$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/106902e7-8d44-3ba9-adee-a152f9f2a13d.roa File: 106902e7-8d44-3ba9-adee-a152f9f2a13d.roa (raw, json) Hash identifier: AweR5KSUYIz0nToj8JnPUxBLDhvDBYEdec0YmdCLPdk= Subject key identifier: 54:B9:2D:B5:52:C3:7E:AA:16:82:12:5C:77:DE:8F:5E:71:0C:07:B1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849A1EF69D0DE5048948D1460C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/106902e7-8d44-3ba9-adee-a152f9f2a13d.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 20940 IP address blocks: 23.195.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:69:d0:de:50:48:94:8d:14:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=7e0e4e7a-09b0-452f-b97e-c405149626db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8e:c9:4e:ee:69:a3:4b:96:ea:34:3c:49:35: b2:9d:a6:04:3b:26:b7:e2:fc:7b:01:5a:8d:1b:f8: 60:61:96:de:32:51:b9:03:47:08:78:27:37:9b:d2: c5:35:ae:8e:5b:8f:20:de:86:f3:ed:94:af:13:43: 77:c3:17:fd:20:62:3e:11:1a:f9:9b:8f:d7:a8:c4: 60:da:65:ec:53:05:6a:de:b6:d6:f9:07:74:a1:9f: 16:0f:0a:99:4c:31:5d:0d:6a:48:82:2a:84:a3:09: 34:7d:bd:4d:c8:04:20:bd:b0:03:08:1f:86:ba:18: 47:5b:e0:bf:d0:c5:93:35:59:e5:07:b2:bd:cc:0c: 13:7d:78:30:c5:c5:47:56:24:90:9f:8a:a2:28:64: 89:a3:a9:51:9c:37:fd:01:29:b7:b2:6d:25:ba:4b: 81:8e:c5:38:65:89:a2:26:af:eb:a5:69:7f:51:4f: 95:46:d2:3c:22:66:75:57:f4:ef:d8:19:ee:63:a5: 9d:fc:bf:bc:40:82:4f:e1:7c:4a:f6:7d:19:28:d6: 05:bf:88:ce:d0:b2:e8:7e:10:00:3b:6a:f4:ad:17: a0:56:dd:04:f0:31:7c:84:eb:bd:c2:f5:f5:64:8a: 4f:09:fe:b0:74:b3:14:a8:41:69:67:94:4e:a4:2c: 13:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B9:2D:B5:52:C3:7E:AA:16:82:12:5C:77:DE:8F:5E:71:0C:07:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/106902e7-8d44-3ba9-adee-a152f9f2a13d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:29:ef:eb:3e:d1:f9:bc:67:55:33:fc:5b:89:41:a6:2d:d2: 3d:96:35:c8:40:73:56:54:25:b5:c8:b4:f3:cf:13:c2:5f:5a: be:31:9d:33:1b:fb:cf:3a:62:34:7d:b4:8f:e4:a2:b8:7d:3b: 17:ac:a8:09:40:72:5f:b1:9b:3c:f1:bc:5f:4c:04:f4:7f:87: 0c:c6:12:0d:d7:44:0c:5a:b1:27:47:30:7a:ac:e0:32:40:e6: 8f:29:84:79:50:bd:3e:a0:e5:58:cf:a9:f3:3c:34:9c:a1:33: 5c:5b:dc:8e:6f:42:bf:01:60:10:2f:df:cd:a8:cb:4e:f0:51: 69:ea:54:81:94:ad:46:70:1b:74:67:36:fa:75:98:d7:c0:60: 2a:36:63:36:c4:27:23:33:e3:e4:83:91:20:74:bc:30:e7:65: d7:6c:b2:09:b4:03:6d:60:cf:b6:2d:93:3e:8b:50:53:e5:7d: e6:37:43:3e:3a:27:53:25:6c:a5:7f:82:ab:6b:8c:80:f9:aa: b4:c0:c4:9d:21:ac:e4:1c:dd:fa:40:b8:90:36:5d:00:a9:5e: bb:b8:e1:b8:9e:75:cf:3a:17:13:47:9a:1e:1b:39:d2:b9:df: 6c:69:fe:5a:86:72:d5:f5:1c:13:cc:05:2d:3a:83:2c:db:b2: 53:a3:79:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh72nQ3lBIlI0UYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk N2UwZTRlN2EtMDliMC00NTJmLWI5N2UtYzQwNTE0OTYyNmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI7JTu5po0uW6jQ8STWynaYEOya34vx7AVqN G/hgYZbeMlG5A0cIeCc3m9LFNa6OW48g3obz7ZSvE0N3wxf9IGI+ERr5m4/XqMRg 2mXsUwVq3rbW+Qd0oZ8WDwqZTDFdDWpIgiqEowk0fb1NyAQgvbADCB+GuhhHW+C/ 0MWTNVnlB7K9zAwTfXgwxcVHViSQn4qiKGSJo6lRnDf9ASm3sm0lukuBjsU4ZYmi Jq/rpWl/UU+VRtI8ImZ1V/Tv2BnuY6Wd/L+8QIJP4XxK9n0ZKNYFv4jO0LLofhAA O2r0rRegVt0E8DF8hOu9wvX1ZIpPCf6wdLMUqEFpZ5ROpCwTuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFS5LbVSw36qFoISXHfej15xDAexMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTA2OTAyZTctOGQ0NC0z YmE5LWFkZWUtYTE1MmY5ZjJhMTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8P/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsp7+s+0fm8Z1Uz/FuJQaYt0j2WNchAc1ZUJbXItPPPE8JfWr4xnTMb +886YjR9tI/korh9OxesqAlAcl+xmzzxvF9MBPR/hwzGEg3XRAxasSdHMHqs4DJA 5o8phHlQvT6g5VjPqfM8NJyhM1xb3I5vQr8BYBAv382oy07wUWnqVIGUrUZwG3Rn Nvp1mNfAYCo2YzbEJyMz4+SDkSB0vDDnZddssgm0A21gz7Ytkz6LUFPlfeY3Qz46 J1MlbKV/gqtrjID5qrTAxJ0hrOQc3fpAuJA2XQCpXru44biedc86FxNHmh4bOdK5 32xp/lqGctX1HBPMBS06gyzbslOjefw= -----END CERTIFICATE-----Generated at Mon May 5 01:24:25 2025 by rpki-client