$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eda38b15-0356-3b5d-ac01-a7ed16d162e4.roa File: eda38b15-0356-3b5d-ac01-a7ed16d162e4.roa (raw, json) Hash identifier: VBEP91Kyc9hcZt+VF7NPNiZNnaWvfwExa/kGQEsPRew= Subject key identifier: DA:F3:26:E0:21:B5:CE:2F:64:5D:7E:9F:DC:0D:2F:92:15:8D:36:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF4915024E7803CE16ACF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eda38b15-0356-3b5d-ac01-a7ed16d162e4.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 35994 IP address blocks: 23.210.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:91:50:24:e7:80:3c:e1:6a:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=3dc405a4-fee0-4b0f-be3a-68bd58a5c753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:82:ad:b6:f1:41:c5:7b:47:b7:3b:be:9b:d0: e1:14:26:7c:2c:b5:9e:75:f7:77:33:20:51:b7:72: 97:7f:05:13:21:8c:2e:af:60:c3:5c:21:09:d9:62: e1:00:78:04:cd:aa:4c:44:1d:27:ae:15:e4:78:8c: 5c:f7:bb:4f:60:1f:fc:d1:7b:5e:0b:11:82:aa:ea: 41:3e:f0:eb:20:cc:a5:0f:0d:02:e1:96:05:71:45: 47:32:51:df:19:f6:87:ec:cf:8e:c4:a7:00:3e:88: 13:82:71:8c:d6:3d:58:b5:12:21:20:ae:96:4c:e9: 92:7a:0b:b9:d6:25:08:8a:7c:24:f8:7d:2b:c5:9a: d7:83:59:e7:fe:3a:12:d5:a5:54:c5:54:12:ea:cc: f1:5a:08:fb:77:56:85:86:f3:c1:82:69:7e:23:6e: 30:ac:66:99:b5:e8:a3:cd:26:f4:54:18:71:32:d8: b2:18:ea:f9:6b:77:1d:f3:b6:ca:95:33:f0:f2:8c: 02:a5:e9:bb:f0:e6:28:14:41:33:1f:c6:b1:b9:f8: 9d:e7:2c:ef:a4:81:1c:4b:d1:1d:2b:05:b2:e8:d1: 33:0a:a3:87:3a:c6:d7:ba:00:ee:0d:46:03:f2:df: 24:ad:a7:6c:5e:5f:72:7b:66:17:2d:48:78:67:32: 95:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F3:26:E0:21:B5:CE:2F:64:5D:7E:9F:DC:0D:2F:92:15:8D:36:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eda38b15-0356-3b5d-ac01-a7ed16d162e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:cf:ca:d3:2b:65:a0:3b:79:d2:de:40:5c:f7:72:a4:45:4e: d6:29:dc:8d:ef:dd:0b:f8:4d:0c:e0:da:fc:86:97:25:75:3d: 03:60:4f:10:7b:eb:f8:25:7b:63:29:11:2b:aa:c5:ac:ee:72: ef:4d:db:75:10:13:36:ed:d7:b0:76:94:2d:7c:c0:ec:85:d3: 24:36:6e:07:c2:bc:72:10:de:64:f2:72:3c:50:8f:8d:67:c7: 1a:1e:08:d6:1b:f4:cc:02:bc:6d:cb:5e:5e:a4:b9:89:2c:8b: 7f:ae:73:75:4c:66:38:3c:9b:47:0d:a9:d4:0c:45:ac:aa:86: 58:40:4f:27:a8:9a:0c:d8:b5:8b:db:9f:d9:72:bb:81:49:72: 08:99:4a:1c:2e:fe:5c:93:05:ff:68:8c:94:16:8a:15:57:1d: a1:ad:81:49:a8:1e:97:19:0f:26:a8:d1:59:b8:69:a1:fb:d9: 04:1b:5f:35:a1:cd:dc:db:3f:31:8f:b5:db:13:9e:7a:e3:8c: d6:33:3a:f6:4c:18:d4:95:f1:fc:8d:12:98:24:93:82:e0:f7: 65:84:a1:bf:4e:fd:38:c4:2f:66:c2:a8:6b:18:ea:9f:c9:39: 10:2f:db:68:5e:ba:8b:ee:90:70:a1:72:34:77:73:49:54:21: 99:78:52:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JFQJOeAPOFqz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk M2RjNDA1YTQtZmVlMC00YjBmLWJlM2EtNjhiZDU4YTVjNzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oKttvFBxXtHtzu+m9DhFCZ8LLWedfd3MyBR t3KXfwUTIYwur2DDXCEJ2WLhAHgEzapMRB0nrhXkeIxc97tPYB/80XteCxGCqupB PvDrIMylDw0C4ZYFcUVHMlHfGfaH7M+OxKcAPogTgnGM1j1YtRIhIK6WTOmSegu5 1iUIinwk+H0rxZrXg1nn/joS1aVUxVQS6szxWgj7d1aFhvPBgml+I24wrGaZteij zSb0VBhxMtiyGOr5a3cd87bKlTPw8owCpem78OYoFEEzH8axufid5yzvpIEcS9Ed KwWy6NEzCqOHOsbXugDuDUYD8t8kradsXl9ye2YXLUh4ZzKV3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrzJuAhtc4vZF1+n9wNL5IVjTZ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWRhMzhiMTUtMDM1Ni0z YjVkLWFjMDEtYTdlZDE2ZDE2MmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9IjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTPytMrZaA7edLeQFz3cqRFTtYp3I3v3Qv4TQzg2vyGlyV1PQNgTxB7 6/gle2MpESuqxazucu9N23UQEzbt17B2lC18wOyF0yQ2bgfCvHIQ3mTycjxQj41n xxoeCNYb9MwCvG3LXl6kuYksi3+uc3VMZjg8m0cNqdQMRayqhlhATyeomgzYtYvb n9lyu4FJcgiZShwu/lyTBf9ojJQWihVXHaGtgUmoHpcZDyao0Vm4aaH72QQbXzWh zdzbPzGPtdsTnnrjjNYzOvZMGNSV8fyNEpgkk4Lg92WEob9O/TjEL2bCqGsY6p/J ORAv22heuovukHChcjR3c0lUIZl4UtE= -----END CERTIFICATE-----Generated at Sat Apr 26 21:40:18 2025 by rpki-client