$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1b26acc-0f2a-3102-b549-1647c87b0176.roa File: c1b26acc-0f2a-3102-b549-1647c87b0176.roa (raw, json) Hash identifier: F86PL2j9ZCk1s2Q+aAUd5MObnfvI3m6arsqG7NUL3oc= Subject key identifier: C3:4E:EB:72:87:70:7B:F2:62:E2:8B:92:D3:97:6E:42:7F:3C:DB:D2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584986046ECD26656C0D96D83B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1b26acc-0f2a-3102-b549-1647c87b0176.roa Signing time: Mon 14 Apr 2025 13:00:59 +0000 ROA not before: Mon 14 Apr 2025 13:00:59 +0000 ROA not after: Sun 13 Jul 2025 13:00:59 +0000 asID: 16625 IP address blocks: 23.199.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:04:6e:cd:26:65:6c:0d:96:d8:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 14 13:00:59 2025 GMT Not After : Jul 13 13:00:59 2025 GMT Subject: CN=2b29d47b-b49d-4b7d-87cd-c8ac0b4ba113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f6:70:61:b0:f1:48:c1:80:4c:24:df:5c:54: 39:51:1b:20:1b:d4:2f:5a:a1:5e:23:28:f3:12:63: 2a:8d:e3:71:42:90:b6:cb:63:d7:fe:7a:b8:cd:21: d9:4c:ce:c6:70:d5:4b:83:1e:12:4a:e6:49:f4:09: f8:37:e0:31:36:71:7a:53:21:00:49:a4:fb:8d:f0: d0:57:ea:59:ad:9d:50:f9:ef:89:3e:be:f9:45:97: e1:43:cf:3a:c6:ec:6c:57:4d:90:2c:37:7c:0a:c2: c3:90:4d:a9:26:f3:c1:d2:62:81:28:d2:f4:74:65: fc:26:d9:3d:4a:46:3f:05:7f:18:a4:ba:5a:57:8b: b0:e6:eb:b0:b9:02:ff:fe:6c:6f:8d:ec:2a:1e:20: 40:02:ff:96:c5:7b:3d:fb:ee:a2:91:a9:1c:d4:0f: a1:78:cf:64:e6:ab:64:14:02:5f:13:12:2e:c2:af: 68:4d:40:77:60:cd:07:98:84:64:6d:f4:0e:88:2d: 27:42:31:00:c5:94:70:77:79:91:17:40:12:45:56: be:13:67:7e:a3:4d:a1:ea:9d:75:f9:75:59:6e:c7: 58:2a:bc:0c:f7:9c:73:34:75:0e:17:cf:a8:49:2a: e5:d4:55:f5:e8:63:96:61:6c:1e:5a:74:ca:b8:03: 5c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4E:EB:72:87:70:7B:F2:62:E2:8B:92:D3:97:6E:42:7F:3C:DB:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1b26acc-0f2a-3102-b549-1647c87b0176.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:24:ed:27:b1:62:2b:9e:bd:b2:87:00:af:5e:c4:b3:8c:dc: 99:76:da:2b:02:ed:66:a8:cc:cf:42:eb:6c:9b:b1:94:2f:0a: 97:08:43:e3:68:6a:52:96:03:80:e3:33:2a:d6:b0:49:70:ef: 35:bc:cb:04:2e:78:ea:8a:03:08:28:08:cf:10:08:a6:13:3b: 22:8b:cf:3c:c0:3c:94:14:f1:69:cf:70:f5:21:1c:99:0c:12: 01:b0:fc:38:c1:82:ed:ce:2b:bd:bb:ec:19:2d:e6:5f:70:a1: 23:17:b9:87:76:90:47:f5:30:9a:ff:5a:0d:3b:75:d6:65:c8: e0:85:b1:8c:a6:e5:77:2b:2d:35:40:e9:86:b4:bc:9d:f4:cc: c3:d0:35:30:8d:70:eb:c0:7a:2c:ce:a3:34:6f:66:07:43:fb: 9f:c8:42:9b:75:3a:cf:0d:ec:4b:70:a4:60:6d:d9:2d:2f:c2: 97:f0:21:a8:df:9e:3c:7f:bd:b5:2f:ed:49:f0:c9:fa:d1:e1: b5:2a:ea:34:86:15:3b:7c:1e:8d:3e:4e:93:44:66:9f:ed:21: 39:c3:83:93:18:5b:d8:b0:68:57:a1:d3:44:92:b5:16:55:38: d3:79:32:df:ad:52:8a:de:eb:69:03:28:56:12:1f:48:d6:19: b0:13:d6:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGBG7NJmVsDZbYOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNDEzMDA1OVoXDTI1MDcxMzEzMDA1OVowLzEtMCsGA1UEAxMk MmIyOWQ0N2ItYjQ5ZC00YjdkLTg3Y2QtYzhhYzBiNGJhMTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvZwYbDxSMGATCTfXFQ5URsgG9QvWqFeIyjz EmMqjeNxQpC2y2PX/nq4zSHZTM7GcNVLgx4SSuZJ9An4N+AxNnF6UyEASaT7jfDQ V+pZrZ1Q+e+JPr75RZfhQ886xuxsV02QLDd8CsLDkE2pJvPB0mKBKNL0dGX8Jtk9 SkY/BX8YpLpaV4uw5uuwuQL//mxvjewqHiBAAv+WxXs9++6ikakc1A+heM9k5qtk FAJfExIuwq9oTUB3YM0HmIRkbfQOiC0nQjEAxZRwd3mRF0ASRVa+E2d+o02h6p11 +XVZbsdYKrwM95xzNHUOF8+oSSrl1FX16GOWYWweWnTKuANc7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNO63KHcHvyYuKLktOXbkJ/PNvSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzFiMjZhY2MtMGYyYS0z MTAyLWI1NDktMTY0N2M4N2IwMTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8cYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQk7SexYiuevbKHAK9exLOM3Jl22isC7WaozM9C62ybsZQvCpcIQ+No alKWA4DjMyrWsElw7zW8ywQueOqKAwgoCM8QCKYTOyKLzzzAPJQU8WnPcPUhHJkM EgGw/DjBgu3OK7277Bkt5l9woSMXuYd2kEf1MJr/Wg07ddZlyOCFsYym5XcrLTVA 6Ya0vJ30zMPQNTCNcOvAeizOozRvZgdD+5/IQpt1Os8N7EtwpGBt2S0vwpfwIajf njx/vbUv7UnwyfrR4bUq6jSGFTt8Ho0+TpNEZp/tITnDg5MYW9iwaFeh00SStRZV ONN5Mt+tUore62kDKFYSH0jWGbAT1rM= -----END CERTIFICATE-----Generated at Sun Apr 27 01:38:42 2025 by rpki-client