$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4430742-cad1-3759-a6d0-6fde7b7f1fe0.roa File: d4430742-cad1-3759-a6d0-6fde7b7f1fe0.roa (raw, json) Hash identifier: EL/Vh7VdiW3GC2i/iysi91swY3yStzwNqMywU8ytnkk= Subject key identifier: 8B:56:1A:F3:4F:A3:98:42:A7:F6:76:9B:CB:1D:26:47:37:3B:C8:34 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849833A0CE56038BD37FD225B40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4430742-cad1-3759-a6d0-6fde7b7f1fe0.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.195.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:3a:0c:e5:60:38:bd:37:fd:22:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=d1e47bad-1b58-419e-9eba-3e613c97c27c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:74:de:90:a5:92:5a:74:6d:02:63:b5:0b:2e: c7:2b:6e:76:75:b8:a9:ee:ba:6a:b0:88:4d:c8:a4: 71:82:62:5c:25:ac:79:da:06:3f:7a:6c:11:a9:61: 5d:b1:28:f0:3a:13:db:f7:97:91:07:9b:3a:8b:c6: c0:91:32:12:bf:4b:cf:b2:0b:e2:90:e3:98:51:0c: c5:02:b5:15:c3:cd:9e:db:1a:84:70:0c:39:3e:b8: 3f:c0:2f:8b:b9:3d:f9:8c:3b:10:dc:e9:7c:82:44: 17:87:06:48:93:c1:10:e6:bc:b7:40:4a:74:d0:68: 0f:36:f5:f1:e1:07:a6:71:24:db:1a:a9:a9:38:f7: 2f:60:ac:f5:ae:13:7e:b2:eb:a3:33:90:a1:16:04: 1a:40:fc:53:71:31:ca:dd:a8:c0:5a:8e:89:76:e3: a8:98:81:7a:dd:b6:67:1d:72:da:b9:35:55:70:78: d7:1d:f7:dd:fd:31:02:cd:7d:d1:b8:45:d9:8e:ea: d7:ce:75:cd:0e:41:1f:d9:af:2c:f2:1f:d7:b9:b3: 14:74:5d:0c:80:bb:30:87:d4:5b:ad:07:f5:df:c6: dd:f7:e8:4b:be:0a:7f:8e:33:ef:93:85:db:bb:4b: 74:ea:7c:15:b1:26:58:7a:07:dd:eb:9f:7d:1f:b7: d9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:56:1A:F3:4F:A3:98:42:A7:F6:76:9B:CB:1D:26:47:37:3B:C8:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4430742-cad1-3759-a6d0-6fde7b7f1fe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:49:32:0a:7f:95:ac:22:87:76:7e:81:27:53:4b:50:1f:93: 02:d6:e0:ea:87:70:a9:4d:5b:ed:f2:c6:b5:30:1b:c9:d5:33: 08:5e:eb:e9:4b:a6:3e:fa:34:9c:6c:58:1e:7f:61:2e:d9:dc: 02:b4:23:78:5e:3b:a6:00:88:41:bf:8c:c4:05:fe:65:be:42: 81:ae:54:c3:92:27:6f:cc:15:b4:e7:c4:56:90:f9:09:98:ae: 63:e1:e5:0b:c4:e9:1f:c1:c1:e8:4a:5a:cd:bb:a1:28:3b:44: 91:5b:65:18:0d:03:f2:6c:ed:b8:11:38:7c:7c:14:77:4f:6d: b1:12:61:0a:cc:53:63:e5:50:93:44:22:c6:8f:4a:d2:56:ee: 6e:0e:4a:de:9c:22:49:ad:77:2e:7f:89:b5:01:02:a3:29:75: 82:7f:ff:e5:b5:f3:36:d2:20:69:9b:e9:3b:56:5d:17:c1:91: 4f:e1:c5:84:87:16:9e:d0:53:06:d7:a7:10:5c:f7:73:43:43: 1c:8b:cc:75:af:6f:2b:ea:a3:29:12:4e:76:a3:e0:fb:f4:6f: 77:2c:67:62:00:12:68:d8:f2:03:c7:0b:f0:20:3b:52:0c:44: b3:a3:40:9a:cf:83:c1:84:c6:77:83:85:96:f4:81:93:a4:81: 21:aa:00:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOgzlYDi9N/0iW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk ZDFlNDdiYWQtMWI1OC00MTllLTllYmEtM2U2MTNjOTdjMjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3TekKWSWnRtAmO1Cy7HK252dbip7rpqsIhN yKRxgmJcJax52gY/emwRqWFdsSjwOhPb95eRB5s6i8bAkTISv0vPsgvikOOYUQzF ArUVw82e2xqEcAw5Prg/wC+LuT35jDsQ3Ol8gkQXhwZIk8EQ5ry3QEp00GgPNvXx 4QemcSTbGqmpOPcvYKz1rhN+suujM5ChFgQaQPxTcTHK3ajAWo6JduOomIF63bZn HXLauTVVcHjXHffd/TECzX3RuEXZjurXznXNDkEf2a8s8h/XubMUdF0MgLswh9Rb rQf138bd9+hLvgp/jjPvk4Xbu0t06nwVsSZYegfd6599H7fZCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItWGvNPo5hCp/Z2m8sdJkc3O8g0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDQ0MzA3NDItY2FkMS0z NzU5LWE2ZDAtNmZkZTdiN2YxZmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8MUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9JMgp/lawih3Z+gSdTS1AfkwLW4OqHcKlNW+3yxrUwG8nVMwhe6+lL pj76NJxsWB5/YS7Z3AK0I3heO6YAiEG/jMQF/mW+QoGuVMOSJ2/MFbTnxFaQ+QmY rmPh5QvE6R/BwehKWs27oSg7RJFbZRgNA/Js7bgROHx8FHdPbbESYQrMU2PlUJNE IsaPStJW7m4OSt6cIkmtdy5/ibUBAqMpdYJ//+W18zbSIGmb6TtWXRfBkU/hxYSH Fp7QUwbXpxBc93NDQxyLzHWvbyvqoykSTnaj4Pv0b3csZ2IAEmjY8gPHC/AgO1IM RLOjQJrPg8GExneDhZb0gZOkgSGqAGc= -----END CERTIFICATE-----Generated at Sat Apr 26 15:54:30 2025 by rpki-client