$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5b84914-d29f-3eb1-91c4-246e85b47d28.roa File: e5b84914-d29f-3eb1-91c4-246e85b47d28.roa (raw, json) Hash identifier: +yKreVKyKr2K7TAZ+nbAxxxLgTfEdm7c5rqJ1jU1bqE= Subject key identifier: 3A:10:7D:4C:F9:36:C3:2F:CC:46:D0:64:B1:7E:58:1A:D9:E2:44:7B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496FAF23588474277BB642BF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5b84914-d29f-3eb1-91c4-246e85b47d28.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 16625 IP address blocks: 23.195.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:23:58:84:74:27:7b:b6:42:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=53a616b1-23b4-492d-bc60-0dffd58716da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f8:ef:13:aa:66:04:38:31:29:7e:b3:e1:33: 99:b9:45:9c:14:ff:5c:ba:10:84:71:51:37:ec:1a: 22:9e:27:9b:25:95:ae:5b:91:94:e5:32:4c:ea:85: df:26:00:80:28:81:b8:b9:71:35:6c:3d:58:c1:91: 79:f8:b7:1d:09:8e:38:e1:c0:2f:9d:91:83:fa:73: 38:4d:53:0e:00:4b:c6:84:52:ce:08:a2:82:e5:75: 64:b3:1d:83:51:aa:de:9e:c1:be:72:df:33:1f:03: d8:c0:d5:f6:6f:43:87:0c:6b:0d:83:a9:70:a6:a0: 70:82:84:a3:ab:78:1c:89:da:cf:b4:ba:4c:a9:b0: 5e:a0:a1:99:4a:97:2d:5e:99:bb:c5:04:10:43:99: 98:c4:be:23:20:c7:9a:35:f9:7c:66:f7:17:6f:f7: 34:47:1c:f4:31:43:d0:ce:bc:9a:c0:a0:bf:6b:1b: d0:e0:97:cc:60:67:ee:b4:4d:f0:b8:38:73:b6:0a: a9:55:04:57:c5:df:df:0f:d3:c9:03:fc:65:1c:da: e0:c5:c3:44:da:4f:63:ce:03:9f:2e:96:8a:c0:f7: 9d:93:af:f9:50:c1:b2:a0:5f:8a:80:15:77:75:23: d8:11:c4:c7:c9:84:91:04:c2:27:3c:87:2a:f4:77: 1d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:10:7D:4C:F9:36:C3:2F:CC:46:D0:64:B1:7E:58:1A:D9:E2:44:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5b84914-d29f-3eb1-91c4-246e85b47d28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:4a:80:06:eb:25:d7:0c:dc:05:68:b2:f0:0a:56:22:58:05: 57:75:d3:5b:7c:72:23:69:05:74:b6:ef:90:b5:49:ba:26:f5: 0c:25:eb:38:7d:c5:c1:aa:cc:60:5c:6e:2c:e1:9a:07:bf:d2: 97:f0:ef:5e:26:e0:48:95:dc:68:06:d7:24:07:70:b0:46:c6: 6f:fb:44:dd:aa:7a:32:0a:c4:7e:c2:29:ff:84:d9:f5:b9:fb: 6e:e4:6c:db:4d:9d:22:6c:12:8e:fd:fa:d0:7e:d5:a6:fc:3e: a7:ba:dd:52:12:af:32:2e:2f:aa:9e:3d:70:5e:5e:bf:fe:ff: 17:73:8a:2e:74:7e:14:3b:76:75:1c:5b:8e:85:05:d5:b6:63: 64:a9:e1:96:8e:b6:f3:5d:7b:b9:3f:a4:19:04:45:79:a5:4a: 24:df:df:ae:23:cd:f8:3b:c7:ca:4e:26:8b:2b:c4:80:12:59: 2f:c5:4f:70:18:4f:3c:16:e6:6e:b4:0b:6a:72:ed:97:5b:81: 0c:1a:23:74:27:00:c5:52:1c:cb:a4:96:dd:af:ad:bc:76:04: 9a:bc:e5:77:6d:01:c5:ec:98:e8:94:56:4f:be:da:6a:16:93: 3c:f1:f1:f4:7b:ce:3b:f9:d1:10:21:dd:1f:6b:d8:ff:79:20: 7b:51:e8:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvryNYhHQne7ZCvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk NTNhNjE2YjEtMjNiNC00OTJkLWJjNjAtMGRmZmQ1ODcxNmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/jvE6pmBDgxKX6z4TOZuUWcFP9cuhCEcVE3 7BoiniebJZWuW5GU5TJM6oXfJgCAKIG4uXE1bD1YwZF5+LcdCY444cAvnZGD+nM4 TVMOAEvGhFLOCKKC5XVksx2DUarensG+ct8zHwPYwNX2b0OHDGsNg6lwpqBwgoSj q3gcidrPtLpMqbBeoKGZSpctXpm7xQQQQ5mYxL4jIMeaNfl8ZvcXb/c0Rxz0MUPQ zryawKC/axvQ4JfMYGfutE3wuDhztgqpVQRXxd/fD9PJA/xlHNrgxcNE2k9jzgOf LpaKwPedk6/5UMGyoF+KgBV3dSPYEcTHyYSRBMInPIcq9HcdKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoQfUz5NsMvzEbQZLF+WBrZ4kR7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTViODQ5MTQtZDI5Zi0z ZWIxLTkxYzQtMjQ2ZTg1YjQ3ZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF8PAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVKgAbrJdcM3AVosvAKViJYBVd101t8ciNpBXS275C1Sbom9Qwl6zh9 xcGqzGBcbizhmge/0pfw714m4EiV3GgG1yQHcLBGxm/7RN2qejIKxH7CKf+E2fW5 +27kbNtNnSJsEo79+tB+1ab8Pqe63VISrzIuL6qePXBeXr/+/xdzii50fhQ7dnUc W46FBdW2Y2Sp4ZaOtvNde7k/pBkERXmlSiTf364jzfg7x8pOJosrxIASWS/FT3AY TzwW5m60C2py7ZdbgQwaI3QnAMVSHMuklt2vrbx2BJq85XdtAcXsmOiUVk++2moW kzzx8fR7zjv50RAh3R9r2P95IHtR6MY= -----END CERTIFICATE-----Generated at Sun Apr 27 18:12:01 2025 by rpki-client