$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/194d795a-365e-3930-a19f-66f26974cc3b.roa File: 194d795a-365e-3930-a19f-66f26974cc3b.roa (raw, json) Hash identifier: LqMGuO9k36FrGipmbzQxit+ZPxoiYtmvts+Uun0XGlc= Subject key identifier: C0:02:CA:0D:79:4E:9E:37:9A:0A:B5:43:61:CB:A5:27:B7:CA:59:31 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B0456EAFDAD5BA038280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/194d795a-365e-3930-a19f-66f26974cc3b.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.221.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b0:45:6e:af:da:d5:ba:03:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=bb482436-7a2d-4a50-957f-ecd4544e85e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:04:28:b2:ee:ad:e1:16:c7:90:6d:8a:ea:87: 77:f4:ef:24:31:f5:6e:b1:71:7e:d4:cb:c0:19:d6: 12:8c:74:7b:57:56:bb:42:33:7d:69:63:b2:a7:df: 7e:83:02:93:a2:1a:f0:76:88:a2:73:9c:f5:a4:87: c8:73:55:d6:b6:ae:86:1a:0a:f2:99:92:a9:cb:80: d0:0c:76:27:8d:d5:39:24:55:3c:ff:1d:ee:7d:43: d2:a4:24:8a:9a:a5:51:3e:64:92:e6:9b:54:0e:ab: 05:8a:de:2d:54:a6:49:c3:cc:df:ab:df:eb:f2:f7: cc:c6:d1:3c:9f:be:8d:e2:3a:d9:17:bc:09:a8:75: a2:a4:99:7f:e5:8c:70:2f:16:a2:d9:3b:83:d4:0c: 35:64:cb:05:0e:bf:1c:9a:dd:61:4c:24:6b:90:f8: 1c:0a:ed:7e:6c:4d:0e:de:07:ba:7b:3a:73:80:e4: c3:db:6f:30:8e:63:46:e1:c9:90:2d:95:95:38:f5: 2f:db:35:0c:49:a4:48:51:b9:10:7f:11:1a:f6:11: bf:fd:ed:58:59:61:27:82:52:59:c3:c3:4c:bb:b5: 69:af:99:87:64:37:e0:aa:26:05:9f:ce:60:21:46: 4e:5a:99:96:01:78:0e:f3:66:e4:4e:b5:12:3d:79: 6f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:02:CA:0D:79:4E:9E:37:9A:0A:B5:43:61:CB:A5:27:B7:CA:59:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/194d795a-365e-3930-a19f-66f26974cc3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:8f:3d:ea:92:3d:13:09:28:cb:bc:58:6f:4f:b8:8c:8c:ca: dd:e4:35:f9:63:f7:31:13:be:51:18:7e:6b:f1:09:4c:6d:56: aa:04:b4:3a:99:80:4e:a9:79:b0:92:1b:56:1e:5d:4d:82:c4: ae:73:4d:da:27:0c:cf:48:33:fc:08:9e:9f:e1:22:6a:03:76: 7a:0c:17:c7:54:d4:90:a5:55:cb:b3:f7:d8:d2:06:92:e4:ff: d6:71:9f:1c:86:0c:68:ef:2c:a3:4f:13:2f:b9:d3:13:5c:39: 30:a6:12:58:27:f8:55:69:df:13:e0:f8:b0:9b:61:01:4f:00: 86:a7:97:83:d0:ba:c7:a4:9c:e0:b9:2f:cb:dc:8e:0a:46:25: 57:2b:aa:0a:2f:f3:93:bf:f1:e9:97:59:90:55:cc:5f:31:dd: c8:a5:6b:69:e4:fc:7e:84:ec:dd:bd:46:f4:83:f2:b3:92:57: 1b:61:3b:7d:d7:08:4a:10:bc:95:ca:f6:d6:17:5f:e6:33:4c: 7d:07:30:25:81:87:d3:42:a6:e9:cc:2c:0c:3e:3d:aa:73:6b: a1:20:17:c6:a4:6a:3b:9e:ad:5d:74:04:0a:7b:d9:26:05:62: 2c:26:5d:8c:0f:b5:fa:90:7c:84:e6:07:d8:97:13:e9:58:79: 82:90:af:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLBFbq/a1boDgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YmI0ODI0MzYtN2EyZC00YTUwLTk1N2YtZWNkNDU0NGU4NWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQQosu6t4RbHkG2K6od39O8kMfVusXF+1MvA GdYSjHR7V1a7QjN9aWOyp99+gwKTohrwdoiic5z1pIfIc1XWtq6GGgrymZKpy4DQ DHYnjdU5JFU8/x3ufUPSpCSKmqVRPmSS5ptUDqsFit4tVKZJw8zfq9/r8vfMxtE8 n76N4jrZF7wJqHWipJl/5YxwLxai2TuD1Aw1ZMsFDr8cmt1hTCRrkPgcCu1+bE0O 3ge6ezpzgOTD228wjmNG4cmQLZWVOPUv2zUMSaRIUbkQfxEa9hG//e1YWWEnglJZ w8NMu7Vpr5mHZDfgqiYFn85gIUZOWpmWAXgO82bkTrUSPXlvRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMACyg15Tp43mgq1Q2HLpSe3ylkxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTk0ZDc5NWEtMzY1ZS0z OTMwLWExOWYtNjZmMjY5NzRjYzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF93VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEePPeqSPRMJKMu8WG9PuIyMyt3kNflj9zETvlEYfmvxCUxtVqoEtDqZ gE6pebCSG1YeXU2CxK5zTdonDM9IM/wInp/hImoDdnoMF8dU1JClVcuz99jSBpLk /9ZxnxyGDGjvLKNPEy+50xNcOTCmElgn+FVp3xPg+LCbYQFPAIanl4PQuseknOC5 L8vcjgpGJVcrqgov85O/8emXWZBVzF8x3cila2nk/H6E7N29RvSD8rOSVxthO33X CEoQvJXK9tYXX+YzTH0HMCWBh9NCpunMLAw+Papza6EgF8akajuerV10BAp72SYF YiwmXYwPtfqQfITmB9iXE+lYeYKQrxI= -----END CERTIFICATE-----Generated at Mon May 5 02:06:20 2025 by rpki-client