$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a20f8236-39a1-32d8-9efa-9f8b8973d345.roa File: a20f8236-39a1-32d8-9efa-9f8b8973d345.roa (raw, json) Hash identifier: omEv9IX4qblOJvnO8x/9In7BhO5T7OyPBExMQph+IYk= Subject key identifier: 04:35:6C:7D:C5:EB:D5:15:DA:80:B9:FE:B9:11:11:A7:9C:8F:D5:70 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498769D43A43C80CD29ABCB1D0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a20f8236-39a1-32d8-9efa-9f8b8973d345.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 24319 IP address blocks: 23.200.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:d4:3a:43:c8:0c:d2:9a:bc:b1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=e933b54c-45ae-4885-b755-bb034ea19cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:52:17:83:4c:76:c0:dd:b8:e8:eb:f0:52:e8: 4b:77:e7:fc:97:6f:19:6c:c9:23:fc:f4:4c:2a:b6: 86:f4:43:49:0f:7c:8e:85:77:e3:46:dc:f8:1b:64: 6e:08:d9:a0:c3:8d:38:01:22:de:9d:e4:0a:ef:5a: ec:a0:9c:3e:57:82:a9:20:55:b5:d2:78:c4:de:d8: 3c:1a:26:ab:4b:76:6c:d9:20:72:f8:f5:b7:31:3c: cb:75:a4:cb:0e:8e:17:d7:6e:2e:24:55:2b:ad:a9: 56:af:b2:dc:40:4e:14:f8:3a:9c:c7:65:76:d8:2b: 97:b1:da:a9:7f:a9:86:c4:e8:3c:a7:3b:fe:8e:e1: e4:fc:b0:76:88:5e:87:a0:43:6a:de:4f:72:cc:9d: b9:4f:0f:61:0a:53:65:d0:d1:a2:c0:94:2a:30:9e: fe:0a:b3:77:15:a1:88:80:fe:6a:d3:ed:d4:37:01: 4d:78:b7:10:57:00:3e:6a:63:d8:2c:45:3b:b2:5a: 6b:c7:96:fc:74:5d:0e:c2:29:39:92:00:62:29:07: 94:9f:cb:b1:5d:a5:3e:a0:5a:f7:3b:70:8b:20:39: cc:6a:8a:00:a8:a0:39:d1:7b:22:67:f4:77:ff:9b: 3c:7e:90:2a:1d:be:5c:d7:8f:f0:36:4e:9a:13:5d: 5f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:35:6C:7D:C5:EB:D5:15:DA:80:B9:FE:B9:11:11:A7:9C:8F:D5:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a20f8236-39a1-32d8-9efa-9f8b8973d345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:bd:c6:c0:e5:d7:4c:6b:6f:f1:6f:53:52:24:b8:1d:97:1a: 0f:73:73:d1:cd:a8:e2:aa:49:82:0e:06:63:bf:af:97:3f:3d: 87:08:82:e9:0b:62:9a:a2:a0:01:56:db:3b:8c:b9:7b:c7:02: 07:70:d7:4e:10:6d:02:0c:8d:e6:64:47:c9:6a:8c:f3:8f:1a: f9:8f:98:ac:9b:96:54:99:f8:d8:33:fa:29:c6:6b:52:8f:93: ba:7f:b7:ad:ea:58:b3:7a:c0:34:40:91:41:54:0c:cd:e4:7d: 9f:75:e0:7d:7f:38:0e:94:a8:f2:54:50:31:45:8f:79:19:42: f5:14:f7:c2:e8:ca:01:51:a0:51:3a:ce:86:14:46:94:f8:4c: 32:e2:94:69:fe:49:2f:c5:32:7c:45:00:6f:a3:d6:b6:03:9b: 8a:3a:cd:31:18:c7:b0:ab:34:f8:c8:06:da:77:6a:2c:ad:14: ee:8c:a9:79:d4:70:dd:ea:5a:cd:13:be:50:08:53:b7:89:a8: 72:ed:b9:01:1b:91:86:2f:9c:1e:f7:4f:29:5a:6d:b5:5d:5f: 48:92:24:e2:58:2d:6d:39:66:5b:aa:64:64:17:6a:68:ea:27: cb:ed:fa:53:b3:f4:8a:31:59:e7:d7:58:54:9a:1d:e7:2c:cc: c6:3c:40:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHadQ6Q8gM0pq8sdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ZTkzM2I1NGMtNDVhZS00ODg1LWI3NTUtYmIwMzRlYTE5Y2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVIXg0x2wN246OvwUuhLd+f8l28ZbMkj/PRM KraG9ENJD3yOhXfjRtz4G2RuCNmgw404ASLeneQK71rsoJw+V4KpIFW10njE3tg8 GiarS3Zs2SBy+PW3MTzLdaTLDo4X124uJFUrralWr7LcQE4U+Dqcx2V22CuXsdqp f6mGxOg8pzv+juHk/LB2iF6HoENq3k9yzJ25Tw9hClNl0NGiwJQqMJ7+CrN3FaGI gP5q0+3UNwFNeLcQVwA+amPYLEU7slprx5b8dF0Owik5kgBiKQeUn8uxXaU+oFr3 O3CLIDnMaooAqKA50XsiZ/R3/5s8fpAqHb5c14/wNk6aE11fJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQ1bH3F69UV2oC5/rkREaecj9VwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTIwZjgyMzYtMzlhMS0z MmQ4LTllZmEtOWY4Yjg5NzNkMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8iEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIy9xsDl10xrb/FvU1IkuB2XGg9zc9HNqOKqSYIOBmO/r5c/PYcIgukL YpqioAFW2zuMuXvHAgdw104QbQIMjeZkR8lqjPOPGvmPmKybllSZ+Ngz+inGa1KP k7p/t63qWLN6wDRAkUFUDM3kfZ914H1/OA6UqPJUUDFFj3kZQvUU98LoygFRoFE6 zoYURpT4TDLilGn+SS/FMnxFAG+j1rYDm4o6zTEYx7CrNPjIBtp3aiytFO6MqXnU cN3qWs0TvlAIU7eJqHLtuQEbkYYvnB73TylabbVdX0iSJOJYLW05ZluqZGQXamjq J8vt+lOz9IoxWefXWFSaHecszMY8QDo= -----END CERTIFICATE-----Generated at Sun Apr 27 01:07:54 2025 by rpki-client