$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e4caff8-6e28-37b4-b409-c9b47c4ce86f.roa File: 8e4caff8-6e28-37b4-b409-c9b47c4ce86f.roa (raw, json) Hash identifier: r4Ph5QzWhL1jFNtT5UtcoSpxZJ4JPQ/IwfVEYMoKMTo= Subject key identifier: 5F:83:EF:6A:39:28:6F:DF:18:E0:77:37:91:6A:91:AB:FA:E5:00:F1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829D77AB1CB08D9D22EE5A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e4caff8-6e28-37b4-b409-c9b47c4ce86f.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.204.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d7:7a:b1:cb:08:d9:d2:2e:e5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=cc022445-b312-403f-a5ea-fad737de639b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2f:31:ad:29:8a:18:7f:90:d6:c4:0c:3d:f9: be:d5:13:63:2f:12:62:a3:f4:fa:45:c8:a0:90:bb: 83:65:ca:e6:db:70:0f:08:c8:45:09:e4:fd:56:56: c1:cb:ea:34:63:0b:94:d8:f4:31:d4:4b:70:b8:a2: 7d:86:ef:16:bf:e2:8f:7a:1b:0c:77:71:93:06:e0: 85:7e:3d:1a:63:b8:da:ab:ad:b0:50:9e:65:09:44: 30:ef:a7:5a:9f:3f:a0:73:97:d8:b1:ca:35:a2:08: 49:37:72:da:e7:4a:2b:a3:5b:b3:d9:6f:61:81:84: 1c:45:96:ba:0c:5d:85:b7:b5:cb:09:f8:0b:59:12: 4e:7a:b8:89:33:79:31:ae:26:32:7a:1b:30:b8:06: 00:d3:a0:c6:64:b0:b6:cf:55:9a:7c:ae:2c:28:f4: 53:bb:3b:4f:3e:81:92:f4:3c:3a:1d:e8:90:e2:ee: a5:5b:4c:a6:68:2e:22:36:65:70:2f:e7:48:f9:02: 6d:68:23:b9:86:12:c7:c7:c1:1d:0c:ba:2e:e7:bb: ac:55:91:8e:0b:8d:03:fa:7c:21:d7:d3:e9:2f:2f: a8:04:cd:ef:e1:e3:12:d6:da:fb:71:ec:8b:da:0c: 54:17:f2:41:7e:1e:c8:82:bb:18:5d:dd:f1:de:a8: e1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:83:EF:6A:39:28:6F:DF:18:E0:77:37:91:6A:91:AB:FA:E5:00:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e4caff8-6e28-37b4-b409-c9b47c4ce86f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:4e:24:98:10:32:25:ad:c1:f8:32:be:77:dd:53:dd:a1:a0: 35:54:c2:ad:2a:3d:c8:74:45:ab:83:ae:45:6c:9f:98:e3:b1: 2f:c6:06:d5:c2:b0:70:61:8a:71:15:c3:02:b5:cf:c4:38:78: 9a:a6:78:ea:cb:d2:20:58:a7:fd:16:48:82:c9:81:16:3a:03: 64:61:79:c1:58:ca:00:70:99:34:30:62:c1:c1:5e:1e:09:62: 79:b8:f7:ac:ca:e5:28:03:69:7b:d4:7b:b8:14:71:bd:9d:82: 5c:65:5b:ea:e7:57:f9:0b:4a:8b:17:6c:9a:4f:1d:8d:42:f8: 8a:b4:3e:95:80:8f:56:e8:a9:c7:1d:52:ef:2a:08:ab:1b:91: 1b:64:06:34:a1:a6:80:8b:05:d6:63:78:e4:1e:38:8e:22:08: ee:15:65:41:a4:b9:ac:75:c1:8d:0e:85:79:6e:6f:08:da:b9: 52:fb:64:78:7e:67:dd:0f:1a:e0:1e:50:a9:c7:92:0a:61:98: eb:94:ea:09:02:45:c3:50:8f:70:c1:a9:d9:27:76:dc:5f:47: 1c:73:4f:08:b1:5d:3c:0c:47:86:c4:f1:69:26:60:94:7d:26: ab:f7:3e:2d:c1:21:f2:bd:ce:4d:d6:b8:39:2e:00:83:01:14: 59:b3:39:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdd6scsI2dIu5aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk Y2MwMjI0NDUtYjMxMi00MDNmLWE1ZWEtZmFkNzM3ZGU2MzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4y8xrSmKGH+Q1sQMPfm+1RNjLxJio/T6Rcig kLuDZcrm23APCMhFCeT9VlbBy+o0YwuU2PQx1EtwuKJ9hu8Wv+KPehsMd3GTBuCF fj0aY7jaq62wUJ5lCUQw76danz+gc5fYsco1oghJN3La50oro1uz2W9hgYQcRZa6 DF2Ft7XLCfgLWRJOeriJM3kxriYyehswuAYA06DGZLC2z1WafK4sKPRTuztPPoGS 9Dw6HeiQ4u6lW0ymaC4iNmVwL+dI+QJtaCO5hhLHx8EdDLou57usVZGOC40D+nwh 19PpLy+oBM3v4eMS1tr7ceyL2gxUF/JBfh7IgrsYXd3x3qjhvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+D72o5KG/fGOB3N5Fqkav65QDxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGU0Y2FmZjgtNmUyOC0z N2I0LWI0MDktYzliNDdjNGNlODZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8xKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtOJJgQMiWtwfgyvnfdU92hoDVUwq0qPch0RauDrkVsn5jjsS/GBtXC sHBhinEVwwK1z8Q4eJqmeOrL0iBYp/0WSILJgRY6A2RhecFYygBwmTQwYsHBXh4J Ynm496zK5SgDaXvUe7gUcb2dglxlW+rnV/kLSosXbJpPHY1C+Iq0PpWAj1boqccd Uu8qCKsbkRtkBjShpoCLBdZjeOQeOI4iCO4VZUGkuax1wY0OhXlubwjauVL7ZHh+ Z90PGuAeUKnHkgphmOuU6gkCRcNQj3DBqdkndtxfRxxzTwixXTwMR4bE8WkmYJR9 Jqv3Pi3BIfK9zk3WuDkuAIMBFFmzOSA= -----END CERTIFICATE-----Generated at Sat Apr 26 17:46:00 2025 by rpki-client