$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18593edd-a894-310e-8776-c7da1dde9404.roa File: 18593edd-a894-310e-8776-c7da1dde9404.roa (raw, json) Hash identifier: B+RPbjqCLJApipQmj/WbCJB27JDCPggs6TXyjYV3JgQ= Subject key identifier: 55:9A:C6:E1:D6:A3:46:03:03:74:A3:BE:D0:2E:7A:04:40:A6:8D:54 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4BB34CF72A4644176E500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18593edd-a894-310e-8776-c7da1dde9404.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.223.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:bb:34:cf:72:a4:64:41:76:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=f9a333bf-c612-4e1c-9395-70a2404e19b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c5:4a:a9:8f:b4:62:8a:ca:6b:9f:35:03:13: be:2e:c4:25:49:e3:db:ce:85:71:f9:86:8a:18:3f: f8:39:74:21:87:13:2f:a8:19:2a:22:6d:9d:85:e9: 76:8c:c1:45:75:1b:c5:68:5d:5d:e1:9f:4e:c2:75: f3:54:72:fb:22:20:da:01:0d:ff:57:27:2a:6a:a8: 90:a8:2e:96:0e:70:47:a3:8f:e8:7c:21:ae:ab:81: 4f:cd:c7:73:1c:0c:5d:5b:56:42:cf:73:a9:91:81: f2:6e:77:ad:8c:18:c9:15:46:9e:d3:0e:08:1a:d3: 88:05:00:6a:60:29:63:ce:fa:f4:24:27:8c:a8:9b: 80:d4:1b:57:a7:f3:f5:89:05:4e:7e:97:c8:e8:02: ed:d8:4f:b3:b6:20:2a:d1:66:58:dc:b6:7e:ae:96: 85:4a:ef:c3:1a:ab:89:2a:0a:f4:ef:41:48:c5:cf: d6:8c:93:f6:5d:a1:d6:c2:05:e7:d0:f0:87:94:34: 49:4c:34:69:b1:3f:f9:18:8c:a9:e4:a6:11:07:ee: f5:06:53:5e:cc:3a:42:4d:63:9d:4d:ce:9b:5a:02: bc:83:19:5b:5f:d8:65:6e:b5:18:ad:04:0b:d9:67: 34:b8:26:f4:0c:f7:ef:fe:c4:68:46:f1:8e:35:5d: ee:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9A:C6:E1:D6:A3:46:03:03:74:A3:BE:D0:2E:7A:04:40:A6:8D:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18593edd-a894-310e-8776-c7da1dde9404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:3a:63:e0:60:02:b3:9f:01:8a:a9:c6:66:3f:6e:fb:14:04: 7e:fb:ba:7c:bd:ba:f7:ae:0b:8f:34:bd:be:5b:1c:a5:58:8f: 1e:6a:b3:04:d1:fb:84:61:53:8b:71:24:03:2f:dc:02:6a:3d: 56:e1:64:6c:d9:2d:57:04:76:e1:0b:7a:de:91:79:e6:99:02: fb:0e:88:67:18:bc:25:eb:51:d2:89:1d:eb:7d:7e:c0:36:20: c9:07:6f:2d:c9:ab:c7:93:23:f3:52:89:c3:70:39:07:96:94: 65:36:5d:9d:c7:fe:da:75:0c:e1:da:84:e8:29:70:e9:ca:ca: 19:f4:d9:c9:6a:1a:f9:5b:1d:c8:f5:30:19:a2:f7:3e:6f:93: d6:8f:fa:82:65:31:8b:9f:b8:a5:38:e5:3c:d3:da:37:fe:35: 0f:94:8e:c1:61:dc:0f:97:47:21:7d:00:82:dc:c9:b2:b7:5d: db:dc:74:bc:24:1c:46:bc:6c:d9:e1:a7:b5:77:e0:e1:2c:97: 97:c3:29:b9:d8:b4:13:f4:25:3e:18:b0:49:e4:31:61:a2:45: 20:5d:c0:00:bb:02:80:06:57:f6:e6:7a:b0:69:47:f7:2a:7c: 8c:37:8e:5e:20:fb:f1:2d:5c:89:5e:57:a6:f8:42:00:aa:f4: 93:5a:56:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLs0z3KkZEF25QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ZjlhMzMzYmYtYzYxMi00ZTFjLTkzOTUtNzBhMjQwNGUxOWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8VKqY+0YorKa581AxO+LsQlSePbzoVx+YaK GD/4OXQhhxMvqBkqIm2dhel2jMFFdRvFaF1d4Z9OwnXzVHL7IiDaAQ3/VycqaqiQ qC6WDnBHo4/ofCGuq4FPzcdzHAxdW1ZCz3OpkYHybnetjBjJFUae0w4IGtOIBQBq YCljzvr0JCeMqJuA1BtXp/P1iQVOfpfI6ALt2E+ztiAq0WZY3LZ+rpaFSu/DGquJ Kgr070FIxc/WjJP2XaHWwgXn0PCHlDRJTDRpsT/5GIyp5KYRB+71BlNezDpCTWOd Tc6bWgK8gxlbX9hlbrUYrQQL2Wc0uCb0DPfv/sRoRvGONV3uRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWaxuHWo0YDA3SjvtAuegRApo1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTg1OTNlZGQtYTg5NC0z MTBlLTg3NzYtYzdkYTFkZGU5NDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG46Y+BgArOfAYqpxmY/bvsUBH77uny9uveuC480vb5bHKVYjx5qswTR +4RhU4txJAMv3AJqPVbhZGzZLVcEduELet6ReeaZAvsOiGcYvCXrUdKJHet9fsA2 IMkHby3Jq8eTI/NSicNwOQeWlGU2XZ3H/tp1DOHahOgpcOnKyhn02clqGvlbHcj1 MBmi9z5vk9aP+oJlMYufuKU45TzT2jf+NQ+UjsFh3A+XRyF9AILcybK3XdvcdLwk HEa8bNnhp7V34OEsl5fDKbnYtBP0JT4YsEnkMWGiRSBdwAC7AoAGV/bmerBpR/cq fIw3jl4g+/EtXIleV6b4QgCq9JNaVoQ= -----END CERTIFICATE-----Generated at Mon May 5 20:39:27 2025 by rpki-client