$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4/9af58f17-83cc-3766-a979-125c6f81440a.roa File: 9af58f17-83cc-3766-a979-125c6f81440a.roa (raw, json) Hash identifier: VJlDHs6pdV6U16SOCgZzGELIyw4zQR2QBR40kf/Yduk= Subject key identifier: 01:70:D2:88:0A:6E:14:AD:05:A0:8B:7B:32:5F:19:48:8E:F0:06:BE Certificate issuer: /CN=54814827-de65-4311-9f42-994fb992b2c4 Certificate serial: 010D0C9F43285849BB0F74DA33C16E6569D84AC0 Authority key identifier: EF:B4:17:4D:6E:B9:ED:D7:41:6F:BA:98:CC:02:5B:1F:28:E7:A0:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4/9af58f17-83cc-3766-a979-125c6f81440a.roa Signing time: Sat 03 May 2025 13:01:01 +0000 ROA not before: Sat 03 May 2025 13:01:01 +0000 ROA not after: Fri 01 Aug 2025 13:01:01 +0000 asID: 400211 IP address blocks: 23.188.200.0/24 maxlen: 24 2607:d240::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4/54814827-de65-4311-9f42-994fb992b2c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4/54814827-de65-4311-9f42-994fb992b2c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bb:0f:74:da:33:c1:6e:65:69:d8:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54814827-de65-4311-9f42-994fb992b2c4 Validity Not Before: May 3 13:01:01 2025 GMT Not After : Aug 1 13:01:01 2025 GMT Subject: CN=ea863a4a-a405-4d23-9896-e4b656694403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bd:b4:c6:98:df:16:88:7e:1b:0d:f2:df:60: 35:83:09:d6:6c:77:73:f0:1d:b4:24:43:ec:d7:6a: 23:25:8f:84:d4:83:c5:93:82:a0:64:a0:b3:d1:1a: e6:65:37:b0:ed:8a:d2:00:3a:75:3d:70:4e:40:b0: 1f:18:01:5b:b7:c6:9b:3a:b6:19:0e:2b:67:6f:24: 89:f9:d6:16:2c:ca:d5:32:e5:53:29:99:ae:cf:82: bf:4d:cf:ba:55:2e:35:1f:ed:27:2f:c7:d9:ee:5f: 2e:17:2a:8d:e7:e6:3c:3c:f3:57:2f:f6:fe:42:34: 85:c4:99:1b:bb:88:d6:37:96:c6:0c:8f:d3:1e:16: e7:e7:37:63:47:f6:91:2d:5d:24:c7:ca:fa:e6:7d: 03:20:f0:40:d0:77:7e:1d:28:16:80:33:46:d8:a5: 68:79:24:96:82:a8:eb:5f:93:6b:17:1f:24:30:aa: 50:8f:59:21:63:5a:c7:bf:6d:69:00:dd:05:df:16: de:24:4b:9c:cb:97:cc:3d:59:33:8a:63:d4:cc:89: 62:3b:d8:7c:f9:38:2b:13:71:8e:ea:a3:9c:31:39: 6f:79:ce:85:e2:d7:f1:cb:ca:6e:db:b3:38:9e:65: c5:5f:ba:06:2d:5b:aa:32:00:fc:d7:50:3d:c4:01: db:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:70:D2:88:0A:6E:14:AD:05:A0:8B:7B:32:5F:19:48:8E:F0:06:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4/9af58f17-83cc-3766-a979-125c6f81440a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4/54814827-de65-4311-9f42-994fb992b2c4.crl X509v3 Authority Key Identifier: keyid:EF:B4:17:4D:6E:B9:ED:D7:41:6F:BA:98:CC:02:5B:1F:28:E7:A0:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4.cer sbgp-ipAddrBlock: critical IPv4: 23.188.200.0/24 