$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de48e4de-3b88-37fa-92b9-3fced7e7f93b.roa File: de48e4de-3b88-37fa-92b9-3fced7e7f93b.roa (raw, json) Hash identifier: nR/IJ38d+MkXFi1VlWEhqGpggrtec4J3oG2eTcVfBA8= Subject key identifier: F1:7F:39:86:02:46:2E:89:71:62:C0:DD:C7:E1:CA:27:32:E5:FC:B6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E525F837BA5F70923940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de48e4de-3b88-37fa-92b9-3fced7e7f93b.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.205.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e5:25:f8:37:ba:5f:70:92:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=5dc9b706-87c0-4ffd-8c34-b2a1c8c304db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ae:04:c6:3d:81:1c:5c:13:61:38:cb:34:cc: b7:74:68:9f:f5:47:e9:a0:d8:56:55:cc:48:87:4a: c5:4c:29:f4:7b:18:01:70:c3:16:72:8e:12:fb:2f: 7e:00:06:8f:c3:57:a4:fb:23:e5:00:f5:e0:14:e9: c6:b2:78:7d:65:d7:ec:a1:93:8e:28:00:f9:e5:6b: d1:e6:5d:80:c5:b5:57:61:91:9c:b0:65:9f:a0:ae: 77:3b:de:b1:44:1c:3c:4b:46:27:1f:cb:88:73:4c: ff:4e:55:88:c7:b5:b7:e5:33:c8:d4:8c:0a:77:12: 84:6b:86:84:1c:81:05:7d:84:cd:d8:b5:eb:9e:c2: 82:3b:4a:e2:9b:e9:fa:78:1c:85:07:26:71:fd:9e: 75:27:13:55:51:69:00:26:96:5e:38:31:b1:18:65: f7:13:b6:6f:24:44:36:3f:1e:ae:db:39:96:03:7d: 37:7c:ae:ba:56:65:00:83:1c:ba:1b:4a:f5:78:a4: 9f:ce:8e:db:4f:2e:9c:15:70:96:f3:1a:80:a3:f3: 84:e4:dd:ac:e2:75:87:e1:1b:f6:54:b7:ae:12:04: 8a:9c:af:3c:2a:79:eb:30:fb:b1:24:3e:ab:5a:ed: 58:ad:66:e0:09:ac:ea:58:02:77:e8:2b:da:bc:ea: 1d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7F:39:86:02:46:2E:89:71:62:C0:DD:C7:E1:CA:27:32:E5:FC:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de48e4de-3b88-37fa-92b9-3fced7e7f93b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c0:5a:dd:66:32:de:fd:4a:af:d0:05:62:71:79:01:e2:49: 1c:33:0e:cb:17:d8:aa:65:be:dd:5b:ab:39:6d:a1:c8:04:a0: 50:24:ac:4b:54:aa:ab:8a:6f:a0:67:53:a0:d7:05:fe:66:b3: fc:a7:2d:27:0a:fe:16:18:f3:d6:91:cf:a7:2f:91:6e:99:a7: 69:b1:95:f1:ad:c4:e1:16:a1:ad:04:5d:3c:aa:e2:63:ab:d8: 18:12:a4:a5:be:cc:25:e2:d1:3f:11:85:c4:c6:03:18:87:86: e7:f0:24:e2:d9:f4:e1:ea:6d:e5:88:21:4f:6a:08:1d:be:fe: 92:8f:15:39:3e:b3:f1:24:0e:13:4b:79:76:b3:cc:e5:63:7b: 3f:94:80:f9:96:9a:be:58:32:ad:80:04:81:be:1b:df:e0:94: 2e:cd:c1:e8:e0:74:df:de:95:7c:59:3b:2e:ea:33:85:66:69: c4:49:89:43:47:13:9e:b7:bb:cf:0f:cc:20:82:40:c1:5c:81: a1:fc:41:56:53:75:33:da:f6:cc:03:35:1b:7c:b8:58:92:fa: c7:d4:c0:49:31:e3:bb:02:8c:b5:9f:93:23:aa:23:6a:38:f5: 09:b0:68:4a:d0:63:c2:51:09:5a:60:a5:0e:d3:32:bc:75:bd: e0:4b:3c:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKeUl+De6X3CSOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NWRjOWI3MDYtODdjMC00ZmZkLThjMzQtYjJhMWM4YzMwNGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa4Exj2BHFwTYTjLNMy3dGif9UfpoNhWVcxI h0rFTCn0exgBcMMWco4S+y9+AAaPw1ek+yPlAPXgFOnGsnh9ZdfsoZOOKAD55WvR 5l2AxbVXYZGcsGWfoK53O96xRBw8S0YnH8uIc0z/TlWIx7W35TPI1IwKdxKEa4aE HIEFfYTN2LXrnsKCO0rim+n6eByFByZx/Z51JxNVUWkAJpZeODGxGGX3E7ZvJEQ2 Px6u2zmWA303fK66VmUAgxy6G0r1eKSfzo7bTy6cFXCW8xqAo/OE5N2s4nWH4Rv2 VLeuEgSKnK88KnnrMPuxJD6rWu1YrWbgCazqWAJ36CvavOodrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPF/OYYCRi6JcWLA3cfhyicy5fy2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGU0OGU0ZGUtM2I4OC0z N2ZhLTkyYjktM2ZjZWQ3ZTdmOTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF836MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzAWt1mMt79Sq/QBWJxeQHiSRwzDssX2Kplvt1bqzltocgEoFAkrEtU qquKb6BnU6DXBf5ms/ynLScK/hYY89aRz6cvkW6Zp2mxlfGtxOEWoa0EXTyq4mOr 2BgSpKW+zCXi0T8RhcTGAxiHhufwJOLZ9OHqbeWIIU9qCB2+/pKPFTk+s/EkDhNL eXazzOVjez+UgPmWmr5YMq2ABIG+G9/glC7NwejgdN/elXxZOy7qM4VmacRJiUNH E563u88PzCCCQMFcgaH8QVZTdTPa9swDNRt8uFiS+sfUwEkx47sCjLWfkyOqI2o4 9QmwaErQY8JRCVpgpQ7TMrx1veBLPH0= -----END CERTIFICATE-----Generated at Sun Apr 27 07:26:51 2025 by rpki-client