$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d47cabe5-30b8-33f9-b6d3-9e7645361a39.roa File: d47cabe5-30b8-33f9-b6d3-9e7645361a39.roa (raw, json) Hash identifier: PvTLRmXUp2SF2ad5oa1+IflAPrkg0iBe86qB93dJMeA= Subject key identifier: B6:6E:08:8D:90:B9:61:F2:1E:9C:BC:1C:B3:51:B5:D3:17:64:D4:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF6E7CD5AEF7851CC7C720 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d47cabe5-30b8-33f9-b6d3-9e7645361a39.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 16625 IP address blocks: 23.202.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:6e:7c:d5:ae:f7:85:1c:c7:c7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=5887fc38-7d92-44a5-9493-a69d6fe48949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:58:3f:0d:ce:86:18:43:d0:14:3b:15:b2:ea: 5f:5c:0d:3b:e3:34:e5:ec:3e:63:11:5e:cf:81:cb: 84:00:1d:1f:ef:38:96:a2:f7:9c:74:b0:f8:35:40: 13:06:12:c5:94:84:dd:80:dc:8f:c6:c0:97:72:17: db:ab:6e:78:65:2e:8b:7f:5d:0d:36:df:1d:62:9f: 3b:a0:74:95:0f:6f:d4:d1:bb:0e:a5:dd:4c:6e:ef: 9f:f8:da:4c:74:22:53:a5:4b:46:bd:c4:6e:81:fb: 81:06:ec:d0:1f:29:d7:30:36:87:f5:dd:db:fd:28: 9d:63:b6:2e:69:69:b0:b7:e5:f0:38:dc:05:0e:ae: 73:00:35:f9:ba:c1:49:a1:e0:e6:9f:4b:78:a9:d3: 3f:a0:a2:b1:5b:a6:c6:ea:f9:5e:6a:d5:76:cd:d5: 73:c7:f2:b3:7e:22:b2:6c:ae:e8:ab:64:0f:4c:d7: 14:f7:c7:0f:ff:bc:13:b2:17:0b:5f:46:4c:9c:84: 6a:cd:69:0e:8c:77:17:7a:a5:1b:9c:8c:74:12:38: e6:98:33:ef:04:7b:d0:09:24:42:10:6d:f0:1a:bd: a4:bf:e4:f2:19:2f:7d:fa:12:ad:0f:70:9b:2e:07: f9:0f:d6:cb:46:30:09:1f:4d:fa:1d:a4:6a:a6:39: 0d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6E:08:8D:90:B9:61:F2:1E:9C:BC:1C:B3:51:B5:D3:17:64:D4:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d47cabe5-30b8-33f9-b6d3-9e7645361a39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:1d:83:92:68:ab:ef:ba:cb:6e:7c:5e:76:76:7b:bf:cc:0c: e6:0d:86:a0:15:18:47:0f:53:51:57:0e:92:3e:98:da:e4:c1: 83:13:fd:d1:de:9e:54:ec:dd:80:72:dc:10:3f:40:82:33:f6: 7f:dc:db:1e:5b:86:4c:c2:99:10:ec:30:19:6f:6c:f8:bc:ba: bc:ea:1b:0d:45:7f:89:72:b1:de:b1:89:47:87:dd:5d:4e:4f: be:55:45:06:ff:40:b8:b3:d3:19:49:ba:e8:04:43:55:0c:cb: b2:6f:ce:a9:4a:29:b6:a1:71:bb:1f:84:6a:36:95:a9:53:8b: e7:64:6e:10:f6:2a:ea:70:f1:43:74:f3:a9:bc:5f:0f:1a:cb: 97:c5:c7:27:d7:35:04:b3:84:18:a6:2c:b0:97:31:e2:1e:bb: 5c:3f:dd:aa:27:5a:1a:2b:a8:a8:28:b6:c1:ce:4e:a2:b5:7e: f4:ff:32:37:72:08:90:17:fd:08:7d:9d:02:4d:70:02:5d:cb: 88:52:07:ce:c4:d8:9f:42:6e:82:87:d1:0d:39:17:ce:9e:fb: 00:5a:50:df:80:85:d1:c8:0c:38:63:63:26:a8:22:05:46:30: dd:06:79:73:3b:d1:b9:60:b4:00:bd:3e:ed:4d:8a:46:d9:0e: 71:4e:4a:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz2581a73hRzHxyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk NTg4N2ZjMzgtN2Q5Mi00NGE1LTk0OTMtYTY5ZDZmZTQ4OTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1g/Dc6GGEPQFDsVsupfXA074zTl7D5jEV7P gcuEAB0f7ziWovecdLD4NUATBhLFlITdgNyPxsCXchfbq254ZS6Lf10NNt8dYp87 oHSVD2/U0bsOpd1Mbu+f+NpMdCJTpUtGvcRugfuBBuzQHynXMDaH9d3b/SidY7Yu aWmwt+XwONwFDq5zADX5usFJoeDmn0t4qdM/oKKxW6bG6vleatV2zdVzx/KzfiKy bK7oq2QPTNcU98cP/7wTshcLX0ZMnIRqzWkOjHcXeqUbnIx0EjjmmDPvBHvQCSRC EG3wGr2kv+TyGS99+hKtD3CbLgf5D9bLRjAJH036HaRqpjkNFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZuCI2QuWHyHpy8HLNRtdMXZNQRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDQ3Y2FiZTUtMzBiOC0z M2Y5LWI2ZDMtOWU3NjQ1MzYxYTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8ooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwdg5Joq++6y258XnZ2e7/MDOYNhqAVGEcPU1FXDpI+mNrkwYMT/dHe nlTs3YBy3BA/QIIz9n/c2x5bhkzCmRDsMBlvbPi8urzqGw1Ff4lysd6xiUeH3V1O T75VRQb/QLiz0xlJuugEQ1UMy7JvzqlKKbahcbsfhGo2lalTi+dkbhD2Kupw8UN0 86m8Xw8ay5fFxyfXNQSzhBimLLCXMeIeu1w/3aonWhorqKgotsHOTqK1fvT/Mjdy CJAX/Qh9nQJNcAJdy4hSB87E2J9CboKH0Q05F86e+wBaUN+AhdHIDDhjYyaoIgVG MN0GeXM70blgtAC9Pu1NikbZDnFOSlk= -----END CERTIFICATE-----Generated at Sun Apr 27 17:46:41 2025 by rpki-client