$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1c4eb76-1361-3637-a9f7-647873c1c94a.roa File: a1c4eb76-1361-3637-a9f7-647873c1c94a.roa (raw, json) Hash identifier: EyVfV7HdOCUPhNKG41FsM5Y+OQppywcXLUQP0MAxWiA= Subject key identifier: BE:7D:4D:F8:87:C4:F9:C4:F8:56:01:A6:C2:27:4C:87:AB:7F:DC:63 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498604717605E8D1E6480A4200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1c4eb76-1361-3637-a9f7-647873c1c94a.roa Signing time: Mon 14 Apr 2025 13:00:59 +0000 ROA not before: Mon 14 Apr 2025 13:00:59 +0000 ROA not after: Sun 13 Jul 2025 13:00:59 +0000 asID: 16625 IP address blocks: 23.199.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:04:71:76:05:e8:d1:e6:48:0a:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 14 13:00:59 2025 GMT Not After : Jul 13 13:00:59 2025 GMT Subject: CN=d1c00a77-b7db-48e4-a0b8-5d1cf4dbef62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:53:50:c8:ee:eb:3a:99:02:35:2d:13:d5:6f: 78:7f:1f:61:58:38:a7:b2:cc:99:09:27:85:3b:34: 1a:8e:7b:dc:22:7d:88:41:fa:30:87:d3:cc:6e:67: e8:f8:35:c0:43:d6:e5:20:6d:29:06:25:38:df:26: 23:b3:70:be:bf:7e:44:1a:94:9a:e2:e9:f1:df:b9: 9e:5f:a5:9f:ba:a3:66:31:4f:14:c2:1e:9e:0d:0b: 05:40:89:7a:b0:cf:3a:60:b7:5b:2f:8f:87:64:35: 97:db:c4:f8:53:83:d6:03:c9:51:1f:71:09:b5:b9: 40:95:37:39:1d:8a:58:7f:5f:cc:64:97:ff:a6:be: 6f:67:92:c7:d6:a9:0f:e6:4f:a9:5d:50:81:b5:1a: 3e:35:ee:c8:a2:c2:6b:dd:88:ee:b6:b2:b1:4d:72: ac:ee:c3:9a:8e:4f:bd:74:53:61:36:e2:6b:bc:05: 5a:c3:35:c9:e3:23:5a:d7:19:bf:55:85:8c:d4:cb: 15:79:bc:8e:59:33:78:bb:5c:6e:48:ce:e0:24:4d: 48:9a:f2:8d:49:84:ae:b7:ef:3e:ec:cf:85:3b:69: bf:9e:cf:b4:4f:0e:81:b7:0e:94:4d:2f:09:82:c2: db:e2:ea:d7:14:16:99:2c:d4:ae:e7:ad:52:74:62: e0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:7D:4D:F8:87:C4:F9:C4:F8:56:01:A6:C2:27:4C:87:AB:7F:DC:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1c4eb76-1361-3637-a9f7-647873c1c94a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:70:f7:38:9d:1c:c6:d4:4a:61:a3:2c:bc:82:72:81:47:1a: 05:b5:4a:1a:be:43:ed:d8:68:74:06:b1:e2:0c:45:d0:ae:40: a0:81:f3:71:7c:6f:a4:28:dd:15:f7:9d:17:4f:b5:5b:f4:c1: 4a:ad:4d:77:9a:fd:0b:c6:c8:a2:48:6f:63:44:7b:f1:c3:55: 7c:97:36:8e:45:75:15:cc:12:52:dd:e9:61:3b:6d:8d:e9:3a: e7:91:8b:5d:6d:2f:05:a9:ce:b6:fb:08:21:41:47:9d:22:83: b6:1d:5d:12:71:44:ea:16:01:78:60:ee:e6:e9:8b:9d:e4:5c: 01:b5:67:16:e0:fc:04:02:eb:87:ff:34:7c:3a:51:0b:34:fa: c2:70:a9:f5:06:73:a3:e7:d4:1a:5a:84:2e:fb:15:f7:d8:ae: b3:e8:82:03:db:ae:0c:0a:f3:bd:30:8d:7b:6a:62:2e:ba:8b: 07:5c:f3:b7:fb:28:99:2d:fd:d6:30:c1:82:6a:e0:cc:60:ff: fa:fb:0b:ce:62:ba:a3:c4:f6:31:f6:79:10:6c:cf:79:a2:5d: 53:5b:2d:55:c9:2a:af:eb:de:2d:81:15:2a:bc:5a:c5:25:45: 00:df:df:b8:fd:5d:bb:eb:a2:d1:c3:3a:c2:a9:e8:83:dd:20: ea:62:13:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGBHF2BejR5kgKQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNDEzMDA1OVoXDTI1MDcxMzEzMDA1OVowLzEtMCsGA1UEAxMk ZDFjMDBhNzctYjdkYi00OGU0LWEwYjgtNWQxY2Y0ZGJlZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVNQyO7rOpkCNS0T1W94fx9hWDinssyZCSeF OzQajnvcIn2IQfowh9PMbmfo+DXAQ9blIG0pBiU43yYjs3C+v35EGpSa4unx37me X6WfuqNmMU8Uwh6eDQsFQIl6sM86YLdbL4+HZDWX28T4U4PWA8lRH3EJtblAlTc5 HYpYf1/MZJf/pr5vZ5LH1qkP5k+pXVCBtRo+Ne7IosJr3YjutrKxTXKs7sOajk+9 dFNhNuJrvAVawzXJ4yNa1xm/VYWM1MsVebyOWTN4u1xuSM7gJE1ImvKNSYSut+8+ 7M+FO2m/ns+0Tw6Btw6UTS8JgsLb4urXFBaZLNSu561SdGLgaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL59TfiHxPnE+FYBpsInTIerf9xjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTFjNGViNzYtMTM2MS0z NjM3LWE5ZjctNjQ3ODczYzFjOTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8dQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFw9zidHMbUSmGjLLyCcoFHGgW1Shq+Q+3YaHQGseIMRdCuQKCB83F8 b6Qo3RX3nRdPtVv0wUqtTXea/QvGyKJIb2NEe/HDVXyXNo5FdRXMElLd6WE7bY3p OueRi11tLwWpzrb7CCFBR50ig7YdXRJxROoWAXhg7ubpi53kXAG1Zxbg/AQC64f/ NHw6UQs0+sJwqfUGc6Pn1BpahC77FffYrrPoggPbrgwK870wjXtqYi66iwdc87f7 KJkt/dYwwYJq4Mxg//r7C85iuqPE9jH2eRBsz3miXVNbLVXJKq/r3i2BFSq8WsUl RQDf37j9XbvrotHDOsKp6IPdIOpiE0I= -----END CERTIFICATE-----Generated at Sat Apr 26 22:16:54 2025 by rpki-client