLrNGIz91v58ZvUPV81D8+8OJFum3b0YaL0iPZ3wmzFoEs6H/S h0slOWGx7nSa08y08acVAvm7G1Ni9X93A55bTRNyivO2DdVRGst3imw0K1+/EXXG x++rlCV0gyIsCmiv4GVRULKH2QhfkqD66g/MeFWN+2uiJk82IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFED9e8tmyvPpOevJ5z8A82KRcYQ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODk4NzczYWQtOWU2YS0z NGQ2LTkyNjctODQ3YmM0NGJmNjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF86+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxxpGpRqwQEAAlge9dIgUVY3+9Syrs1JVFn+jaUU7OeTOn1wXpsjVXm lL7m1gXnSxJe2WN4/QNupXOCyuwPh7AyEiAmzSU7mMk3PRpySoGktb96+CcfMqlf LRLtbA5KVIPEQirCzgminjTp550E0OjijOVvrs7ZNBA5HVQZrBBiw+GexzPzFLXq qqj5aYG7Jr7JOJ4NFkED7GMIVGkc5GIj8jBPJu7Tu8Ozg0gMyoLdfQnLbonNkvcG 0jJLE/7v1YFtl8mZTvFGd4+YHauo2S3RrLKHrfcUSPdJRL/I6yP/PsIe5CrparfQ tJ4Ro1LQG1qjir9j7y9dA317Xgm2K5Y= -----END CERTIFICATE-----Generated at Sun Apr 27 00:19:43 2025 by rpki-client