$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f64bafe8-05eb-317a-8b7e-d51859d975f1.roa File: f64bafe8-05eb-317a-8b7e-d51859d975f1.roa (raw, json) Hash identifier: E9UwAZ/kYvBKdBoQX5lyAK9STpOjoziDw7Bet5elaa4= Subject key identifier: D8:F8:C6:71:B6:8D:4E:40:C1:9B:02:B3:B2:52:A0:CB:8A:E7:16:78 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829DACA88C9DDE661985390 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f64bafe8-05eb-317a-8b7e-d51859d975f1.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.205.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:da:ca:88:c9:dd:e6:61:98:53:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=9c911dff-6f82-45f8-b5c4-6a4c558e4c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bd:06:66:43:ea:8f:a9:ed:fa:05:92:67:30: cc:6b:38:06:75:ee:7a:78:91:c5:66:6b:c5:c8:6a: f2:74:52:34:9c:c9:c7:72:ed:9c:0b:2a:44:92:2b: 2a:b4:39:ce:bb:aa:ff:52:4d:63:06:40:b4:90:46: f9:7c:2e:38:f0:63:9d:b0:b3:f2:51:d8:99:35:2f: 70:3c:ca:63:0b:c7:1c:7d:ff:53:35:d1:13:57:28: f8:78:a8:75:71:00:8c:5e:1b:a7:0c:86:f3:5f:55: 2e:f5:a0:c5:aa:dd:3f:e0:e0:81:7c:95:8b:60:37: 16:04:cb:ed:96:13:15:85:7e:47:7a:e4:82:43:74: fe:f9:00:c8:a1:35:74:75:fb:85:97:a5:30:c5:14: 3d:e5:f8:9e:5f:a3:f8:fa:e5:18:12:98:50:ec:cc: 83:4c:74:5f:95:05:82:2f:5b:f7:6c:eb:a6:33:57: ae:5a:89:9c:d0:13:be:db:6b:09:0e:ed:df:8e:9e: ac:1a:b9:8d:85:52:40:52:7c:33:49:cc:2b:44:e7: 68:17:e2:60:ba:05:c1:6c:a3:d7:45:1b:88:b9:8b: d2:27:a5:bb:cc:c5:3a:f0:24:ce:c7:61:d7:5b:fc: 2d:95:63:61:ba:31:de:b7:eb:bf:61:25:ec:aa:b2: 92:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F8:C6:71:B6:8D:4E:40:C1:9B:02:B3:B2:52:A0:CB:8A:E7:16:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f64bafe8-05eb-317a-8b7e-d51859d975f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e3:b1:27:9c:0b:b5:cb:92:fc:8f:9f:06:61:92:5f:a7:d7: 5b:3f:6b:6c:50:53:01:f7:37:e1:a0:28:1a:d3:71:30:8a:f1: ca:90:cf:6c:f5:7a:3f:e5:34:31:a4:05:77:84:33:d0:61:89: 1e:b5:87:02:44:ef:95:ee:78:88:41:63:a4:ae:6f:32:f9:3e: dc:1d:35:93:ca:3f:63:e5:49:d1:d0:74:5f:1e:7f:d3:ea:28: 07:1d:cb:8b:79:3d:cc:84:56:00:79:20:95:cd:1a:b2:1d:02: 88:27:af:a2:cc:57:06:82:41:6b:31:67:55:a7:c7:64:5c:2d: da:a1:0f:fc:0f:3c:15:64:55:62:68:26:a3:ec:0f:71:41:56: 22:72:81:3b:0c:42:15:19:ef:2b:c1:7b:01:44:85:2a:ec:4c: b3:5d:b3:07:20:2c:59:4b:2b:22:5f:b3:e8:15:e3:58:54:eb: e4:2e:94:7b:22:a1:aa:a5:38:21:b5:1b:d1:00:25:b6:18:44: 0a:50:42:05:94:af:ae:09:28:b1:eb:90:fa:1d:72:76:92:45: 91:fe:89:d7:5b:d3:47:05:6f:bc:8f:da:8c:f2:f9:54:18:67: a9:13:bc:38:89:91:77:48:3e:76:fd:67:f7:c9:2b:f8:b9:07: 67:49:f8:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdrKiMnd5mGYU5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk OWM5MTFkZmYtNmY4Mi00NWY4LWI1YzQtNmE0YzU1OGU0YzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL0GZkPqj6nt+gWSZzDMazgGde56eJHFZmvF yGrydFI0nMnHcu2cCypEkisqtDnOu6r/Uk1jBkC0kEb5fC448GOdsLPyUdiZNS9w PMpjC8ccff9TNdETVyj4eKh1cQCMXhunDIbzX1Uu9aDFqt0/4OCBfJWLYDcWBMvt lhMVhX5HeuSCQ3T++QDIoTV0dfuFl6UwxRQ95fieX6P4+uUYEphQ7MyDTHRflQWC L1v3bOumM1euWomc0BO+22sJDu3fjp6sGrmNhVJAUnwzScwrROdoF+JgugXBbKPX RRuIuYvSJ6W7zMU68CTOx2HXW/wtlWNhujHet+u/YSXsqrKSJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNj4xnG2jU5AwZsCs7JSoMuK5xZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjY0YmFmZTgtMDVlYi0z MTdhLThiN2UtZDUxODU5ZDk3NWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF82vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzjsSecC7XLkvyPnwZhkl+n11s/a2xQUwH3N+GgKBrTcTCK8cqQz2z1 ej/lNDGkBXeEM9BhiR61hwJE75XueIhBY6SubzL5PtwdNZPKP2PlSdHQdF8ef9Pq KAcdy4t5PcyEVgB5IJXNGrIdAognr6LMVwaCQWsxZ1Wnx2RcLdqhD/wPPBVkVWJo JqPsD3FBViJygTsMQhUZ7yvBewFEhSrsTLNdswcgLFlLKyJfs+gV41hU6+QulHsi oaqlOCG1G9EAJbYYRApQQgWUr64JKLHrkPodcnaSRZH+iddb00cFb7yP2ozy+VQY Z6kTvDiJkXdIPnb9Z/fJK/i5B2dJ+O8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:06:04 2025 by rpki-client