$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e581be77-0c9b-317d-a239-a2cc48a7f2ef.roa File: e581be77-0c9b-317d-a239-a2cc48a7f2ef.roa (raw, json) Hash identifier: A9nqhf5GTwE05gfaYTZ9A+TKYOKB/zG1Txt+ZhCehEM= Subject key identifier: 67:A8:8A:D8:F3:9E:77:BA:4C:8F:DA:82:35:B2:C4:3F:DE:AA:42:10 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF677D3A194FA48B44F280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e581be77-0c9b-317d-a239-a2cc48a7f2ef.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.202.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:67:7d:3a:19:4f:a4:8b:44:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=bbc657df-b8cf-49e6-a0e5-4747efba5335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2a:12:ce:cf:1a:f5:f9:28:a8:8e:d1:a4:30: da:a6:d8:e5:93:f6:53:27:f7:97:16:b7:f9:90:61: be:29:72:cf:d9:f2:2e:ed:6c:bf:d2:bf:a8:73:03: 13:80:5a:28:0e:bc:71:c9:bf:06:55:84:67:dc:95: dc:cf:9d:80:d9:8f:25:eb:53:cc:fe:1a:86:3c:35: ca:8e:1a:8b:e5:9f:10:45:82:d8:e4:31:3a:24:99: 8c:ca:04:1b:39:de:91:ee:21:29:8d:15:20:87:97: c3:79:2b:b8:46:bb:2c:93:4c:00:98:c6:28:62:73: f4:20:25:08:8c:c4:74:45:b8:e9:7c:90:65:3c:0f: 49:52:a7:f9:66:55:02:b4:1b:8a:b2:ae:ba:66:97: 11:08:ce:fb:79:52:49:9e:83:8d:1d:70:7c:1f:c2: 92:72:ef:7e:a9:12:57:74:4a:5e:10:a4:32:c3:9a: 5a:a9:e2:89:8c:28:1b:4e:e5:6c:6f:5c:ae:46:3a: 5d:21:2c:14:10:3c:ad:37:a7:9e:2a:aa:4a:6e:a7: 25:40:c0:7c:41:8c:bd:e6:86:4d:e3:ff:9e:b2:ff: c5:a7:7d:0e:b3:d1:58:52:33:bc:5e:c2:c6:1e:2e: 9b:fe:14:16:9d:ad:83:67:f4:87:b0:91:7b:10:0f: 65:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A8:8A:D8:F3:9E:77:BA:4C:8F:DA:82:35:B2:C4:3F:DE:AA:42:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e581be77-0c9b-317d-a239-a2cc48a7f2ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d6:69:b8:ee:c1:8f:57:a0:2b:bc:3b:f6:4a:8e:97:cb:5d: e4:09:6f:b0:28:67:1b:59:8d:88:55:f2:89:05:3b:0a:ff:aa: e4:34:d7:4e:3e:21:59:6c:64:c0:a6:fb:84:18:07:4c:46:c0: df:2d:a0:b6:b2:ef:df:4f:55:f7:81:e7:0f:27:1f:44:01:d0: 5f:9b:e9:9c:8f:20:4a:a7:76:1f:31:12:df:6e:bc:37:04:e9: 27:3e:f5:dd:22:e2:d4:00:e5:18:70:58:18:89:48:a2:75:6a: c8:e2:c0:0d:db:7c:67:bf:a4:14:31:55:e1:41:c0:49:83:d3: 7b:ca:e4:99:f0:2d:db:ac:e0:10:cd:9c:9a:be:ac:26:51:11: 4c:20:23:d8:c2:e0:3f:7b:04:88:31:e7:f4:42:bc:14:0a:f7: 2a:db:f3:ee:82:12:bc:61:40:c3:88:a0:d8:37:43:15:d1:46: 52:a1:dd:27:95:80:d0:76:ac:32:cc:67:25:16:83:62:ee:92: 38:72:a9:3a:49:3f:e5:6a:20:2b:f6:db:d3:d5:61:72:53:1b: 71:c5:d1:ef:3a:b4:f2:ce:49:c6:3f:1a:e6:7e:fe:a2:f0:4e: da:c5:9b:88:5c:0f:b8:e3:ee:75:77:4b:56:e3:1a:fa:30:37: 74:b6:23:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz2d9OhlPpItE8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk YmJjNjU3ZGYtYjhjZi00OWU2LWEwZTUtNDc0N2VmYmE1MzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CoSzs8a9fkoqI7RpDDaptjlk/ZTJ/eXFrf5 kGG+KXLP2fIu7Wy/0r+ocwMTgFooDrxxyb8GVYRn3JXcz52A2Y8l61PM/hqGPDXK jhqL5Z8QRYLY5DE6JJmMygQbOd6R7iEpjRUgh5fDeSu4Rrssk0wAmMYoYnP0ICUI jMR0RbjpfJBlPA9JUqf5ZlUCtBuKsq66ZpcRCM77eVJJnoONHXB8H8KScu9+qRJX dEpeEKQyw5paqeKJjCgbTuVsb1yuRjpdISwUEDytN6eeKqpKbqclQMB8QYy95oZN 4/+esv/Fp30Os9FYUjO8XsLGHi6b/hQWna2DZ/SHsJF7EA9lTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeoitjznne6TI/agjWyxD/eqkIQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTU4MWJlNzctMGM5Yi0z MTdkLWEyMzktYTJjYzQ4YTdmMmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8rmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3WabjuwY9XoCu8O/ZKjpfLXeQJb7AoZxtZjYhV8okFOwr/quQ0104+ IVlsZMCm+4QYB0xGwN8toLay799PVfeB5w8nH0QB0F+b6ZyPIEqndh8xEt9uvDcE 6Sc+9d0i4tQA5RhwWBiJSKJ1asjiwA3bfGe/pBQxVeFBwEmD03vK5JnwLdus4BDN nJq+rCZREUwgI9jC4D97BIgx5/RCvBQK9yrb8+6CErxhQMOIoNg3QxXRRlKh3SeV gNB2rDLMZyUWg2LukjhyqTpJP+VqICv229PVYXJTG3HF0e86tPLOScY/GuZ+/qLw TtrFm4hcD7jj7nV3S1bjGvowN3S2I9Y= -----END CERTIFICATE-----Generated at Sat Apr 26 17:44:15 2025 by rpki-client