$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9c1e8f7-d535-31e8-ae5e-4cae1328a3a2.roa File: d9c1e8f7-d535-31e8-ae5e-4cae1328a3a2.roa (raw, json) Hash identifier: GtmPhZ4B3hE++us9JhdXUIGlrZ74uVs79J2pUJWM8s4= Subject key identifier: BB:89:5A:DB:06:47:B5:89:C3:3D:C5:22:4E:96:AB:0C:D4:6B:88:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498769BE84AA75DCEF06451D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9c1e8f7-d535-31e8-ae5e-4cae1328a3a2.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.200.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:be:84:aa:75:dc:ef:06:45:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=115e21a2-702d-4c13-89a6-a96137fe899c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cb:07:e6:dd:68:7d:70:a8:f9:24:19:08:39: 85:9d:3b:b2:eb:7d:52:79:06:cd:1e:b4:b3:0f:a7: 5f:d0:6e:e6:b9:1f:fe:9f:a6:b1:8b:e9:43:c1:2e: 78:d0:22:01:3b:e5:97:98:a5:2a:a5:54:86:f6:c3: 0b:de:bc:03:2c:24:8d:99:c6:63:e7:56:c9:f1:18: b1:31:e2:9d:7a:00:c9:1a:4c:d1:4b:77:bb:ef:f0: 0a:f6:64:db:e3:e9:1d:6e:af:6b:d1:67:8e:80:00: 20:06:12:22:de:0d:ac:03:5b:cb:b0:f5:f9:92:69: 2c:44:24:03:f7:6f:9d:d0:5a:6d:1f:9f:b4:e8:84: df:21:d3:80:28:d5:85:74:5a:db:a0:90:6f:0d:6f: 13:ab:63:bf:52:3b:98:0a:16:f5:db:28:7a:92:d0: 17:4c:a5:ab:10:91:60:7a:f9:28:0e:39:cf:3f:a1: e8:93:2c:47:a8:f4:9d:b2:24:a7:12:81:29:8a:8b: 9a:ca:db:fa:06:04:18:69:e2:8d:83:df:16:25:f8: fd:e2:22:7d:f0:c1:07:1a:8f:85:78:a2:1f:70:d7: 6a:cd:8b:64:7d:49:fd:3f:ac:6e:1b:8e:3a:63:e8: 76:45:5a:5b:25:18:a3:93:51:d0:b8:85:34:62:3a: ba:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:89:5A:DB:06:47:B5:89:C3:3D:C5:22:4E:96:AB:0C:D4:6B:88:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9c1e8f7-d535-31e8-ae5e-4cae1328a3a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:52:8c:5a:a3:6f:30:65:65:8d:c0:f0:be:59:2c:c3:c5:76: 72:21:00:93:6b:ce:73:3a:87:d5:e9:8a:9a:ce:3c:ca:e0:ba: fe:31:71:e4:7e:ea:89:97:4b:82:96:fb:4c:96:08:0e:a0:be: e3:a0:55:06:19:61:8d:89:d1:cc:e1:99:f3:48:50:d2:48:25: 71:2b:37:c6:cd:2a:83:2f:7e:f8:95:f3:4a:2e:62:b9:c6:49: 22:9c:b4:5f:f6:cc:0e:14:34:74:6e:be:6c:b2:36:25:9d:29: 66:f3:8d:fd:ab:95:fb:17:a8:88:ff:60:81:f4:51:06:1c:fa: b0:3e:35:7e:5d:ed:33:1e:4d:2d:44:2a:0a:d9:65:d8:b7:08: e2:51:34:6e:2d:83:d4:0a:eb:b8:ad:68:fb:1a:17:f7:bc:e2: 74:12:61:82:58:ed:d8:66:ce:09:66:08:ca:0f:20:d3:e7:bd: 27:ef:8c:10:6c:cf:e9:91:1a:40:93:74:45:0f:58:77:de:04: c8:85:30:ee:25:a1:2a:d4:8e:f6:12:40:75:5d:9f:ba:55:33: 9e:0b:0f:1d:4e:87:16:c7:68:a6:c3:90:99:89:8c:78:c4:d3: 2d:b2:fd:68:a3:e3:90:bd:b9:d8:7c:0a:99:88:44:17:06:29: b8:68:45:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHab6EqnXc7wZFHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk MTE1ZTIxYTItNzAyZC00YzEzLTg5YTYtYTk2MTM3ZmU4OTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyssH5t1ofXCo+SQZCDmFnTuy631SeQbNHrSz D6df0G7muR/+n6axi+lDwS540CIBO+WXmKUqpVSG9sML3rwDLCSNmcZj51bJ8Rix MeKdegDJGkzRS3e77/AK9mTb4+kdbq9r0WeOgAAgBhIi3g2sA1vLsPX5kmksRCQD 92+d0FptH5+06ITfIdOAKNWFdFrboJBvDW8Tq2O/UjuYChb12yh6ktAXTKWrEJFg evkoDjnPP6HokyxHqPSdsiSnEoEpiouaytv6BgQYaeKNg98WJfj94iJ98MEHGo+F eKIfcNdqzYtkfUn9P6xuG446Y+h2RVpbJRijk1HQuIU0Yjq60QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuJWtsGR7WJwz3FIk6WqwzUa4jcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDljMWU4ZjctZDUzNS0z MWU4LWFlNWUtNGNhZTEzMjhhM2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8gXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRSjFqjbzBlZY3A8L5ZLMPFdnIhAJNrznM6h9XpiprOPMrguv4xceR+ 6omXS4KW+0yWCA6gvuOgVQYZYY2J0czhmfNIUNJIJXErN8bNKoMvfviV80ouYrnG SSKctF/2zA4UNHRuvmyyNiWdKWbzjf2rlfsXqIj/YIH0UQYc+rA+NX5d7TMeTS1E KgrZZdi3COJRNG4tg9QK67itaPsaF/e84nQSYYJY7dhmzglmCMoPINPnvSfvjBBs z+mRGkCTdEUPWHfeBMiFMO4loSrUjvYSQHVdn7pVM54LDx1OhxbHaKbDkJmJjHjE 0y2y/Wij45C9udh8CpmIRBcGKbhoRSE= -----END CERTIFICATE-----Generated at Sat Apr 26 15:56:56 2025 by rpki-client