$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/941ddf98-9d7f-3905-bf82-204c3da3b572.roa File: 941ddf98-9d7f-3905-bf82-204c3da3b572.roa (raw, json) Hash identifier: N1G/iN55SZBvmPsYjvlC2vI1EqluplcFr6RjpTv5udM= Subject key identifier: B5:E5:C9:CE:C0:29:03:A9:AA:16:72:15:48:71:C2:05:AD:5B:E6:06 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829D885FC2D74A7910EDD80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/941ddf98-9d7f-3905-bf82-204c3da3b572.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.204.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d8:85:fc:2d:74:a7:91:0e:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=cc90b7bc-234e-455f-9f12-975eedd3fda3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:15:79:53:43:2e:10:3f:66:3a:77:b8:0a:68: 78:8d:a1:33:85:8f:43:39:cb:12:40:35:fc:ae:5a: a9:d3:a8:8b:d1:3a:da:dd:45:d3:d8:1b:1d:b7:e1: 6a:b7:b0:61:a3:ac:8a:fc:83:11:72:87:cd:d2:b0: 5e:d9:9f:c0:8e:17:93:17:e4:82:4b:4d:6e:e2:cb: 7b:d9:fa:de:c0:18:e0:ae:a7:ad:25:d8:bd:52:40: 2c:8b:64:4c:f7:ea:3f:04:34:63:70:28:39:5e:79: 17:f8:f1:82:fb:f2:01:3c:d6:b4:19:97:1f:2c:ee: 1c:fb:c1:c6:c4:82:a2:62:1d:67:dc:de:06:c7:61: b5:cd:f1:a5:2d:60:bf:f7:93:c3:14:77:9b:59:64: 2b:1a:31:14:0d:07:78:0d:4b:b2:a3:62:3b:84:5f: 9b:d1:d2:18:0b:e4:47:7f:de:dc:d3:78:f2:75:d9: e7:28:b7:36:5d:51:35:96:c2:ca:a7:7d:29:b5:7a: c6:2e:47:4b:e2:6a:eb:60:c4:73:ff:bd:e0:a9:0e: 1b:d9:46:b6:dd:a3:2e:e2:57:ef:78:82:40:d5:4a: 0b:a2:86:fe:fd:5a:ac:a6:4a:3c:fd:56:c2:3a:ba: 09:ae:2a:b6:e7:dc:fe:5c:76:9e:a0:d1:09:db:75: 5d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E5:C9:CE:C0:29:03:A9:AA:16:72:15:48:71:C2:05:AD:5B:E6:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/941ddf98-9d7f-3905-bf82-204c3da3b572.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b6:06:2c:fb:55:b3:f5:0d:45:7e:45:c1:cb:81:dc:22:d4: 54:e2:66:64:70:87:62:07:d6:4d:25:81:46:d7:66:ba:a6:b9: b6:76:e9:d0:4b:35:5d:32:52:e4:38:de:b2:e4:91:bf:9b:91: db:8e:46:ba:49:ff:05:60:8e:2f:7c:ca:fc:dd:db:b5:09:90: 44:de:2b:1d:8e:5f:af:4e:86:e2:e8:f5:ed:9a:f2:8b:b2:e7: 9e:04:4c:0e:d7:09:ce:a0:38:2a:3a:97:51:81:c3:49:c2:b7: 14:af:b7:65:27:e9:94:9e:19:38:2d:4f:f0:40:6f:ce:63:cd: 88:4d:d1:d9:ab:27:c6:ab:21:f0:ce:ff:f1:a0:ff:1c:5a:14: 3b:d9:e0:36:d2:69:72:f8:0b:5e:46:c3:dd:b1:3f:ed:19:8f: f8:04:e2:96:2f:03:e5:94:05:a9:47:c3:9a:f5:d6:6a:00:cc: bf:4f:72:d0:9a:a5:a8:3a:c3:93:04:a0:6c:6c:2b:f3:a8:cd: 15:e6:fc:72:0a:6e:77:58:ac:08:4f:d8:66:94:04:f5:14:8f: c0:60:75:0b:57:8c:1b:c9:bf:fd:ca:5f:fa:81:c8:28:c1:05: b6:67:7d:f6:72:fd:7d:c2:d1:18:e7:a2:b3:2c:1f:42:13:6d: dc:97:5e:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdiF/C10p5EO3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk Y2M5MGI3YmMtMjM0ZS00NTVmLTlmMTItOTc1ZWVkZDNmZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixV5U0MuED9mOne4Cmh4jaEzhY9DOcsSQDX8 rlqp06iL0Tra3UXT2Bsdt+Fqt7Bho6yK/IMRcofN0rBe2Z/AjheTF+SCS01u4st7 2frewBjgrqetJdi9UkAsi2RM9+o/BDRjcCg5XnkX+PGC+/IBPNa0GZcfLO4c+8HG xIKiYh1n3N4Gx2G1zfGlLWC/95PDFHebWWQrGjEUDQd4DUuyo2I7hF+b0dIYC+RH f97c03jyddnnKLc2XVE1lsLKp30ptXrGLkdL4mrrYMRz/73gqQ4b2Ua23aMu4lfv eIJA1UoLoob+/Vqspko8/VbCOroJriq259z+XHaeoNEJ23VdPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXlyc7AKQOpqhZyFUhxwgWtW+YGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTQxZGRmOTgtOWQ3Zi0z OTA1LWJmODItMjA0YzNkYTNiNTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8yRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB62Biz7VbP1DUV+RcHLgdwi1FTiZmRwh2IH1k0lgUbXZrqmubZ26dBL NV0yUuQ43rLkkb+bkduORrpJ/wVgji98yvzd27UJkETeKx2OX69OhuLo9e2a8ouy 554ETA7XCc6gOCo6l1GBw0nCtxSvt2Un6ZSeGTgtT/BAb85jzYhN0dmrJ8arIfDO //Gg/xxaFDvZ4DbSaXL4C15Gw92xP+0Zj/gE4pYvA+WUBalHw5r11moAzL9PctCa pag6w5MEoGxsK/OozRXm/HIKbndYrAhP2GaUBPUUj8BgdQtXjBvJv/3KX/qByCjB BbZnffZy/X3C0RjnorMsH0ITbdyXXpc= -----END CERTIFICATE-----Generated at Sat Apr 26 17:45:36 2025 by rpki-client