$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4cb7b6a-e76d-32f2-9037-92e5e1302fa0.roa File: a4cb7b6a-e76d-32f2-9037-92e5e1302fa0.roa (raw, json) Hash identifier: BKv39bbZdispP5r5jQJ/dokDdLdLtTYUloZRvPMPCok= Subject key identifier: C0:87:83:6A:21:BF:4F:34:D7:D6:D4:76:C4:A8:D9:0C:98:38:59:AE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849A78502A62677A09944429640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4cb7b6a-e76d-32f2-9037-92e5e1302fa0.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 16625 IP address blocks: 23.9.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:02:a6:26:77:a0:99:44:42:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=7b0c1661-569e-41e2-944b-69427e0c3a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ef:9a:93:4a:59:43:c7:b4:8b:e8:22:62:00: 6a:04:50:70:46:4a:68:2d:6c:36:80:64:88:73:a2: f7:86:f5:ed:94:81:19:5c:f2:79:f4:ca:37:2c:eb: 02:bf:00:f1:c5:0a:e8:d5:2e:ba:bb:80:5f:5b:93: e8:9d:1d:07:3d:0f:d8:23:79:a0:18:52:f9:04:bf: 52:a1:3d:4d:93:bf:cc:e9:8a:11:3e:a7:1e:6c:39: 27:9f:1e:f3:33:68:4d:f8:d8:69:3e:80:17:3f:83: 36:df:54:a8:b6:9d:f0:28:2d:c9:d1:ad:87:7a:bd: 29:34:09:ad:e6:c6:83:5f:68:46:f2:f9:c7:f5:79: a6:ad:e6:c6:8d:49:4a:fb:67:20:37:96:ed:4d:98: 37:e6:8c:fd:fe:e1:9d:3d:d3:01:56:85:f4:5f:aa: 2b:d6:b8:c7:ad:bb:4a:0f:a8:d1:fe:1b:c7:4a:f5: 9f:ee:d2:3a:be:0a:7d:f1:1f:17:bc:20:0b:93:8c: c4:bc:e6:36:03:c9:74:67:ca:52:11:27:eb:72:55: 2c:76:58:44:b7:dd:ee:e4:c6:19:14:d1:5c:3b:aa: 12:2e:f1:e7:75:5e:53:99:ed:be:58:ee:09:8f:6b: ce:6e:35:61:82:cf:74:f9:04:b4:09:f6:bd:a0:06: b4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:87:83:6A:21:BF:4F:34:D7:D6:D4:76:C4:A8:D9:0C:98:38:59:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4cb7b6a-e76d-32f2-9037-92e5e1302fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.9.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:51:c9:45:78:24:dc:a7:2b:70:31:58:77:5a:47:a5:ad:82: 0f:b3:04:ba:f2:8a:93:da:81:c2:dc:84:cb:fc:96:cb:c7:83: 5f:21:23:6a:80:74:08:11:07:01:f7:28:76:c2:6c:75:d5:e1: 22:0a:ab:be:9a:51:a8:17:19:1a:7d:c4:1d:ec:c3:89:24:2d: 42:73:43:6f:27:07:39:fd:73:eb:da:64:8d:10:30:f2:59:a7: ad:1e:b2:d4:1b:40:97:c6:bd:8a:bf:bc:97:77:f5:67:9e:52: 8c:7b:51:a7:de:9a:21:b9:e3:0f:e7:d9:04:b1:1b:95:4b:72: 80:19:13:69:c8:72:b6:4a:7b:60:eb:4c:f0:99:9a:0a:e1:6a: ab:2f:a0:7e:fa:92:2b:b3:90:14:40:6e:1f:f0:55:bb:b4:7b: 31:a0:bc:41:95:3d:5a:41:11:8b:89:c7:10:41:bb:ac:f6:b7: 0b:79:a5:ab:50:85:c3:3d:55:1b:4b:ca:25:16:6e:00:c3:8c: 18:e3:cc:e5:85:6f:a6:28:58:c9:23:68:59:dd:39:fe:05:cd: 8b:30:b0:3e:ba:88:83:f8:4a:3f:a9:0a:7c:4b:64:f3:e4:d0: 48:47:88:d7:5a:26:88:88:74:c4:97:97:cd:5d:d5:33:8b:20: d1:a8:77:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQKmJnegmURClkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk N2IwYzE2NjEtNTY5ZS00MWUyLTk0NGItNjk0MjdlMGMzYTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo++ak0pZQ8e0i+giYgBqBFBwRkpoLWw2gGSI c6L3hvXtlIEZXPJ59Mo3LOsCvwDxxQro1S66u4BfW5PonR0HPQ/YI3mgGFL5BL9S oT1Nk7/M6YoRPqcebDknnx7zM2hN+NhpPoAXP4M231Sotp3wKC3J0a2Her0pNAmt 5saDX2hG8vnH9XmmrebGjUlK+2cgN5btTZg35oz9/uGdPdMBVoX0X6or1rjHrbtK D6jR/hvHSvWf7tI6vgp98R8XvCALk4zEvOY2A8l0Z8pSESfrclUsdlhEt93u5MYZ FNFcO6oSLvHndV5Tme2+WO4Jj2vObjVhgs90+QS0Cfa9oAa0nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCHg2ohv08019bUdsSo2QyYOFmuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTRjYjdiNmEtZTc2ZC0z MmYyLTkwMzctOTJlNWUxMzAyZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlRyUV4JNynK3AxWHdaR6Wtgg+zBLryipPagcLchMv8lsvHg18hI2qA dAgRBwH3KHbCbHXV4SIKq76aUagXGRp9xB3sw4kkLUJzQ28nBzn9c+vaZI0QMPJZ p60estQbQJfGvYq/vJd39WeeUox7UafemiG54w/n2QSxG5VLcoAZE2nIcrZKe2Dr TPCZmgrhaqsvoH76kiuzkBRAbh/wVbu0ezGgvEGVPVpBEYuJxxBBu6z2twt5patQ hcM9VRtLyiUWbgDDjBjjzOWFb6YoWMkjaFndOf4FzYswsD66iIP4Sj+pCnxLZPPk 0EhHiNdaJoiIdMSXl81d1TOLINGod8c= -----END CERTIFICATE-----Generated at Mon Apr 28 01:58:32 2025 by rpki-client