IPv6: 2607:d240::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:11:6d:0d:4b:24:58:0f:ee:77:fa:de:0c:6d:4b:e4:3f:22: e6:9c:95:7c:65:e4:47:98:88:30:55:16:1b:0e:45:ef:0d:8d: ed:1b:dd:d0:9f:9a:bd:f6:08:29:f4:75:53:87:87:27:af:0c: ec:76:47:fe:1f:69:60:90:e2:77:6f:84:6c:3f:86:40:ba:10: 1f:3e:a2:d7:fc:f8:7f:20:e9:22:e1:25:0b:2a:e6:cb:69:f8: fd:15:82:35:e9:9d:25:46:62:3f:60:46:ef:7b:1f:53:8a:3f: 2c:38:f3:bc:01:f3:5b:67:32:1d:f9:98:5c:44:75:ed:37:a3: d1:d2:04:2b:5a:b0:ea:86:8a:7a:f2:df:a4:e3:2c:1d:b5:ae: 47:f7:be:92:1d:ba:e1:75:67:de:16:47:40:a6:ad:8e:e4:77: 9b:9e:84:c3:84:8f:54:00:b9:67:bc:1d:c9:03:13:b2:4a:ee: 5f:c2:b5:d2:88:b5:3d:d2:27:2a:82:00:ef:c6:d6:1c:f3:95: 31:57:e5:2e:ae:47:46:b3:5a:4b:22:68:8a:44:ed:2a:86:0f: 94:0a:8a:8d:17:b3:ee:76:f9:ae:f9:d7:5d:2f:c3:bf:39:4f: 70:2c:6d:e6:14:e4:24:87:64:29:7b:da:7d:5b:73:a1:10:54: b0:f7:46:34 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEm7D3TaM8FuZWnYSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQ4MTQ4MjctZGU2NS00MzExLTlmNDItOTk0ZmI5OTJi MmM0MB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk ZWE4NjNhNGEtYTQwNS00ZDIzLTk4OTYtZTRiNjU2Njk0NDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL20xpjfFoh+Gw3y32A1gwnWbHdz8B20JEPs 12ojJY+E1IPFk4KgZKCz0RrmZTew7YrSADp1PXBOQLAfGAFbt8abOrYZDitnbySJ +dYWLMrVMuVTKZmuz4K/Tc+6VS41H+0nL8fZ7l8uFyqN5+Y8PPNXL/b+QjSFxJkb u4jWN5bGDI/THhbn5zdjR/aRLV0kx8r65n0DIPBA0Hd+HSgWgDNG2KVoeSSWgqjr X5NrFx8kMKpQj1khY1rHv21pAN0F3xbeJEucy5fMPVkzimPUzIliO9h8+TgrE3GO 6qOcMTlvec6F4tfxy8pu27M4nmXFX7oGLVuqMgD811A9xAHbRQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFAFw0ogKbhStBaCLezJfGUiO8Aa+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81NDgx NDgyNy1kZTY1LTQzMTEtOWY0Mi05OTRmYjk5MmIyYzQvOWFmNThmMTctODNjYy0z NzY2LWE5NzktMTI1YzZmODE0NDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTQ4MTQ4MjctZGU2NS00MzExLTlm NDItOTk0ZmI5OTJiMmM0LzU0ODE0ODI3LWRlNjUtNDMxMS05ZjQyLTk5NGZiOTky YjJjNC5jcmwwHwYDVR0jBBgwFoAU77QXTW657ddBb7qYzAJbHyjnoPswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81NDgxNDgyNy1kZTY1LTQzMTEtOWY0Mi05OTRm Yjk5MmIyYzQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF7zIMA0E AgACMAcDBQAmB9JAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBABIRbQ1LJFgP7nf63gxtS+Q/IuaclXxl5EeY iDBVFhsORe8Nje0b3dCfmr32CCn0dVOHhyevDOx2R/4faWCQ4ndvhGw/hkC6EB8+ otf8+H8g6SLhJQsq5stp+P0VgjXpnSVGYj9gRu97H1OKPyw487wB81tnMh35mFxE de03o9HSBCtasOqGinry36TjLB21rkf3vpIduuF1Z94WR0CmrY7kd5uehMOEj1QA uWe8HckDE7JK7l/CtdKItT3SJyqCAO/G1hzzlTFX5S6uR0azWksiaIpE7SqGD5QK io0Xs+52+a75110vw785T3AsbeYU5CSHZCl72n1bc6EQVLD3RjQ= -----END CERTIFICATE-----Generated at Sun May 11 01:42:09 2025 by rpki-client