$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4190c19-a41b-31b0-99f1-9477e8db5b9d.roa File: c4190c19-a41b-31b0-99f1-9477e8db5b9d.roa (raw, json) Hash identifier: zyZIx23HiKGLOFJXlDNjbEwuaU0URNKVykkr/xw/NuM= Subject key identifier: 25:F8:B5:E2:84:E5:A6:9A:80:D4:C3:83:C9:1B:95:E6:14:26:33:60 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF70A17101630551DEEFA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4190c19-a41b-31b0-99f1-9477e8db5b9d.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.203.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:70:a1:71:01:63:05:51:de:ef:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=af478f65-f89e-421b-a2c0-faa1a3b34779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1d:b7:ef:53:c3:80:42:b9:dd:64:b5:f5:55: 7a:48:f6:1e:a6:16:ac:ab:eb:86:6c:9f:c2:85:5c: 3e:20:18:06:78:b3:3b:a6:2d:0c:6b:36:6f:95:e4: a6:d4:82:df:48:b9:a3:df:13:3e:88:37:3c:5b:e3: 32:45:b5:38:53:35:94:0c:f4:df:b3:aa:68:7b:67: e9:27:5c:2a:c9:c3:a6:d0:50:a9:7e:b3:8f:a1:93: a9:81:85:73:d8:12:29:44:e7:02:7c:d6:cc:60:bc: 12:c3:98:e0:5d:54:24:1f:4e:43:10:70:00:b3:08: 23:82:db:8f:f7:ee:be:d9:b4:1c:01:8e:3b:b8:69: 2e:83:98:f7:be:19:0b:63:2f:0c:db:39:e6:08:4c: f3:ef:4b:d0:9c:17:6c:39:71:0b:70:1b:0c:75:71: 96:b9:d3:79:61:1f:21:96:d5:9b:65:d2:00:8a:92: 71:fd:14:9f:f7:08:e7:38:20:76:bc:15:53:2c:94: f6:05:e0:99:8f:93:2f:23:b8:03:f3:5d:0f:ff:9d: 90:5a:c4:17:4a:04:cb:66:41:a0:99:93:10:42:96: 8d:b1:b0:f8:3b:4e:da:4f:85:72:7a:5e:0e:2c:0b: e4:05:c5:20:2d:ab:2c:0a:00:e0:76:b1:d0:84:38: 3c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F8:B5:E2:84:E5:A6:9A:80:D4:C3:83:C9:1B:95:E6:14:26:33:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4190c19-a41b-31b0-99f1-9477e8db5b9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:1f:d2:f6:08:c6:04:5f:6c:37:a8:dd:7e:09:ee:d9:82:80: d6:1a:62:53:e9:3f:ab:47:d6:64:0a:e5:47:42:24:9d:dc:e4: 4f:b8:52:36:95:c3:4e:1c:89:c5:20:9e:09:b1:b7:91:1b:81: bf:26:66:63:46:e8:9b:be:46:24:85:89:59:a7:21:b8:ce:28: a2:9f:ec:bc:99:e0:b5:ef:50:17:ab:6d:4f:59:15:bd:49:32: 25:2c:bb:25:0a:83:d1:b2:e7:f0:75:3b:1a:c1:21:07:94:ba: e4:c9:c6:0e:be:d9:64:b9:e9:9d:f1:eb:af:bc:8d:ee:f4:f8: e2:c7:b2:b0:5a:ed:c3:41:dc:42:11:c5:95:49:1e:99:a7:55: f3:63:c6:df:d8:b3:28:0c:eb:33:c6:51:58:75:9a:da:12:e0: 3e:e1:37:70:b6:92:0a:c0:0c:59:0c:2a:98:56:09:e5:d3:1f: 4a:2e:93:10:34:90:57:b7:ec:23:a9:25:92:30:ca:a1:ee:e1: c1:db:98:b5:1d:36:3b:f2:27:ea:7a:d2:01:a8:74:9d:f4:1d: f4:ba:0d:91:83:1d:91:23:b9:14:14:45:75:12:d1:9f:73:13: 16:75:cf:84:92:96:be:93:90:d2:e4:9f:7d:9d:c1:06:be:d5: 42:eb:15:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz3ChcQFjBVHe76AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk YWY0NzhmNjUtZjg5ZS00MjFiLWEyYzAtZmFhMWEzYjM0Nzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh2371PDgEK53WS19VV6SPYephasq+uGbJ/C hVw+IBgGeLM7pi0MazZvleSm1ILfSLmj3xM+iDc8W+MyRbU4UzWUDPTfs6poe2fp J1wqycOm0FCpfrOPoZOpgYVz2BIpROcCfNbMYLwSw5jgXVQkH05DEHAAswgjgtuP 9+6+2bQcAY47uGkug5j3vhkLYy8M2znmCEzz70vQnBdsOXELcBsMdXGWudN5YR8h ltWbZdIAipJx/RSf9wjnOCB2vBVTLJT2BeCZj5MvI7gD810P/52QWsQXSgTLZkGg mZMQQpaNsbD4O07aT4Vyel4OLAvkBcUgLassCgDgdrHQhDg8oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCX4teKE5aaagNTDg8kbleYUJjNgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzQxOTBjMTktYTQxYi0z MWIwLTk5ZjEtOTQ3N2U4ZGI1YjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8uEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4f0vYIxgRfbDeo3X4J7tmCgNYaYlPpP6tH1mQK5UdCJJ3c5E+4UjaV w04cicUgngmxt5Ebgb8mZmNG6Ju+RiSFiVmnIbjOKKKf7LyZ4LXvUBerbU9ZFb1J MiUsuyUKg9Gy5/B1OxrBIQeUuuTJxg6+2WS56Z3x66+8je70+OLHsrBa7cNB3EIR xZVJHpmnVfNjxt/YsygM6zPGUVh1mtoS4D7hN3C2kgrADFkMKphWCeXTH0oukxA0 kFe37COpJZIwyqHu4cHbmLUdNjvyJ+p60gGodJ30HfS6DZGDHZEjuRQURXUS0Z9z ExZ1z4SSlr6TkNLkn32dwQa+1ULrFQQ= -----END CERTIFICATE-----Generated at Sun Apr 27 09:18:08 2025 by rpki-client