$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa320327-5f17-3594-a290-f5fd98b7cc55.roa File: aa320327-5f17-3594-a290-f5fd98b7cc55.roa (raw, json) Hash identifier: CGGZJaSSnL31XkHYXQruI+MMJFUW58EV9TSlvM7ttgA= Subject key identifier: 9E:02:FE:7A:C6:E1:78:6A:4F:9D:F6:58:86:09:53:2D:F6:D6:F8:61 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496FAF2329DEE728CF92F9F340 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa320327-5f17-3594-a290-f5fd98b7cc55.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.192.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:23:29:de:e7:28:cf:92:f9:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=fc4f541a-ae45-4470-8c85-73bdbb20be40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a2:9b:d4:c9:0f:97:00:66:06:59:24:dd:c3: ab:56:8c:72:f3:26:c4:43:ef:b5:5d:74:1b:aa:fa: 98:e3:b7:29:24:0a:ef:da:c4:0a:5a:cf:d1:db:25: 6c:9c:7a:10:9b:d2:1c:6d:5c:bf:8e:b5:0b:c2:be: 4d:e8:f5:c4:c0:12:95:88:5e:ad:90:72:3b:e9:31: f0:f6:ed:9e:34:3b:7d:df:df:10:bd:ea:2d:55:db: e0:84:7e:3a:65:c4:fa:95:d4:0a:03:fb:99:b5:50: 72:32:b1:ea:42:e3:43:64:63:0d:13:6d:91:50:4a: 04:6d:2e:30:81:0f:de:64:86:7b:4b:89:cc:0d:6b: 3a:65:bc:90:d4:95:44:67:58:7f:dc:ef:0c:3f:04: 4e:4c:cf:d0:23:18:73:64:6d:18:b2:de:5e:d9:90: b6:95:35:0e:55:d5:a3:df:02:78:b1:98:f8:d4:d1: 5e:e7:7c:1d:cb:6f:03:d9:ba:38:4a:e1:a4:47:aa: c1:65:36:3e:c5:46:fe:88:5e:85:0e:a1:29:bf:07: 3f:d1:e0:62:89:a9:3b:e8:ba:5c:01:cf:21:75:c1: 3c:b0:6a:c6:b9:a8:60:61:b4:b0:1f:c7:3e:c1:57: a7:b0:7f:a5:f1:90:ac:f9:cc:6f:39:06:a2:60:5c: 7f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:02:FE:7A:C6:E1:78:6A:4F:9D:F6:58:86:09:53:2D:F6:D6:F8:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa320327-5f17-3594-a290-f5fd98b7cc55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.192.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:99:34:7c:b7:c4:6b:66:38:04:c8:8d:a7:a3:b7:b8:b9:55: 8f:d4:fa:9b:10:0f:43:a5:a6:ba:2b:49:fd:2f:20:6c:70:08: c6:97:59:6b:09:ce:6a:01:b2:58:3b:5a:52:4e:ea:33:2f:28: 4f:e8:e1:72:dc:50:57:f7:f7:7d:05:2c:09:1e:d4:fc:bf:e7: 54:ac:5e:00:c0:a3:1e:aa:49:ba:f7:5f:0f:16:4f:40:e2:63: 2c:1d:9f:35:4b:4f:97:25:95:f7:72:42:76:66:07:84:af:f7: 99:05:f6:47:d7:74:98:a1:1e:ed:ec:72:e7:f3:b2:db:89:63: 5e:d2:51:9b:ee:03:17:a0:04:3d:28:8d:ca:55:04:4f:a2:e2: ef:d5:0d:5f:7c:74:7f:78:7e:6f:e8:c0:3d:a9:94:f5:be:3b: 76:a6:ec:5f:2d:b9:37:52:d4:fe:74:c5:e9:2b:2d:21:22:0f: 0c:28:59:1a:05:42:fc:56:5a:82:d3:24:bb:eb:66:dc:75:b8: aa:d2:6f:14:66:1c:ad:3d:b6:75:8d:c3:a7:cd:72:ac:e4:6f: 3f:ab:ab:c5:09:12:7c:d2:b5:c7:60:f3:bc:7e:bd:d2:5b:65: 07:23:3b:c1:a2:94:85:39:a7:63:e5:2c:41:03:47:fc:62:62: 7f:6a:35:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvryMp3ucoz5L580AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk ZmM0ZjU0MWEtYWU0NS00NDcwLThjODUtNzNiZGJiMjBiZTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaKb1MkPlwBmBlkk3cOrVoxy8ybEQ++1XXQb qvqY47cpJArv2sQKWs/R2yVsnHoQm9IcbVy/jrULwr5N6PXEwBKViF6tkHI76THw 9u2eNDt9398QveotVdvghH46ZcT6ldQKA/uZtVByMrHqQuNDZGMNE22RUEoEbS4w gQ/eZIZ7S4nMDWs6ZbyQ1JVEZ1h/3O8MPwROTM/QIxhzZG0Yst5e2ZC2lTUOVdWj 3wJ4sZj41NFe53wdy28D2bo4SuGkR6rBZTY+xUb+iF6FDqEpvwc/0eBiiak76Lpc Ac8hdcE8sGrGuahgYbSwH8c+wVensH+l8ZCs+cxvOQaiYFx/kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4C/nrG4XhqT532WIYJUy321vhhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWEzMjAzMjctNWYxNy0z NTk0LWEyOTAtZjVmZDk4YjdjYzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8C8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+ZNHy3xGtmOATIjaejt7i5VY/U+psQD0OlprorSf0vIGxwCMaXWWsJ zmoBslg7WlJO6jMvKE/o4XLcUFf3930FLAke1Py/51SsXgDAox6qSbr3Xw8WT0Di YywdnzVLT5cllfdyQnZmB4Sv95kF9kfXdJihHu3scufzstuJY17SUZvuAxegBD0o jcpVBE+i4u/VDV98dH94fm/owD2plPW+O3am7F8tuTdS1P50xekrLSEiDwwoWRoF QvxWWoLTJLvrZtx1uKrSbxRmHK09tnWNw6fNcqzkbz+rq8UJEnzStcdg87x+vdJb ZQcjO8GilIU5p2PlLEEDR/xiYn9qNfk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:10:19 2025 by rpki-client