$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16985964-9513-3aa0-a359-b480e55617e0.roa File: 16985964-9513-3aa0-a359-b480e55617e0.roa (raw, json) Hash identifier: 9w2G/F3y2FkWnLjZh+YPUu8yh8vat0nLUGd++DUAwB0= Subject key identifier: 44:70:F6:2B:A0:7C:E2:E3:DE:42:14:32:61:37:F8:D2:A7:E6:F2:CA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E437750A1BB6772E7180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16985964-9513-3aa0-a359-b480e55617e0.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.205.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e4:37:75:0a:1b:b6:77:2e:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=97bb705f-ccbe-40d2-b2d6-7703495e8af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cd:6f:06:9f:e9:18:80:42:16:c1:9d:c1:a6: 09:2b:97:cd:84:55:d7:09:6b:18:47:12:21:4d:a7: d7:87:75:88:be:9e:c9:b9:cd:15:24:cf:67:6d:8a: c1:e1:54:96:3a:0e:ce:9f:01:09:e2:61:20:e8:cc: de:45:45:db:a5:a6:77:a0:cc:2a:a5:07:74:08:38: b9:03:16:c2:39:9a:43:b7:a6:fc:d8:74:88:10:5d: 08:5d:4f:ec:b6:ae:47:5f:40:e5:df:a5:6d:93:a1: 3e:c1:9e:2d:11:50:5b:00:58:c8:6f:03:f0:b7:ef: 72:09:3b:52:0a:6c:a1:77:7b:73:9a:53:62:a2:a3: 61:a6:c0:79:81:2d:53:38:4f:45:b9:9e:99:43:bb: 98:3d:d3:75:d2:f6:ce:1e:66:2c:db:3f:29:fc:f3: a8:ec:b4:be:7c:76:49:00:ec:4a:d9:73:0d:b6:f4: 6d:d6:42:de:d9:eb:b2:f0:76:4d:37:14:e4:3e:51: 07:86:68:fd:16:b4:2c:c3:27:f1:c7:9a:97:f3:f0: 88:7d:bd:15:eb:e0:13:0b:a2:6a:28:61:40:3a:3a: 26:0c:bb:b0:d8:5c:a3:6e:c6:22:fa:0e:7b:d5:08: b1:a6:fe:e1:e9:69:ff:1e:b5:23:0f:bf:9a:22:d1: d0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:70:F6:2B:A0:7C:E2:E3:DE:42:14:32:61:37:F8:D2:A7:E6:F2:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16985964-9513-3aa0-a359-b480e55617e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:f8:9c:f7:13:31:5d:9b:a6:da:d4:4b:d5:ed:ff:e3:0b:9f: a4:01:58:03:66:dc:97:9e:00:ae:74:bb:b5:63:27:ab:df:0b: f9:42:9a:f5:3e:3f:b5:3a:56:c5:5b:83:40:cd:86:31:64:30: 48:5c:04:5a:d5:33:d7:4d:85:8e:c1:9d:a1:eb:2d:bd:21:13: 13:f1:e1:a4:44:95:b3:cf:72:ff:fb:40:2d:37:8a:5a:83:d2: 03:d3:5f:ea:43:49:39:f8:be:52:fe:be:b1:8b:75:eb:a3:fd: 1b:2b:b5:9e:d0:50:22:ac:b9:6b:e3:a3:87:3c:8e:b8:e3:0e: c5:26:99:5b:74:55:1e:01:9f:e1:67:76:a3:08:b9:3c:61:fe: 31:41:46:2f:f9:08:41:22:ae:8c:c1:51:2d:d9:4a:47:42:24: b3:d6:6d:15:f0:c9:68:ce:43:66:4c:10:8a:37:ef:ae:9f:eb: 32:49:30:0c:dc:55:5e:e4:c7:dc:84:eb:95:83:19:bf:d3:71: 62:e0:ce:60:b0:b7:f1:76:7e:8b:d2:d9:24:7e:b0:28:ae:75: e7:f3:02:7f:fd:73:e2:e8:bd:e2:3a:5b:cd:9c:8a:74:cc:3f: e5:c6:9d:59:ee:b6:dd:52:0e:ca:f5:be:2a:9c:34:8e:1b:6e: 25:42:2e:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKeQ3dQobtncucYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk OTdiYjcwNWYtY2NiZS00MGQyLWIyZDYtNzcwMzQ5NWU4YWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj81vBp/pGIBCFsGdwaYJK5fNhFXXCWsYRxIh TafXh3WIvp7Juc0VJM9nbYrB4VSWOg7OnwEJ4mEg6MzeRUXbpaZ3oMwqpQd0CDi5 AxbCOZpDt6b82HSIEF0IXU/stq5HX0Dl36Vtk6E+wZ4tEVBbAFjIbwPwt+9yCTtS Cmyhd3tzmlNioqNhpsB5gS1TOE9FuZ6ZQ7uYPdN10vbOHmYs2z8p/POo7LS+fHZJ AOxK2XMNtvRt1kLe2euy8HZNNxTkPlEHhmj9FrQswyfxx5qX8/CIfb0V6+ATC6Jq KGFAOjomDLuw2FyjbsYi+g571Qixpv7h6Wn/HrUjD7+aItHQBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERw9iugfOLj3kIUMmE3+NKn5vLKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTY5ODU5NjQtOTUxMy0z YWEwLWEzNTktYjQ4MGU1NTYxN2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF814MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIL4nPcTMV2bptrUS9Xt/+MLn6QBWANm3JeeAK50u7VjJ6vfC/lCmvU+ P7U6VsVbg0DNhjFkMEhcBFrVM9dNhY7BnaHrLb0hExPx4aRElbPPcv/7QC03ilqD 0gPTX+pDSTn4vlL+vrGLdeuj/RsrtZ7QUCKsuWvjo4c8jrjjDsUmmVt0VR4Bn+Fn dqMIuTxh/jFBRi/5CEEirozBUS3ZSkdCJLPWbRXwyWjOQ2ZMEIo3766f6zJJMAzc VV7kx9yE65WDGb/TcWLgzmCwt/F2fovS2SR+sCiudefzAn/9c+LoveI6W82cinTM P+XGnVnutt1SDsr1viqcNI4bbiVCLsc= -----END CERTIFICATE-----Generated at Sat May 10 10:13:06 2025 by rpki-client