$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f50ed89-5fd2-3b18-87d6-2fdd6cff9f6b.roa File: 8f50ed89-5fd2-3b18-87d6-2fdd6cff9f6b.roa (raw, json) Hash identifier: r5QmIDY3A/2fBvU6a5UvHyM7ZC0DTpgbaaS9fQypzQE= Subject key identifier: FF:D0:52:8A:25:0D:54:91:9B:35:36:2D:BC:C1:05:83:05:B1:28:C3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E0E0876407D9DE9E39C8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f50ed89-5fd2-3b18-87d6-2fdd6cff9f6b.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.204.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e0:e0:87:64:07:d9:de:9e:39:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=85d0e84a-a80d-4e54-bdb6-a491dfa8a826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b2:6c:d3:c5:ce:85:a8:3d:34:ad:2e:24:82: f1:27:da:21:b4:4e:e1:1f:f4:a4:7f:12:34:6d:f5: d7:c8:4d:35:e2:a1:f0:15:5e:70:b1:3a:68:82:ba: e1:32:fd:25:e5:99:4a:9f:81:d3:c0:62:d1:f3:48: 4a:22:ae:17:a5:42:1a:5e:dc:5b:c9:30:f0:12:62: f9:d2:3a:57:87:b2:64:19:22:6a:cc:8e:62:4b:e8: 07:cb:c2:9d:3c:04:9d:2b:a5:9b:1b:d2:15:5f:9b: 32:e2:65:50:92:17:03:10:be:99:b1:11:a7:8a:90: 61:9c:c6:52:9b:bb:82:e3:ad:e0:33:4d:94:d4:76: de:62:27:22:d6:48:32:14:72:04:cb:fa:54:d8:d3: 73:32:72:9a:c2:10:78:6e:bb:f2:62:3b:ba:99:21: af:39:eb:4e:de:a3:3b:4b:17:4e:62:d6:51:6a:67: dd:a2:c8:36:d1:fb:c9:96:a4:83:27:f3:09:ed:bd: 3e:4a:bb:fa:b5:ec:0d:af:18:79:8a:6d:25:ec:e1: a6:ed:52:a3:27:9c:6b:3c:04:ed:cb:57:e9:c0:72: dd:5f:8e:c5:5d:80:14:8d:63:5d:46:22:aa:37:05: 37:00:9c:d0:44:13:0d:e3:f3:e4:aa:3b:5b:4f:c0: be:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D0:52:8A:25:0D:54:91:9B:35:36:2D:BC:C1:05:83:05:B1:28:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f50ed89-5fd2-3b18-87d6-2fdd6cff9f6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:ff:5a:97:15:1f:13:e9:04:19:2e:1f:1d:80:16:dc:8b:49: d3:21:59:6f:cb:da:ad:18:28:16:29:d8:6e:54:13:de:0f:3e: 02:6b:26:0b:ec:8b:e6:41:d6:3b:ce:d2:d0:9c:bb:21:b0:e1: 14:61:91:1b:6f:80:bb:a2:d4:05:73:0a:9a:4f:7f:6b:dd:14: 6f:42:0b:b0:66:ed:d6:37:ad:a5:31:30:e0:86:6d:4a:03:4b: b3:25:18:d6:81:f7:e8:ac:47:56:d3:62:29:e1:64:da:06:8f: ed:fa:12:64:68:de:83:0b:b7:10:d5:ef:4c:55:b3:30:b2:e1: ce:86:6d:6c:d1:24:3e:63:81:f1:7b:1e:0b:08:9a:88:cb:65: 68:b7:f0:cd:f4:de:1e:c0:8b:d5:84:16:a9:63:7d:ee:49:29: f9:57:e3:c8:8b:cb:dc:fa:26:9e:24:b6:6a:0f:b2:50:6f:c2: 56:d4:cd:16:7e:d2:5c:ed:a8:fd:12:f1:4a:21:d3:aa:8e:c9: 78:8c:41:50:0f:52:e2:47:4a:8e:fa:61:8f:45:16:6f:ae:5a: ca:bd:6d:11:6b:28:6f:5a:a8:6f:47:8d:4b:d0:04:8f:2d:84: f6:e1:da:33:13:ac:dc:51:5f:d7:3e:d9:3a:0f:64:e3:3d:8d: 80:6a:e9:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKeDgh2QH2d6eOcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk ODVkMGU4NGEtYTgwZC00ZTU0LWJkYjYtYTQ5MWRmYThhODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrJs08XOhag9NK0uJILxJ9ohtE7hH/SkfxI0 bfXXyE014qHwFV5wsTpogrrhMv0l5ZlKn4HTwGLR80hKIq4XpUIaXtxbyTDwEmL5 0jpXh7JkGSJqzI5iS+gHy8KdPASdK6WbG9IVX5sy4mVQkhcDEL6ZsRGnipBhnMZS m7uC463gM02U1HbeYici1kgyFHIEy/pU2NNzMnKawhB4brvyYju6mSGvOetO3qM7 SxdOYtZRamfdosg20fvJlqSDJ/MJ7b0+Srv6tewNrxh5im0l7OGm7VKjJ5xrPATt y1fpwHLdX47FXYAUjWNdRiKqNwU3AJzQRBMN4/PkqjtbT8C+awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/QUoolDVSRmzU2LbzBBYMFsSjDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGY1MGVkODktNWZkMi0z YjE4LTg3ZDYtMmZkZDZjZmY5ZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF8wAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAn/WpcVHxPpBBkuHx2AFtyLSdMhWW/L2q0YKBYp2G5UE94PPgJrJgvs i+ZB1jvO0tCcuyGw4RRhkRtvgLui1AVzCppPf2vdFG9CC7Bm7dY3raUxMOCGbUoD S7MlGNaB9+isR1bTYinhZNoGj+36EmRo3oMLtxDV70xVszCy4c6GbWzRJD5jgfF7 HgsImojLZWi38M303h7Ai9WEFqljfe5JKflX48iLy9z6Jp4ktmoPslBvwlbUzRZ+ 0lztqP0S8Uoh06qOyXiMQVAPUuJHSo76YY9FFm+uWsq9bRFrKG9aqG9HjUvQBI8t hPbh2jMTrNxRX9c+2ToPZOM9jYBq6bI= -----END CERTIFICATE-----Generated at Sun Apr 27 07:56:30 2025 by rpki-client