$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b32930a5-1b3c-3ac9-946a-706e73d22623.roa File: b32930a5-1b3c-3ac9-946a-706e73d22623.roa (raw, json) Hash identifier: 4EZ3TDjBVj0ZQl1MbCfa288AdaVDprjHmkdNesQ6b0g= Subject key identifier: 0C:28:0E:E9:E4:25:59:70:62:C8:70:A5:C2:EF:9C:0B:16:7D:6C:88 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E11748EA591FD6245B30 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b32930a5-1b3c-3ac9-946a-706e73d22623.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 24319 IP address blocks: 23.204.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e1:17:48:ea:59:1f:d6:24:5b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=a7791a60-f35d-4079-8bbc-b0b58a9cb463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9d:88:22:0b:5a:59:f2:69:d0:56:05:29:3f: 5e:b2:91:2e:d9:2f:22:be:5a:e7:08:5c:6e:27:d3: 25:52:7c:02:17:54:c4:d6:60:8f:02:d5:c8:16:ed: 71:92:cf:39:86:7a:87:f0:b5:bf:12:5c:f8:c9:b6: cc:7b:b6:2a:5a:f4:bf:e6:d3:fd:7b:8e:d4:ef:49: ca:04:21:10:ad:b2:6b:3e:08:59:1b:d6:f7:5c:63: 75:91:5e:cb:d8:2f:0b:d0:0c:e2:e2:f4:01:7e:44: 99:1f:cf:01:f6:6f:53:ab:9b:72:2b:67:a3:36:fd: a0:b6:ad:cb:f5:f7:a8:6d:28:32:85:f7:ce:d4:45: 2f:66:e2:70:69:34:b3:05:fc:1b:67:fc:ef:be:43: 39:9f:fa:8c:9f:34:3d:de:12:7a:5e:31:32:a4:4b: 92:49:8b:18:6c:9a:94:e2:cb:56:66:9e:ef:6f:57: b8:2b:11:07:b6:ef:a2:06:71:9f:b3:df:7b:e7:13: 4c:51:0c:a7:c0:1f:34:a5:b5:44:21:02:3e:ba:cf: 45:d8:8b:fd:96:eb:27:70:e9:b1:b5:4f:bf:94:27: e4:84:51:8c:1c:41:d0:30:14:ea:47:48:98:00:6b: 6a:9a:ca:ae:19:7c:cc:7d:b8:e3:5b:db:73:cf:5e: 6d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:28:0E:E9:E4:25:59:70:62:C8:70:A5:C2:EF:9C:0B:16:7D:6C:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b32930a5-1b3c-3ac9-946a-706e73d22623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:dd:46:af:3d:3b:be:3f:8b:6c:79:59:39:87:c7:74:10:d8: 8b:11:3c:77:bb:81:99:3d:fe:c1:86:79:f8:56:c4:4c:92:48: 59:a1:6c:8c:46:0a:1d:b7:5a:b9:55:0a:47:f8:5e:2d:a8:cc: fc:4d:25:6c:bc:c7:e6:3a:25:85:c5:14:06:88:9f:73:7a:b8: 92:11:17:b3:6b:55:29:b5:52:ae:49:7d:70:00:e2:3f:08:4b: 92:7c:24:8d:4b:7f:c7:7a:e0:70:5b:5d:a3:15:c6:f8:bb:a6: 6b:00:92:8e:3a:0a:01:f5:28:59:28:de:62:2a:0f:ee:2e:eb: 65:b7:98:b5:17:96:5e:8c:f6:fe:f4:3a:6f:a0:57:86:b3:80: 1b:9e:9e:0b:63:c8:e9:f6:2b:56:77:11:31:7c:40:70:d2:a6: 53:6c:4c:bf:82:de:5e:4c:3c:d9:8a:74:b9:de:8e:da:e6:eb: 5d:aa:2c:07:22:3e:0d:cb:4c:ac:4c:64:43:63:dd:ac:72:a0: e5:07:39:e3:4e:9e:25:43:2b:07:84:09:87:f2:e9:8f:d7:e2: 2d:77:38:84:ba:75:dc:9a:0b:7a:35:c6:d2:9c:a9:bb:0e:e0: d5:d6:75:1c:6a:b0:7b:b0:d4:c1:43:43:5c:35:71:dd:49:99: 6d:b5:09:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKeEXSOpZH9YkWzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YTc3OTFhNjAtZjM1ZC00MDc5LThiYmMtYjBiNThhOWNiNDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Z2IIgtaWfJp0FYFKT9espEu2S8ivlrnCFxu J9MlUnwCF1TE1mCPAtXIFu1xks85hnqH8LW/Elz4ybbMe7YqWvS/5tP9e47U70nK BCEQrbJrPghZG9b3XGN1kV7L2C8L0Azi4vQBfkSZH88B9m9Tq5tyK2ejNv2gtq3L 9feobSgyhffO1EUvZuJwaTSzBfwbZ/zvvkM5n/qMnzQ93hJ6XjEypEuSSYsYbJqU 4stWZp7vb1e4KxEHtu+iBnGfs9975xNMUQynwB80pbVEIQI+us9F2Iv9lusncOmx tU+/lCfkhFGMHEHQMBTqR0iYAGtqmsquGXzMfbjjW9tzz15t5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwoDunkJVlwYshwpcLvnAsWfWyIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjMyOTMwYTUtMWIzYy0z YWM5LTk0NmEtNzA2ZTczZDIyNjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8xIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjdRq89O74/i2x5WTmHx3QQ2IsRPHe7gZk9/sGGefhWxEySSFmhbIxG Ch23WrlVCkf4Xi2ozPxNJWy8x+Y6JYXFFAaIn3N6uJIRF7NrVSm1Uq5JfXAA4j8I S5J8JI1Lf8d64HBbXaMVxvi7pmsAko46CgH1KFko3mIqD+4u62W3mLUXll6M9v70 Om+gV4azgBuengtjyOn2K1Z3ETF8QHDSplNsTL+C3l5MPNmKdLnejtrm612qLAci Pg3LTKxMZENj3axyoOUHOeNOniVDKweECYfy6Y/X4i13OIS6ddyaC3o1xtKcqbsO 4NXWdRxqsHuw1MFDQ1w1cd1JmW21CXM= -----END CERTIFICATE-----Generated at Sun Apr 27 11:16:37 2025 by rpki-client