$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bdb5afd8-7d9a-3a4d-baa4-2fd060adbbd1.roa File: bdb5afd8-7d9a-3a4d-baa4-2fd060adbbd1.roa (raw, json) Hash identifier: utx3cEe6VFOTz8r7dzy4WBm8hDisWPh4rL1MeooRSa0= Subject key identifier: EC:E4:02:04:C0:3B:D1:87:1B:68:1A:6F:8A:09:0B:05:C9:0D:99:79 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E1996C1595CA8E1C3700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bdb5afd8-7d9a-3a4d-baa4-2fd060adbbd1.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.204.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e1:99:6c:15:95:ca:8e:1c:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=5b411015-560e-4c10-9021-700ee8869b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:67:7a:94:d1:28:00:9e:04:2b:89:ab:a5:d9: 17:69:68:b9:01:0a:af:e8:b8:05:bb:ad:6f:08:74: 87:e1:12:25:2b:8f:ab:f0:68:13:90:87:05:bf:07: cb:6a:40:a0:49:21:65:cb:86:0b:1e:24:33:e8:46: 45:d6:bb:0e:1f:98:db:e9:c8:57:78:5e:fe:7f:69: 95:84:ea:57:77:c9:d8:b0:12:be:09:a2:8c:35:18: f5:36:85:3a:96:8b:09:0d:bb:52:34:c5:83:4c:f6: 0f:a4:d6:77:18:e2:41:db:60:c6:c9:0a:ae:3a:d3: 8f:4a:7f:9c:75:62:8a:8c:7b:5c:a0:39:5f:9f:6f: f1:3d:51:fd:7f:c0:a7:f9:8e:83:7d:29:7f:fb:c9: 9a:f7:91:70:a1:f1:20:a8:a6:94:8c:ad:b1:4f:e2: a5:c4:c1:82:e4:ac:60:89:a9:db:f4:8f:24:ad:af: 32:fe:35:47:8e:55:f7:db:1d:9c:a2:ab:43:1a:47: df:23:b2:15:23:5d:c1:e5:73:ce:b9:fb:0b:24:59: 97:54:07:76:1e:43:90:d8:21:90:79:36:72:04:e8: c3:89:de:02:ef:0d:21:b4:8b:1b:c7:33:96:10:35: 8f:5f:af:a6:71:2c:38:04:fd:49:5f:1d:8d:b8:88: 6c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E4:02:04:C0:3B:D1:87:1B:68:1A:6F:8A:09:0B:05:C9:0D:99:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bdb5afd8-7d9a-3a4d-baa4-2fd060adbbd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:11:2a:83:d8:0d:3a:6c:0f:61:cb:16:22:f2:ee:55:a9:01: 4e:b5:77:ce:fa:78:ab:51:0e:4b:6c:f0:d6:92:5e:e7:02:b9: fa:0b:8b:ca:f6:1b:3c:6d:c5:9a:d3:dc:e7:1a:2f:dd:33:d8: 1b:6f:58:31:1a:b7:cf:8f:fb:cc:e0:96:76:44:90:3b:d3:c4: de:fe:52:d9:e4:c7:67:b2:a0:9a:1b:75:99:99:60:f7:7a:29: 10:8a:fb:d3:12:b8:be:9f:d8:d0:44:73:6c:f5:91:13:4a:a2: 4d:b2:03:8d:e2:48:ee:b2:a0:41:b9:53:aa:2f:71:fc:3a:f5: ac:27:7a:8f:cf:76:0d:d0:bf:52:ec:24:be:84:87:51:57:9e: 35:51:e5:b2:74:6a:b2:c6:27:9f:ed:58:f3:1c:a8:15:8b:7c: 64:a9:ec:48:8d:29:f3:9c:75:16:66:62:e9:c1:4a:8c:c6:d9: 06:43:6d:91:db:dd:a3:79:cd:ee:f1:ed:ef:6b:f1:86:00:6d: f0:8e:19:ac:01:bd:0c:1d:f1:04:69:b2:27:c6:d6:61:12:9e: 39:f4:4b:81:d5:ed:c5:31:7e:07:d5:54:ad:99:d6:d6:ce:d2: fa:21:af:15:14:f3:47:84:d9:bd:c9:21:32:8a:cd:10:94:84: 8c:f2:81:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKeGZbBWVyo4cNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NWI0MTEwMTUtNTYwZS00YzEwLTkwMjEtNzAwZWU4ODY5YjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWd6lNEoAJ4EK4mrpdkXaWi5AQqv6LgFu61v CHSH4RIlK4+r8GgTkIcFvwfLakCgSSFly4YLHiQz6EZF1rsOH5jb6chXeF7+f2mV hOpXd8nYsBK+CaKMNRj1NoU6losJDbtSNMWDTPYPpNZ3GOJB22DGyQquOtOPSn+c dWKKjHtcoDlfn2/xPVH9f8Cn+Y6DfSl/+8ma95FwofEgqKaUjK2xT+KlxMGC5Kxg ianb9I8kra8y/jVHjlX32x2coqtDGkffI7IVI13B5XPOufsLJFmXVAd2HkOQ2CGQ eTZyBOjDid4C7w0htIsbxzOWEDWPX6+mcSw4BP1JXx2NuIhszQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzkAgTAO9GHG2gab4oJCwXJDZl5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmRiNWFmZDgtN2Q5YS0z YTRkLWJhYTQtMmZkMDYwYWRiYmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8xkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMRKoPYDTpsD2HLFiLy7lWpAU61d876eKtRDkts8NaSXucCufoLi8r2 GzxtxZrT3OcaL90z2BtvWDEat8+P+8zglnZEkDvTxN7+Utnkx2eyoJobdZmZYPd6 KRCK+9MSuL6f2NBEc2z1kRNKok2yA43iSO6yoEG5U6ovcfw69awneo/Pdg3Qv1Ls JL6Eh1FXnjVR5bJ0arLGJ5/tWPMcqBWLfGSp7EiNKfOcdRZmYunBSozG2QZDbZHb 3aN5ze7x7e9r8YYAbfCOGawBvQwd8QRpsifG1mESnjn0S4HV7cUxfgfVVK2Z1tbO 0vohrxUU80eE2b3JITKKzRCUhIzygZ4= -----END CERTIFICATE-----Generated at Mon Apr 28 19:53:33 2025 by rpki-client