$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3e1c659-18f9-3f9a-a7ac-8336de220cb4.roa File: b3e1c659-18f9-3f9a-a7ac-8336de220cb4.roa (raw, json) Hash identifier: mWaL+dGdrL1NxqRVzBhw/varWuSTt1A3PIGAUhoTMcY= Subject key identifier: 28:20:AE:8E:EB:5E:05:23:FE:58:96:8B:18:68:A5:7F:1B:41:10:67 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496FAF244817019F04400F5680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3e1c659-18f9-3f9a-a7ac-8336de220cb4.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 16625 IP address blocks: 23.198.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:24:48:17:01:9f:04:40:0f:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=803856c1-84a2-4a4e-abff-7c301659ac13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f3:69:dd:3b:83:dd:41:d4:d6:86:7d:41:e5: f1:7d:05:79:5e:6b:2c:d1:51:ad:78:6c:16:ef:df: 09:aa:26:aa:31:7c:e8:e4:2f:fd:5f:de:b4:4a:2b: 5c:81:ba:72:3c:20:8b:d8:78:13:f6:ac:ac:93:01: d9:99:7e:c8:bd:a3:68:84:f5:64:df:7a:61:c8:75: 71:50:1a:d6:35:9f:6e:bf:60:57:d9:24:97:39:ce: f8:53:d5:c7:a7:38:ad:2c:f9:8f:43:9d:4d:cc:44: 77:88:4e:af:78:24:85:6b:d6:6c:bf:68:6d:da:2d: 2b:30:30:8d:71:ed:2a:9b:c2:11:c8:ee:80:d3:30: 30:82:75:9b:94:3a:2a:33:16:e9:14:91:dd:a7:ac: 72:ca:20:14:ac:5d:f0:0c:7f:3b:43:c6:bd:d7:e1: a4:87:0b:be:7f:20:4f:42:03:83:e1:ea:65:93:5b: 0f:44:75:ba:d1:a6:00:ab:db:9b:bc:f5:c3:12:ea: 4a:a5:00:79:64:42:73:b8:a5:33:3d:6b:15:05:41: 91:90:6a:54:d8:e7:14:cb:48:8f:3f:32:a4:c3:06: 7c:99:26:ad:97:5f:ef:83:b4:1c:1f:e0:c7:63:75: 67:31:7e:7f:12:00:27:97:af:ff:ce:61:d5:40:10: f7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:20:AE:8E:EB:5E:05:23:FE:58:96:8B:18:68:A5:7F:1B:41:10:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3e1c659-18f9-3f9a-a7ac-8336de220cb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:3f:af:17:34:14:15:7e:94:bb:ad:92:d2:0f:d4:b8:f8:e6: b1:a3:1c:86:b0:ad:7a:86:ea:46:44:78:fc:d7:35:0a:dd:b1: 1d:bb:6a:96:3a:4c:04:f1:10:47:5c:c6:8e:29:2c:07:7e:97: e8:17:46:01:13:9c:d4:b1:9a:71:39:ce:a2:83:10:4f:74:ed: 04:e8:3b:94:18:c3:10:cf:d5:ca:8f:77:3c:12:b5:2b:9e:f8: 30:95:69:a5:e3:ba:85:e0:ab:67:6f:21:da:96:7c:e0:49:3a: 57:30:06:15:2f:88:38:f8:8e:da:8e:86:fe:a7:c8:42:a8:ae: a0:fb:de:28:1e:be:0f:61:15:ad:1b:b6:3d:b7:40:98:cd:aa: ec:72:10:51:cf:e0:41:06:b2:ad:a8:1b:51:da:9c:2d:35:ce: 64:77:4e:8c:eb:b5:21:f5:8c:9a:94:d6:27:d8:c3:1a:d8:ab: de:3f:ca:f4:80:57:8e:80:da:bb:60:4a:34:a9:4f:02:87:82: dc:27:95:9c:ee:3c:0e:4d:c7:d0:ff:a1:77:ee:a4:10:24:c4: 0c:60:6a:1f:00:c8:5c:3b:ba:23:a4:80:99:24:17:d4:33:c2: 13:87:75:3b:54:c9:02:7e:a0:34:83:57:90:d7:17:fe:5e:0a: 67:a9:7c:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvryRIFwGfBEAPVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk ODAzODU2YzEtODRhMi00YTRlLWFiZmYtN2MzMDE2NTlhYzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/Np3TuD3UHU1oZ9QeXxfQV5Xmss0VGteGwW 798JqiaqMXzo5C/9X960SitcgbpyPCCL2HgT9qyskwHZmX7IvaNohPVk33phyHVx UBrWNZ9uv2BX2SSXOc74U9XHpzitLPmPQ51NzER3iE6veCSFa9Zsv2ht2i0rMDCN ce0qm8IRyO6A0zAwgnWblDoqMxbpFJHdp6xyyiAUrF3wDH87Q8a91+Gkhwu+fyBP QgOD4eplk1sPRHW60aYAq9ubvPXDEupKpQB5ZEJzuKUzPWsVBUGRkGpU2OcUy0iP PzKkwwZ8mSatl1/vg7QcH+DHY3VnMX5/EgAnl6//zmHVQBD3sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCggro7rXgUj/liWixhopX8bQRBnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjNlMWM2NTktMThmOS0z ZjlhLWE3YWMtODMzNmRlMjIwY2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8awMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8/rxc0FBV+lLutktIP1Lj45rGjHIawrXqG6kZEePzXNQrdsR27apY6 TATxEEdcxo4pLAd+l+gXRgETnNSxmnE5zqKDEE907QToO5QYwxDP1cqPdzwStSue +DCVaaXjuoXgq2dvIdqWfOBJOlcwBhUviDj4jtqOhv6nyEKorqD73igevg9hFa0b tj23QJjNquxyEFHP4EEGsq2oG1HanC01zmR3TozrtSH1jJqU1ifYwxrYq94/yvSA V46A2rtgSjSpTwKHgtwnlZzuPA5Nx9D/oXfupBAkxAxgah8AyFw7uiOkgJkkF9Qz whOHdTtUyQJ+oDSDV5DXF/5eCmepfHM= -----END CERTIFICATE-----Generated at Sun Apr 27 15:21:25 2025 by rpki-client