$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2812d8-2207-3975-bce2-e928190a6c96.roa File: cf2812d8-2207-3975-bce2-e928190a6c96.roa (raw, json) Hash identifier: DY6epCc4xG7G9+JeUDrQojMJespf1w2Iogz9SeS6ViE= Subject key identifier: 1F:57:EF:94:08:BB:20:D5:0B:92:F0:46:2F:DD:AF:C3:04:D8:61:EB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF6FB0C76F0947381F8880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2812d8-2207-3975-bce2-e928190a6c96.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.202.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:6f:b0:c7:6f:09:47:38:1f:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=bfa35a10-9372-4336-9ee6-b368294b781c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:17:8e:29:1e:cf:2c:5a:44:36:73:91:f4:3e: 7f:9e:8d:be:f4:5a:04:6a:92:e0:bd:01:02:73:6d: 28:e7:d5:db:79:8f:81:b3:cd:c9:75:a8:ae:ca:37: 4d:a9:ea:b0:0a:68:d8:98:0c:4e:f1:6a:22:9e:9f: 86:df:b9:26:ba:bf:14:7b:8a:77:69:19:cc:08:02: c0:91:9a:18:e6:aa:9a:e1:cb:1f:55:bd:ec:2b:44: aa:35:8c:af:b4:2f:50:34:9a:d4:82:95:49:54:b3: 4d:45:c5:6f:33:1c:b2:79:e1:35:2b:b7:7f:38:3c: c3:0b:c5:e9:47:f6:8e:78:9e:16:da:46:d4:77:2c: 85:3a:00:87:b0:2a:4b:07:9e:ee:df:36:eb:d7:52: 21:a1:7d:6c:9f:1f:12:47:71:1e:dd:2b:85:74:39: 2f:11:cd:12:98:42:a5:53:c7:3b:af:79:6b:d3:aa: 2e:57:45:e3:70:9e:9c:cc:32:c5:c2:e7:d8:0f:39: 01:9a:ef:52:ae:18:ac:63:81:55:68:cc:d9:9d:57: 4c:df:9a:09:ad:7e:0b:0e:ac:28:ba:df:8f:3f:21: 7b:40:c4:be:04:53:29:2d:5a:67:ad:29:3f:09:2c: ca:46:59:8e:7d:92:7b:1f:68:95:46:d3:57:51:5b: 79:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:57:EF:94:08:BB:20:D5:0B:92:F0:46:2F:DD:AF:C3:04:D8:61:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2812d8-2207-3975-bce2-e928190a6c96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:cd:b2:68:4d:25:c1:8a:00:4b:a6:45:6d:94:f5:a8:ac:24: ec:fe:f4:3e:fb:d9:e7:0c:b9:68:91:a6:55:d6:d1:c1:25:97: 9c:44:61:67:f6:e1:d3:eb:eb:c1:c7:f4:1e:30:82:f9:12:b9: be:d3:95:80:91:eb:0e:1f:7c:09:b9:7a:81:9c:aa:28:3c:f7: f8:f1:10:29:82:5a:ef:9e:aa:68:4a:d5:1b:ab:a9:36:51:a1: ae:bf:eb:ba:10:ab:94:af:5a:ef:57:ca:bf:91:34:3a:87:d3: b5:33:df:10:ab:18:c4:3d:79:87:00:2b:00:3e:43:0d:2a:88: e0:64:f3:ae:3f:8f:e9:35:1c:a1:3e:cd:12:c3:87:57:1f:2f: 57:42:9d:f9:a3:ba:45:26:ff:bd:1d:8e:1d:2b:1b:5d:1c:55: e7:91:53:bd:ab:b9:84:b5:0d:a1:77:8e:b1:99:c7:90:93:ba: eb:4a:6b:0d:56:4d:3d:6f:e3:53:de:06:cd:db:de:be:d0:ba: fd:75:7e:d8:e5:48:1e:50:a0:d5:2b:94:7b:25:a8:a5:08:8a: c8:e0:cc:18:91:94:e6:42:7d:aa:0b:aa:eb:2b:81:a5:c3:dc: 07:fa:fa:bf:84:1c:a0:70:6b:26:df:37:02:17:b4:7b:43:2d: 23:99:b2:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz2+wx28JRzgfiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk YmZhMzVhMTAtOTM3Mi00MzM2LTllZTYtYjM2ODI5NGI3ODFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxeOKR7PLFpENnOR9D5/no2+9FoEapLgvQEC c20o59XbeY+Bs83JdaiuyjdNqeqwCmjYmAxO8Woinp+G37kmur8Ue4p3aRnMCALA kZoY5qqa4csfVb3sK0SqNYyvtC9QNJrUgpVJVLNNRcVvMxyyeeE1K7d/ODzDC8Xp R/aOeJ4W2kbUdyyFOgCHsCpLB57u3zbr11IhoX1snx8SR3Ee3SuFdDkvEc0SmEKl U8c7r3lr06ouV0XjcJ6czDLFwufYDzkBmu9SrhisY4FVaMzZnVdM35oJrX4LDqwo ut+PPyF7QMS+BFMpLVpnrSk/CSzKRlmOfZJ7H2iVRtNXUVt5XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9X75QIuyDVC5LwRi/dr8ME2GHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2YyODEyZDgtMjIwNy0z OTc1LWJjZTItZTkyODE5MGE2Yzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8qgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzNsmhNJcGKAEumRW2U9aisJOz+9D772ecMuWiRplXW0cEll5xEYWf2 4dPr68HH9B4wgvkSub7TlYCR6w4ffAm5eoGcqig89/jxECmCWu+eqmhK1RurqTZR oa6/67oQq5SvWu9Xyr+RNDqH07Uz3xCrGMQ9eYcAKwA+Qw0qiOBk864/j+k1HKE+ zRLDh1cfL1dCnfmjukUm/70djh0rG10cVeeRU72ruYS1DaF3jrGZx5CTuutKaw1W TT1v41PeBs3b3r7Quv11ftjlSB5QoNUrlHslqKUIisjgzBiRlOZCfaoLqusrgaXD 3Af6+r+EHKBwaybfNwIXtHtDLSOZsk4= -----END CERTIFICATE-----Generated at Sat Apr 26 16:09:19 2025 by rpki-client