$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff5c5e8d-5e94-3427-922d-d22dcc1768cd.roa File: ff5c5e8d-5e94-3427-922d-d22dcc1768cd.roa (raw, json) Hash identifier: 6+1QiEvAys+lTZ+BqSeLns2DIR6XXX2CwPHJqFHTi3E= Subject key identifier: EE:4A:4E:A0:6A:02:04:78:D5:2C:F0:A1:B6:F7:EC:35:7F:76:B5:18 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498769D48A82C5E1461AF701C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff5c5e8d-5e94-3427-922d-d22dcc1768cd.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.200.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:d4:8a:82:c5:e1:46:1a:f7:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=373f4645-7616-445a-988a-55265f98d7a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1e:13:49:66:8e:59:0c:06:21:4b:65:dd:00: b6:3a:39:56:13:b5:91:07:12:19:5d:ed:27:85:34: 9b:c1:3f:69:00:75:0e:dd:cb:ec:1c:9b:66:66:7a: 17:73:2b:35:14:26:8c:0b:91:40:e7:2a:07:6f:4e: 02:d9:e6:f0:6b:57:66:60:d3:df:3f:fd:14:91:68: 8e:77:2d:93:6a:55:ce:a8:d0:68:68:4d:e6:72:de: 61:c4:df:4d:4f:eb:71:34:7f:85:7c:6f:ee:79:59: 4c:6c:78:9c:a0:10:ad:aa:c2:88:3c:6c:e6:ab:99: 57:e4:ec:81:c0:24:7f:a3:ae:4c:3b:18:73:6f:8f: a9:03:ac:eb:34:7f:eb:a3:fc:35:f4:d6:61:29:05: 49:5a:e2:8a:b7:54:b5:7c:b5:49:95:bd:1a:ce:25: 04:b3:6c:45:4f:b6:ed:1c:ce:19:72:1a:38:a9:b0: c3:ba:83:5c:3f:8d:fa:c3:9d:d7:cf:6d:b2:5f:b9: c7:14:bd:11:4a:02:b4:86:72:e2:15:78:94:3e:68: 10:2d:80:68:cf:ea:0d:cc:52:c0:cf:6a:48:5e:e8: 2b:cc:51:56:9b:71:72:d7:87:45:f8:46:3d:fb:fd: 52:bf:29:67:f2:86:d9:9a:a2:da:1c:62:b5:50:29: 38:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4A:4E:A0:6A:02:04:78:D5:2C:F0:A1:B6:F7:EC:35:7F:76:B5:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff5c5e8d-5e94-3427-922d-d22dcc1768cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ca:10:f4:3e:f7:10:95:57:7f:6a:cc:47:91:f4:51:d8:45: 0c:1d:bf:e7:29:41:ff:7a:a4:a0:d9:e5:98:20:30:21:42:4e: c0:df:7c:88:ed:bf:9d:29:42:9c:d1:0f:7a:95:64:13:ba:40: cb:19:e3:98:98:ce:ce:f8:2b:84:d8:60:8e:d3:c7:4f:ce:2f: c9:13:25:c2:50:7b:91:1e:df:74:d5:72:99:8b:1a:1d:73:37: 00:25:22:ae:2b:3a:6e:37:54:c3:95:9c:ea:a1:f1:1b:aa:43: 26:e4:29:03:e5:9f:5d:7b:c7:2d:59:ed:10:74:5a:09:ac:e8: bc:04:ff:e8:33:5b:b7:89:31:23:72:52:c1:5f:84:f9:0b:3e: db:da:b8:e7:64:df:e9:25:21:aa:29:58:2e:ae:96:c4:76:74: 3c:29:6a:e4:94:18:02:e9:17:ae:8d:db:17:cd:68:65:23:2f: bb:0d:bb:5f:a7:01:78:17:62:f9:4e:cc:02:4f:c4:ca:75:10: 1d:ae:5d:40:d6:a3:49:ad:38:de:da:a6:b7:9f:4f:bd:ea:30: 1b:b9:db:af:12:90:4b:24:c3:60:f0:fd:07:36:9b:f4:bc:07: 43:bf:f0:83:54:e1:86:b5:5b:94:d6:fd:01:4f:23:e3:8f:3d: 0a:a4:de:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHadSKgsXhRhr3AcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk MzczZjQ2NDUtNzYxNi00NDVhLTk4OGEtNTUyNjVmOThkN2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R4TSWaOWQwGIUtl3QC2OjlWE7WRBxIZXe0n hTSbwT9pAHUO3cvsHJtmZnoXcys1FCaMC5FA5yoHb04C2ebwa1dmYNPfP/0UkWiO dy2TalXOqNBoaE3mct5hxN9NT+txNH+FfG/ueVlMbHicoBCtqsKIPGzmq5lX5OyB wCR/o65MOxhzb4+pA6zrNH/ro/w19NZhKQVJWuKKt1S1fLVJlb0aziUEs2xFT7bt HM4Zcho4qbDDuoNcP436w53Xz22yX7nHFL0RSgK0hnLiFXiUPmgQLYBoz+oNzFLA z2pIXugrzFFWm3Fy14dF+EY9+/1Svyln8obZmqLaHGK1UCk4qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5KTqBqAgR41Szwobb37DV/drUYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmY1YzVlOGQtNWU5NC0z NDI3LTkyMmQtZDIyZGNjMTc2OGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8iPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbKEPQ+9xCVV39qzEeR9FHYRQwdv+cpQf96pKDZ5ZggMCFCTsDffIjt v50pQpzRD3qVZBO6QMsZ45iYzs74K4TYYI7Tx0/OL8kTJcJQe5Ee33TVcpmLGh1z NwAlIq4rOm43VMOVnOqh8RuqQybkKQPln117xy1Z7RB0Wgms6LwE/+gzW7eJMSNy UsFfhPkLPtvauOdk3+klIaopWC6ulsR2dDwpauSUGALpF66N2xfNaGUjL7sNu1+n AXgXYvlOzAJPxMp1EB2uXUDWo0mtON7aprefT73qMBu5268SkEskw2Dw/Qc2m/S8 B0O/8INU4Ya1W5TW/QFPI+OPPQqk3lw= -----END CERTIFICATE-----Generated at Sat Apr 26 16:07:21 2025 by rpki-client