$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f34e919-4daa-3e99-ad31-4233ff3492a9.roa File: 8f34e919-4daa-3e99-ad31-4233ff3492a9.roa (raw, json) Hash identifier: ofVx5u8w95QFLJ0LJURRdPViKr3CrfMp9EA1kH9sGZg= Subject key identifier: 91:EA:A6:BA:39:A6:B8:57:98:F1:D5:22:84:20:60:E2:70:2A:D9:5B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498769D3FF3211CFBC706B1580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f34e919-4daa-3e99-ad31-4233ff3492a9.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.200.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:d3:ff:32:11:cf:bc:70:6b:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=3e900d7e-02f0-46fd-97da-1bfeec4fde34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bc:77:2b:fe:1d:e4:c3:0b:a9:a6:d5:d8:4c: 71:80:aa:54:c2:22:0c:f2:cb:4f:ca:11:6c:aa:eb: 19:8f:f1:d9:80:1c:2a:6c:81:2a:5e:68:88:4f:89: d7:7c:6b:1c:0b:42:5f:0e:6c:02:80:78:70:f4:09: 37:34:f3:f5:69:83:b9:94:a5:fb:e9:87:bc:df:aa: 00:41:37:e0:97:52:07:91:2d:8f:bf:1f:df:51:8b: ee:28:8d:e3:f2:e6:be:94:e3:75:4a:3c:9b:fe:96: 93:67:d2:05:3b:81:55:26:2f:25:ab:be:a6:16:17: 96:95:83:95:19:ea:f2:46:7b:0b:4d:03:20:32:a5: 94:7c:fa:5b:e9:89:82:95:38:96:83:52:67:8f:60: f7:f6:99:b5:34:00:eb:08:9b:a4:4f:e6:49:69:2a: fe:63:16:7d:cc:83:a4:dc:93:13:a1:ec:e6:e3:5c: 47:28:93:80:e3:9e:ba:b0:37:7b:eb:c6:a8:8f:0e: 6b:56:2d:25:eb:37:bf:e9:c3:ad:69:4f:80:cf:67: f4:d4:15:45:1e:20:c8:59:03:79:22:5b:f8:f6:a9: 17:48:ed:e3:d4:79:66:a7:64:73:2f:8f:f9:1a:24: 55:bd:16:ff:87:ad:11:d4:c5:e6:9c:aa:4e:8a:d8: a2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:EA:A6:BA:39:A6:B8:57:98:F1:D5:22:84:20:60:E2:70:2A:D9:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f34e919-4daa-3e99-ad31-4233ff3492a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:1b:d1:63:3f:c3:e2:d4:b1:8f:fa:e0:88:da:c9:99:a4:a1: 99:16:03:39:5f:30:7c:76:f7:ea:35:5b:fe:5f:e0:45:c2:dd: 0c:11:a2:f8:ea:1f:74:04:f0:00:51:9c:06:79:60:3b:06:84: 14:5f:08:8a:68:f2:55:1d:17:fb:b9:f0:54:44:77:c2:af:84: f7:6e:d1:a7:ec:5c:a9:2f:2a:3a:4d:01:63:d4:be:10:12:95: df:13:61:e3:c7:43:af:ae:f2:5b:0d:fe:cd:37:1c:4e:e4:03: 91:db:08:c4:88:fe:cf:5e:f7:71:07:1a:42:51:68:a9:22:6e: 81:73:0d:32:36:de:f4:13:77:90:d1:77:0c:ac:c0:83:4b:6a: 68:30:73:7f:c3:fa:2f:c2:f0:d3:1a:3d:d7:3d:95:4e:f5:46: d7:a3:8e:86:a3:90:78:61:fd:19:b7:43:f3:cd:8c:8f:9e:bb: 52:db:fd:05:bd:1b:ef:50:dc:6a:86:d3:38:fa:30:e3:ee:11: 62:01:f3:27:4f:6a:5b:f8:9d:04:72:2c:e7:e3:e9:0a:ef:1c: 55:38:83:a4:fa:75:9b:89:54:14:34:75:f6:47:e4:3d:e1:82: f3:69:b7:14:e1:ed:8c:4a:2a:b9:c5:6a:ce:d1:c2:05:7b:b9: 26:36:f8:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHadP/MhHPvHBrFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk M2U5MDBkN2UtMDJmMC00NmZkLTk3ZGEtMWJmZWVjNGZkZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7x3K/4d5MMLqabV2ExxgKpUwiIM8stPyhFs qusZj/HZgBwqbIEqXmiIT4nXfGscC0JfDmwCgHhw9Ak3NPP1aYO5lKX76Ye836oA QTfgl1IHkS2Pvx/fUYvuKI3j8ua+lON1Sjyb/paTZ9IFO4FVJi8lq76mFheWlYOV GeryRnsLTQMgMqWUfPpb6YmClTiWg1Jnj2D39pm1NADrCJukT+ZJaSr+YxZ9zIOk 3JMToezm41xHKJOA4566sDd768aojw5rVi0l6ze/6cOtaU+Az2f01BVFHiDIWQN5 Ilv49qkXSO3j1Hlmp2RzL4/5GiRVvRb/h60R1MXmnKpOitiilQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHqpro5prhXmPHVIoQgYOJwKtlbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGYzNGU5MTktNGRhYS0z ZTk5LWFkMzEtNDIzM2ZmMzQ5MmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8hYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAb0WM/w+LUsY/64IjayZmkoZkWAzlfMHx29+o1W/5f4EXC3QwRovjq H3QE8ABRnAZ5YDsGhBRfCIpo8lUdF/u58FREd8KvhPdu0afsXKkvKjpNAWPUvhAS ld8TYePHQ6+u8lsN/s03HE7kA5HbCMSI/s9e93EHGkJRaKkiboFzDTI23vQTd5DR dwyswINLamgwc3/D+i/C8NMaPdc9lU71RtejjoajkHhh/Rm3Q/PNjI+eu1Lb/QW9 G+9Q3GqG0zj6MOPuEWIB8ydPalv4nQRyLOfj6QrvHFU4g6T6dZuJVBQ0dfZH5D3h gvNptxTh7YxKKrnFas7RwgV7uSY2+OE= -----END CERTIFICATE-----Generated at Sat Apr 26 16:03:19 2025 by rpki-client