$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dece6732-0afb-3bb5-a2d7-2c4362575610.roa File: dece6732-0afb-3bb5-a2d7-2c4362575610.roa (raw, json) Hash identifier: 3zghC4c1MSeyT+qYYLa1pF8odbAYgsqrG5RaLmGGCcw= Subject key identifier: 33:99:CA:1A:AB:79:CC:FE:EC:78:FA:3A:7C:DC:8D:D3:68:87:F5:A8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF6FBEDFC1221E444CD780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dece6732-0afb-3bb5-a2d7-2c4362575610.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 16625 IP address blocks: 23.202.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:6f:be:df:c1:22:1e:44:4c:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=008b38cb-b780-4f24-a97e-c25ea22b3892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:70:4c:03:db:3f:6a:24:c4:38:de:69:23:5e: b4:5b:31:40:96:3d:42:a1:9e:df:5c:8d:a3:e4:fd: 95:4e:c1:eb:c5:67:4c:0c:c8:5c:bf:9f:49:d6:fc: e9:22:5a:6b:5a:31:f5:dc:18:ab:f0:8f:3e:03:da: 25:c9:ae:de:e8:ce:93:ea:80:76:ac:c5:2a:c0:65: 36:ec:8c:c3:50:7b:cd:cf:12:77:61:34:61:58:21: 4f:c0:92:f6:56:e4:e8:3b:b2:1f:00:d0:3c:ae:7a: c1:0c:14:6a:e5:65:e5:9d:41:e0:a4:78:df:e9:9a: d3:fb:63:c8:e0:b0:21:37:d2:04:7d:b2:bb:e8:09: d7:39:c6:27:07:ae:5a:0f:06:72:d1:9d:7e:70:47: 3b:e8:7a:b1:ef:9b:2e:e3:ae:e3:02:07:d2:94:59: 54:6e:6c:5e:2a:c6:f9:44:fe:5f:d4:33:1a:92:3f: bd:af:45:c4:27:38:e8:73:30:5c:16:a9:ff:2b:e8: dc:29:03:ea:66:fe:1d:a8:d8:63:e3:3f:64:69:20: e0:f3:a1:e7:af:74:28:7e:84:32:bb:01:62:f1:04: de:0e:68:14:40:95:7e:07:51:87:ae:bd:96:1a:22: e5:47:15:ae:b4:c0:24:bb:10:95:01:ba:bc:c6:b6: c7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:99:CA:1A:AB:79:CC:FE:EC:78:FA:3A:7C:DC:8D:D3:68:87:F5:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dece6732-0afb-3bb5-a2d7-2c4362575610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e0:d8:43:7b:b8:d3:3a:c1:72:a9:64:45:4d:a5:08:8e:ba: d6:7a:23:34:8d:3b:82:61:17:7f:e1:73:b2:81:cd:12:3a:53: 17:59:8f:26:35:c8:ed:35:24:e2:8a:e2:d9:68:16:56:4a:01: 8a:35:96:8f:9e:e8:72:04:0f:91:68:cf:a2:4e:df:32:29:32: 24:71:8e:df:c4:bc:7c:a6:99:ea:68:59:0c:f0:97:d0:9c:a2: 3e:3d:05:b3:02:68:38:2e:06:27:2f:ed:c4:7f:e4:23:f3:52: 40:ef:dc:51:d0:a2:39:07:75:be:4b:69:46:bb:ee:21:ec:57: a2:16:b5:30:b9:0c:10:fd:ed:9f:5a:13:1e:43:c9:66:47:cc: f3:b5:3c:dd:5a:07:ea:84:89:02:38:b2:d6:89:28:ac:ba:77: 1c:ea:85:d2:70:a0:52:39:c8:ff:13:bb:ba:e4:67:18:33:3b: 80:8d:a1:28:91:42:4c:6e:e4:3c:cb:f7:28:a0:61:14:de:41: 1e:22:e3:22:2e:13:49:95:8d:22:07:64:2d:55:ca:ad:b1:12: b3:ab:ee:7d:c6:36:57:df:55:8b:ef:1c:e9:b2:92:36:84:7d: 0a:f0:8b:af:2b:18:d7:69:c5:45:eb:b3:84:3e:18:9a:16:f7: ec:a1:7a:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz2++38EiHkRM14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MDA4YjM4Y2ItYjc4MC00ZjI0LWE5N2UtYzI1ZWEyMmIzODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXBMA9s/aiTEON5pI160WzFAlj1CoZ7fXI2j 5P2VTsHrxWdMDMhcv59J1vzpIlprWjH13Bir8I8+A9olya7e6M6T6oB2rMUqwGU2 7IzDUHvNzxJ3YTRhWCFPwJL2VuToO7IfANA8rnrBDBRq5WXlnUHgpHjf6ZrT+2PI 4LAhN9IEfbK76AnXOcYnB65aDwZy0Z1+cEc76Hqx75su467jAgfSlFlUbmxeKsb5 RP5f1DMakj+9r0XEJzjoczBcFqn/K+jcKQPqZv4dqNhj4z9kaSDg86Hnr3QofoQy uwFi8QTeDmgUQJV+B1GHrr2WGiLlRxWutMAkuxCVAbq8xrbHMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOZyhqrecz+7Hj6OnzcjdNoh/WoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGVjZTY3MzItMGFmYi0z YmI1LWEyZDctMmM0MzYyNTc1NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8qkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfg2EN7uNM6wXKpZEVNpQiOutZ6IzSNO4JhF3/hc7KBzRI6UxdZjyY1 yO01JOKK4tloFlZKAYo1lo+e6HIED5Foz6JO3zIpMiRxjt/EvHymmepoWQzwl9Cc oj49BbMCaDguBicv7cR/5CPzUkDv3FHQojkHdb5LaUa77iHsV6IWtTC5DBD97Z9a Ex5DyWZHzPO1PN1aB+qEiQI4staJKKy6dxzqhdJwoFI5yP8Tu7rkZxgzO4CNoSiR Qkxu5DzL9yigYRTeQR4i4yIuE0mVjSIHZC1Vyq2xErOr7n3GNlffVYvvHOmykjaE fQrwi68rGNdpxUXrs4Q+GJoW9+yheoQ= -----END CERTIFICATE-----Generated at Mon Apr 28 06:17:33 2025 by rpki-client