$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89eebadf-f4ff-3daa-9039-1f22d85806be.roa File: 89eebadf-f4ff-3daa-9039-1f22d85806be.roa (raw, json) Hash identifier: rRvQShL0xP125TSDuK8OZR19Kbe53hvmH+MF7aa/cLo= Subject key identifier: 06:61:9B:35:AC:3A:64:76:C1:70:0D:85:1B:76:54:AB:68:6D:99:C2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498769BEED48F38BE512F12EC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89eebadf-f4ff-3daa-9039-1f22d85806be.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.200.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:be:ed:48:f3:8b:e5:12:f1:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=7c50c936-9a2c-4191-8dc6-b535d8766c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a5:ee:c8:e5:de:60:cb:ec:5b:a4:e6:db:7f: f4:3d:79:48:cf:99:af:41:14:15:b8:f9:22:0a:d1: df:27:3f:80:f6:6b:3d:c8:3a:50:ad:bd:d0:40:c6: ca:7e:2d:4f:d8:7d:65:db:a1:10:99:32:32:2f:3e: ea:14:0d:73:a9:3a:82:8e:49:56:17:22:db:78:60: 9b:3b:93:fb:8a:82:b3:ff:5f:3e:0e:fe:0b:d4:3b: 1e:b7:53:1b:c4:a1:fe:ea:ba:39:1f:78:36:41:aa: 71:c2:e7:65:04:46:dc:3b:0d:e0:0d:f8:b5:8f:ee: 7b:d6:ba:f8:01:b8:f9:57:df:e5:df:8d:45:45:1c: 7c:08:55:24:e4:60:c9:0b:4e:68:a1:cb:5e:24:9f: 38:93:fb:ff:67:ba:72:a5:45:71:78:06:8f:24:93: ad:ef:5f:a0:35:ae:8c:5d:18:44:92:cc:35:d9:c3: f7:11:39:5a:26:44:96:28:d1:de:c4:57:9c:df:fb: 06:71:17:e7:72:8d:bc:a7:4a:cb:26:d9:2f:8d:a4: d7:47:84:c7:24:23:5f:9a:7f:1b:ae:10:97:34:86: b4:7c:d2:63:97:3a:77:0e:a5:81:21:29:eb:db:d7: 0c:15:dd:80:82:3b:91:a8:fe:86:70:e4:cc:9e:32: f2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:61:9B:35:AC:3A:64:76:C1:70:0D:85:1B:76:54:AB:68:6D:99:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89eebadf-f4ff-3daa-9039-1f22d85806be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:12:bc:d2:df:25:ec:ba:3b:15:11:72:47:ea:13:14:7f:8a: 58:88:77:68:b8:0b:19:0b:49:eb:de:09:33:66:49:e6:e2:1e: 37:9a:26:d4:9d:f8:08:55:0d:8a:a9:f8:08:42:a2:4f:d7:8a: 89:5f:5d:60:02:76:f7:b3:a8:63:8a:da:77:29:ee:5e:8d:86: 7f:0b:69:08:5b:ab:d8:18:8c:2f:d9:4b:f1:e1:3a:89:a1:b4: d7:e7:ff:a8:3e:0b:ec:80:04:f1:e3:14:27:bb:77:9f:a0:5e: 9b:17:50:2d:b0:8c:88:e4:c6:a8:a3:c8:1e:2d:13:08:b9:81: 7f:b7:50:49:c8:d5:31:0f:b0:77:77:1f:45:25:4f:32:d4:49: 6b:37:de:0b:6f:f6:e9:fb:be:13:9f:69:bc:89:d2:04:ed:e4: c7:ce:fb:25:a7:74:1e:81:0c:35:0b:bb:55:fb:68:7a:c6:d2: f3:d2:45:7b:f1:95:94:aa:f4:1f:ea:b8:ec:91:a3:d6:53:31: c7:d0:4b:01:f9:03:d2:25:64:0c:10:10:0e:a7:2f:d6:6e:9a: f0:4d:ab:46:78:98:c4:39:a1:24:89:8f:bf:a3:70:8b:f1:e0: ad:68:65:f2:0b:b1:b3:a1:32:3d:d8:6c:89:46:6f:33:32:5d: a4:61:54:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHab7tSPOL5RLxLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk N2M1MGM5MzYtOWEyYy00MTkxLThkYzYtYjUzNWQ4NzY2YzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKXuyOXeYMvsW6Tm23/0PXlIz5mvQRQVuPki CtHfJz+A9ms9yDpQrb3QQMbKfi1P2H1l26EQmTIyLz7qFA1zqTqCjklWFyLbeGCb O5P7ioKz/18+Dv4L1Dset1MbxKH+6ro5H3g2QapxwudlBEbcOw3gDfi1j+571rr4 Abj5V9/l341FRRx8CFUk5GDJC05oocteJJ84k/v/Z7pypUVxeAaPJJOt71+gNa6M XRhEksw12cP3ETlaJkSWKNHexFec3/sGcRfnco28p0rLJtkvjaTXR4THJCNfmn8b rhCXNIa0fNJjlzp3DqWBISnr29cMFd2AgjuRqP6GcOTMnjLyTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZhmzWsOmR2wXANhRt2VKtobZnCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODllZWJhZGYtZjRmZi0z ZGFhLTkwMzktMWYyMmQ4NTgwNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8goMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkSvNLfJey6OxURckfqExR/iliId2i4CxkLSeveCTNmSebiHjeaJtSd +AhVDYqp+AhCok/XiolfXWACdvezqGOK2ncp7l6Nhn8LaQhbq9gYjC/ZS/HhOomh tNfn/6g+C+yABPHjFCe7d5+gXpsXUC2wjIjkxqijyB4tEwi5gX+3UEnI1TEPsHd3 H0UlTzLUSWs33gtv9un7vhOfabyJ0gTt5MfO+yWndB6BDDULu1X7aHrG0vPSRXvx lZSq9B/quOyRo9ZTMcfQSwH5A9IlZAwQEA6nL9ZumvBNq0Z4mMQ5oSSJj7+jcIvx 4K1oZfILsbOhMj3YbIlGbzMyXaRhVAU= -----END CERTIFICATE-----Generated at Sat Apr 26 18:03:12 2025 by rpki-client