$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de65df7c-bad9-3f9b-bb5d-a74868c5d94d.roa File: de65df7c-bad9-3f9b-bb5d-a74868c5d94d.roa (raw, json) Hash identifier: 13JNCjm2ioIrOsNsSIGQO4n/nizya0s4voePjHK67+Y= Subject key identifier: 73:B4:FC:4B:0D:94:1F:92:8B:F3:FA:0D:7E:D2:FB:09:A8:B0:77:87 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829DAD81A8414053E92DB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de65df7c-bad9-3f9b-bb5d-a74868c5d94d.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.205.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:da:d8:1a:84:14:05:3e:92:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=456c83bc-a6e7-4925-b98f-a2eb1ef332b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e7:c9:5e:67:30:29:ba:96:8c:e4:b6:e8:3a: aa:08:3c:32:b3:c4:df:0b:b5:66:de:24:23:e5:7b: 2c:f2:e7:f3:e0:0c:c1:f4:71:93:0d:56:6f:da:63: 8e:7d:26:52:8b:db:2f:6b:45:68:ce:d0:c3:30:50: 05:4a:00:a5:6f:85:b1:e4:a0:6c:99:48:8d:e1:75: 97:b1:4f:19:72:3d:39:fc:d0:ba:48:d1:9f:95:7b: b9:c0:ca:20:41:bc:d8:53:83:bb:ab:c9:d8:99:5c: ba:50:29:03:e1:5c:01:dc:48:97:36:d8:05:b4:14: b1:92:90:d5:3f:44:20:52:d8:9a:71:46:bf:79:91: ce:51:83:36:68:64:1b:25:2e:ec:71:57:1a:4f:76: 66:ad:dc:48:2f:fb:e7:c0:db:7c:39:24:26:7d:e1: dc:70:8d:40:4b:7f:f8:e5:6e:8d:8b:7d:72:09:88: ac:d7:55:79:a6:4e:4d:87:96:9f:51:ae:88:2a:0b: 0c:a6:a9:ba:7d:00:37:25:ed:9d:eb:25:a7:86:1a: c3:e7:9a:02:9b:6c:1e:04:93:d5:c3:c5:50:a2:e2: 78:56:69:a8:93:b4:c8:f4:34:40:40:88:48:a0:af: c9:55:f0:ec:02:63:2d:7f:50:a2:c5:48:6f:1d:85: a7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B4:FC:4B:0D:94:1F:92:8B:F3:FA:0D:7E:D2:FB:09:A8:B0:77:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de65df7c-bad9-3f9b-bb5d-a74868c5d94d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:81:ec:30:65:6f:84:98:32:1f:04:bc:13:50:b2:29:3b:50: 75:e6:f8:c0:22:74:27:3a:35:f1:56:0f:47:17:a8:48:ea:b0: 0f:fb:9a:78:59:54:1b:fb:86:87:cc:e9:8f:31:db:c4:de:03: 13:ae:2e:93:a6:64:cf:5c:19:54:35:a0:61:37:a4:be:2c:34: 55:d9:ff:59:5a:cd:b3:a8:74:dc:e9:80:f1:fe:56:8d:72:a2: 91:e6:0e:43:1b:b9:07:f1:60:71:27:b3:c1:87:d0:38:c3:10: e8:2e:08:12:2a:74:a5:3e:3e:09:81:59:32:5d:68:c8:bf:39: f7:d9:1b:ac:ce:d2:97:64:c1:fa:ba:7b:6a:1e:6e:60:cb:76: 00:fd:d4:1c:9d:74:09:2f:dc:44:0b:07:c0:2c:ff:d1:a0:76: 9c:8a:26:90:63:8e:7c:ef:9d:fa:da:3f:ef:ba:26:51:48:c3: b3:fe:c2:28:56:a8:f9:5e:94:34:ec:a6:dc:9f:f8:b5:aa:75: d2:71:c2:ca:2a:c9:ca:ce:d1:73:63:30:a3:f0:7f:a0:e4:b1: f2:af:78:ce:43:fb:07:5c:cf:df:1b:be:c5:89:1c:09:a0:9e: 15:bd:9e:84:b2:a2:e5:f6:5f:4a:92:38:15:b2:bf:8c:ec:9f: a9:ae:65:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdrYGoQUBT6S2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NDU2YzgzYmMtYTZlNy00OTI1LWI5OGYtYTJlYjFlZjMzMmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmufJXmcwKbqWjOS26DqqCDwys8TfC7Vm3iQj 5Xss8ufz4AzB9HGTDVZv2mOOfSZSi9sva0VoztDDMFAFSgClb4Wx5KBsmUiN4XWX sU8Zcj05/NC6SNGflXu5wMogQbzYU4O7q8nYmVy6UCkD4VwB3EiXNtgFtBSxkpDV P0QgUtiacUa/eZHOUYM2aGQbJS7scVcaT3ZmrdxIL/vnwNt8OSQmfeHccI1AS3/4 5W6Ni31yCYis11V5pk5Nh5afUa6IKgsMpqm6fQA3Je2d6yWnhhrD55oCm2weBJPV w8VQouJ4Vmmok7TI9DRAQIhIoK/JVfDsAmMtf1CixUhvHYWnCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHO0/EsNlB+Si/P6DX7S+wmosHeHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGU2NWRmN2MtYmFkOS0z ZjliLWJiNWQtYTc0ODY4YzVkOTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF83AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2B7DBlb4SYMh8EvBNQsik7UHXm+MAidCc6NfFWD0cXqEjqsA/7mnhZ VBv7hofM6Y8x28TeAxOuLpOmZM9cGVQ1oGE3pL4sNFXZ/1lazbOodNzpgPH+Vo1y opHmDkMbuQfxYHEns8GH0DjDEOguCBIqdKU+PgmBWTJdaMi/OffZG6zO0pdkwfq6 e2oebmDLdgD91ByddAkv3EQLB8As/9GgdpyKJpBjjnzvnfraP++6JlFIw7P+wihW qPlelDTsptyf+LWqddJxwsoqycrO0XNjMKPwf6DksfKveM5D+wdcz98bvsWJHAmg nhW9noSyouX2X0qSOBWyv4zsn6muZZw= -----END CERTIFICATE-----Generated at Sun Apr 27 12:14:32 2025 by rpki-client