$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7f9121f-6925-3384-8a77-b9cde631b16b.roa File: b7f9121f-6925-3384-8a77-b9cde631b16b.roa (raw, json) Hash identifier: VpLU4ra/aTOix4i9LRXWjw4jIrEjFzw6sNiz96n5Wzs= Subject key identifier: B5:35:70:DD:13:EA:3D:9A:A4:9C:22:81:17:87:2F:DC:8A:04:73:06 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498339FA6A6F5089DC567ACA4B Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7f9121f-6925-3384-8a77-b9cde631b16b.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.195.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:fa:6a:6f:50:89:dc:56:7a:ca:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=40e7036f-8778-4558-a6ad-b1ddc3bfdff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:46:c5:62:93:ba:b1:c7:d5:8c:43:3d:ba:e7: 30:a1:d6:3a:05:44:a5:6b:72:52:6a:46:98:d7:e5: 37:1d:b5:8e:c3:62:58:2e:11:41:3c:2e:89:e9:20: c8:00:f8:b1:d2:63:b5:3d:e7:9d:b2:f1:3a:70:67: 43:07:59:eb:71:0b:46:3b:0d:e5:b2:2b:de:d8:a3: f4:57:3d:7d:56:f9:2c:c1:1b:25:c3:58:12:ea:d9: 05:3c:57:6b:3f:df:62:fc:9d:c8:93:0c:d8:e9:c3: c3:6a:7a:ba:2d:dd:1b:27:dd:1b:3f:82:af:7e:39: 54:74:a3:b9:ba:cd:24:10:64:db:d1:b3:f3:4f:a1: da:d7:27:c3:cc:4d:3c:3d:88:d9:99:24:9f:ea:95: 43:79:dd:c5:49:e2:1f:18:74:23:78:d8:28:65:e8: 4e:3c:f2:da:66:e6:70:27:37:fa:ae:fe:20:f3:6f: 46:e5:54:c1:ed:ef:89:5f:42:ce:31:74:c6:9a:ec: cd:e9:1c:e2:af:86:45:87:21:90:1c:a2:73:c2:69: ed:7b:f7:6d:9d:58:fa:5f:25:3f:92:8e:21:b5:37: 04:61:d3:c2:81:4d:00:f6:13:6c:92:89:a4:a5:5a: 9e:95:5a:a7:ab:9c:ff:d7:7b:82:09:e3:e6:25:72: 83:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:35:70:DD:13:EA:3D:9A:A4:9C:22:81:17:87:2F:DC:8A:04:73:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7f9121f-6925-3384-8a77-b9cde631b16b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:49:d4:43:43:1a:ec:fe:5f:91:d4:0d:af:4f:e7:43:9d:bd: 80:2e:4f:d1:8d:af:9d:75:f6:54:44:51:09:0a:32:9a:62:49: 3a:06:22:47:fa:04:3a:f9:a7:79:a5:c7:06:f5:68:82:5d:a8: 04:53:e4:4a:bf:85:4c:6c:94:4f:c8:23:37:3f:eb:3a:b0:be: 28:d9:bb:0a:9a:c5:e5:6a:93:05:e0:0b:54:99:a0:0a:77:4e: 6b:2b:34:fa:8c:bc:24:17:c5:b1:ee:8a:12:47:9f:0b:43:a2: be:3b:8f:b2:10:18:e1:72:13:30:fe:29:48:65:35:01:51:5b: 88:e9:88:a8:7a:49:9e:6c:35:a5:3d:41:bf:a5:29:cf:cb:24: 7c:cf:9f:18:97:ff:1c:1b:8d:70:c5:7a:9d:85:54:02:0f:ca: e1:73:d3:d4:df:d1:e9:0f:81:92:d3:c5:8a:12:a8:22:ef:aa: 9d:b5:12:7e:65:71:3c:91:66:58:da:3b:25:ea:47:2b:37:33: c6:b3:f1:95:aa:14:70:68:6b:7a:3e:a4:8b:6f:ce:94:a9:a8: 3c:b0:a5:b7:c3:19:11:bc:c9:78:81:0b:96:bf:3d:31:19:fe: 0b:a4:af:a9:2b:31:03:aa:9e:46:42:fa:46:17:9f:94:07:8c: 63:10:06:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOfpqb1CJ3FZ6ykswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk NDBlNzAzNmYtODc3OC00NTU4LWE2YWQtYjFkZGMzYmZkZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUbFYpO6scfVjEM9uucwodY6BUSla3JSakaY 1+U3HbWOw2JYLhFBPC6J6SDIAPix0mO1PeedsvE6cGdDB1nrcQtGOw3lsive2KP0 Vz19VvkswRslw1gS6tkFPFdrP99i/J3IkwzY6cPDanq6Ld0bJ90bP4KvfjlUdKO5 us0kEGTb0bPzT6Ha1yfDzE08PYjZmSSf6pVDed3FSeIfGHQjeNgoZehOPPLaZuZw Jzf6rv4g829G5VTB7e+JX0LOMXTGmuzN6Rzir4ZFhyGQHKJzwmnte/dtnVj6XyU/ ko4htTcEYdPCgU0A9hNskomkpVqelVqnq5z/13uCCePmJXKDfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLU1cN0T6j2apJwigReHL9yKBHMGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjdmOTEyMWYtNjkyNS0z Mzg0LThhNzctYjljZGU2MzFiMTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8NjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJJ1ENDGuz+X5HUDa9P50OdvYAuT9GNr5119lREUQkKMppiSToGIkf6 BDr5p3mlxwb1aIJdqART5Eq/hUxslE/IIzc/6zqwvijZuwqaxeVqkwXgC1SZoAp3 TmsrNPqMvCQXxbHuihJHnwtDor47j7IQGOFyEzD+KUhlNQFRW4jpiKh6SZ5sNaU9 Qb+lKc/LJHzPnxiX/xwbjXDFep2FVAIPyuFz09Tf0ekPgZLTxYoSqCLvqp21En5l cTyRZljaOyXqRys3M8az8ZWqFHBoa3o+pItvzpSpqDywpbfDGRG8yXiBC5a/PTEZ /gukr6krMQOqnkZC+kYXn5QHjGMQBlE= -----END CERTIFICATE-----Generated at Sat Apr 26 18:05:31 2025 by rpki-client