$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcbab406-30df-3373-83bc-8b4eee564970.roa File: bcbab406-30df-3373-83bc-8b4eee564970.roa (raw, json) Hash identifier: 5yaP1C5rMkQlx/NPaf3Tbf7FLZVaeS44PsvODhnbmFU= Subject key identifier: BF:6E:81:E0:0B:5B:11:7E:02:38:46:A3:32:CF:44:7D:61:0B:4F:EF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E722FD52142BB8611BA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcbab406-30df-3373-83bc-8b4eee564970.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 35994 IP address blocks: 23.207.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e7:22:fd:52:14:2b:b8:61:1b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=bbacc5a9-7e92-4f07-bf8f-a907db2fad40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f7:66:8d:7e:ff:38:25:f5:5b:78:9b:8f:9f: f5:a7:20:d5:8f:d3:ea:e2:aa:2b:50:0b:b7:ef:50: e3:9f:2e:a5:a7:b7:7c:f1:93:83:ac:93:aa:ef:9b: 03:ab:2e:72:44:2c:36:e5:cf:a1:49:fc:e2:f2:4d: 91:f5:8e:77:88:52:a4:7e:31:c9:74:02:be:47:7b: af:34:8f:c7:1a:cf:26:d3:98:96:f0:9e:df:ea:5c: 4c:85:e7:7a:3a:71:53:7f:4a:2f:54:a9:2e:97:0d: f1:55:0f:83:e4:55:40:cb:04:f1:79:ba:e1:4f:43: 84:fb:2d:d6:92:0b:60:41:60:90:0f:2d:19:8a:c1: 0b:9d:74:6c:28:c7:72:77:b8:95:86:f7:48:50:a9: 0e:93:5c:8d:d7:83:4a:cf:3e:81:e8:21:7a:22:cb: c7:6a:c9:72:ca:34:7a:b7:0f:ae:03:08:2d:e9:7a: fa:ab:b1:0b:cf:cd:22:0b:21:2c:5b:3d:33:1a:08: 5a:19:7c:c6:19:f8:2e:03:cb:15:4b:28:47:fa:3f: dc:58:75:1c:68:3e:f9:88:2a:11:c2:93:a6:83:de: cd:59:04:30:72:87:e1:ea:81:a9:3a:be:53:c0:7a: e4:0a:31:b6:0f:e5:3b:6f:35:d1:88:f8:4e:dc:49: 43:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6E:81:E0:0B:5B:11:7E:02:38:46:A3:32:CF:44:7D:61:0B:4F:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcbab406-30df-3373-83bc-8b4eee564970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:d7:2d:d4:04:8c:17:db:75:4b:cc:86:b5:14:0c:52:53:75: 94:2d:79:1f:3b:84:48:72:c5:15:40:7d:14:bb:6d:dc:0a:99: fe:5b:0e:7e:58:8a:0f:bf:32:49:46:11:e5:11:be:dc:7a:77: 23:ff:7f:f3:d9:55:53:15:a7:be:e3:b2:a3:c0:89:eb:81:b8: 14:f5:4b:9c:05:33:05:2b:31:db:50:df:a0:c7:7d:49:45:41: 05:e8:cf:28:b4:80:ef:a8:a6:fb:1c:0b:93:c5:ed:a5:33:25: 10:c3:c6:6b:17:46:a0:7f:7e:40:80:97:36:12:22:cb:30:ef: 1d:b5:02:1a:66:29:4e:62:1e:8f:11:38:d9:c3:83:93:05:ce: b3:62:9e:16:9b:6f:70:44:4b:18:80:b4:76:c9:2b:68:0a:36: 98:f8:4e:40:8f:98:ff:fe:65:94:b1:eb:47:45:03:37:39:0b: ce:f3:5a:70:50:29:0c:54:71:73:b5:31:ef:cc:9a:0d:be:49: ed:8c:dc:fc:e8:91:cf:53:55:27:b7:8b:c7:b9:e8:4a:2b:27: dd:67:cb:ac:35:b5:24:20:de:1c:6b:06:00:82:ed:9b:42:d2: 41:6b:f9:94:76:36:1f:38:df:74:d7:8d:07:bb:ed:dc:f1:73: e3:88:a6:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKeci/VIUK7hhG6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YmJhY2M1YTktN2U5Mi00ZjA3LWJmOGYtYTkwN2RiMmZhZDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvdmjX7/OCX1W3ibj5/1pyDVj9Pq4qorUAu3 71Djny6lp7d88ZODrJOq75sDqy5yRCw25c+hSfzi8k2R9Y53iFKkfjHJdAK+R3uv NI/HGs8m05iW8J7f6lxMhed6OnFTf0ovVKkulw3xVQ+D5FVAywTxebrhT0OE+y3W kgtgQWCQDy0ZisELnXRsKMdyd7iVhvdIUKkOk1yN14NKzz6B6CF6IsvHaslyyjR6 tw+uAwgt6Xr6q7ELz80iCyEsWz0zGghaGXzGGfguA8sVSyhH+j/cWHUcaD75iCoR wpOmg97NWQQwcofh6oGpOr5TwHrkCjG2D+U7bzXRiPhO3ElDMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9ugeALWxF+AjhGozLPRH1hC0/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmNiYWI0MDYtMzBkZi0z MzczLTgzYmMtOGI0ZWVlNTY0OTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLXLdQEjBfbdUvMhrUUDFJTdZQteR87hEhyxRVAfRS7bdwKmf5bDn5Y ig+/MklGEeURvtx6dyP/f/PZVVMVp77jsqPAieuBuBT1S5wFMwUrMdtQ36DHfUlF QQXozyi0gO+opvscC5PF7aUzJRDDxmsXRqB/fkCAlzYSIssw7x21AhpmKU5iHo8R ONnDg5MFzrNinhabb3BESxiAtHbJK2gKNpj4TkCPmP/+ZZSx60dFAzc5C87zWnBQ KQxUcXO1Me/Mmg2+Se2M3Pzokc9TVSe3i8e56EorJ91ny6w1tSQg3hxrBgCC7ZtC 0kFr+ZR2Nh8433TXjQe77dzxc+OIphY= -----END CERTIFICATE-----Generated at Mon Apr 28 17:35:27 2025 by rpki-client