$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1af1d344-8103-318e-a208-5c1a7a8a81f2.roa File: 1af1d344-8103-318e-a208-5c1a7a8a81f2.roa (raw, json) Hash identifier: KQiUSE5CFgATvj0Uw5lIR/TiwGkGoXRUtcvNxNrjemE= Subject key identifier: 73:23:44:A8:24:6A:E0:7A:AD:2D:27:96:72:FC:D8:EB:D6:2D:4F:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849780F1DC31E9A3B837838E6C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1af1d344-8103-318e-a208-5c1a7a8a81f2.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.192.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:1d:c3:1e:9a:3b:83:78:38:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=ca0db78e-25b9-4e72-814a-b347d8068551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bb:a1:1f:b9:d8:c5:8c:8b:55:ff:fd:d1:1e: 8b:49:33:07:8b:47:37:7a:67:b8:07:53:25:10:8c: c8:ee:95:0a:b5:a3:b9:83:52:9c:64:8d:3b:e8:de: 50:54:95:a9:e3:d0:bf:38:93:7e:f5:20:89:05:fb: ad:64:6f:a6:05:ef:cb:1d:fd:d4:88:1a:94:7b:37: ad:5b:b3:f4:40:97:9b:b2:3b:62:f0:99:8d:38:7a: d1:49:0c:4d:54:30:f9:39:21:05:a7:67:4d:02:9e: 25:dd:74:cd:ae:e6:74:65:c1:64:c3:f8:c7:0c:f0: 61:10:9c:22:21:f6:97:d1:90:6f:63:f7:48:f3:a4: 46:4d:01:73:bc:d2:af:1b:fa:98:73:d4:33:dd:83: 74:1a:ab:d6:60:56:83:4f:58:83:88:7c:a3:be:91: 82:db:fa:8b:40:6e:7f:9d:1a:9b:79:75:3d:d0:28: 8c:96:68:ec:e9:5c:7d:16:a7:59:35:f8:bf:e6:6c: e7:56:c8:a7:60:7e:2c:ff:90:45:ad:69:2e:75:6d: 60:8a:71:e8:65:85:83:cb:f0:91:a2:61:5d:a7:fc: ed:f6:bb:27:2f:79:cd:a1:c3:b6:73:d4:31:a8:83: 33:f4:f9:44:fd:de:b8:8a:c2:53:fe:fe:d4:cd:6f: 3f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:23:44:A8:24:6A:E0:7A:AD:2D:27:96:72:FC:D8:EB:D6:2D:4F:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1af1d344-8103-318e-a208-5c1a7a8a81f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.192.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:26:50:5d:ff:a8:91:05:be:4a:93:23:c2:c9:70:bd:47:0e: 7b:fa:0e:cf:dd:17:19:7c:29:04:cd:91:e3:49:e3:87:3b:ae: dd:0b:de:82:b9:f2:79:56:ac:ed:e5:37:43:19:a1:a9:08:d7: 26:97:2b:c8:ec:d8:84:3a:50:2d:27:eb:a1:37:fa:22:fa:26: 64:fd:54:01:7e:c4:1e:55:c6:58:8f:b4:74:77:4e:b5:60:c7: 25:b0:30:81:7f:17:07:c4:c1:a0:ee:8f:43:74:82:3f:76:07: 8a:82:41:39:7b:44:fe:0a:40:7d:11:f5:29:6b:68:ca:0c:c6: 92:95:f2:13:e3:51:b4:31:d2:e8:55:46:fa:26:96:80:d8:5b: 07:47:34:3b:ba:e5:8d:85:bb:26:05:3f:a0:77:46:82:84:d7: 11:60:b1:71:b4:2d:1f:cc:59:36:6e:09:7a:78:dd:4a:3f:77: 44:c0:3f:a0:8d:ca:f6:4f:c7:68:cb:2c:e4:bb:2e:89:f2:16: 0c:79:93:97:b8:d0:a9:59:2f:61:94:a0:9a:5e:64:7b:b6:31: 6b:5a:cf:8e:50:69:32:27:3d:9d:fe:38:4a:c6:fb:46:ac:32: 54:3c:c1:af:7e:59:37:2e:98:bb:db:00:64:20:58:ca:af:90: af:8b:0d:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4Dx3DHpo7g3g45sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk Y2EwZGI3OGUtMjViOS00ZTcyLTgxNGEtYjM0N2Q4MDY4NTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLuhH7nYxYyLVf/90R6LSTMHi0c3eme4B1Ml EIzI7pUKtaO5g1KcZI076N5QVJWp49C/OJN+9SCJBfutZG+mBe/LHf3UiBqUezet W7P0QJebsjti8JmNOHrRSQxNVDD5OSEFp2dNAp4l3XTNruZ0ZcFkw/jHDPBhEJwi IfaX0ZBvY/dI86RGTQFzvNKvG/qYc9Qz3YN0GqvWYFaDT1iDiHyjvpGC2/qLQG5/ nRqbeXU90CiMlmjs6Vx9FqdZNfi/5mznVsinYH4s/5BFrWkudW1ginHoZYWDy/CR omFdp/zt9rsnL3nNocO2c9QxqIMz9PlE/d64isJT/v7UzW8/XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMjRKgkauB6rS0nlnL82OvWLU93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWFmMWQzNDQtODEwMy0z MThlLWEyMDgtNWMxYTdhOGE4MWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8DkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8mUF3/qJEFvkqTI8LJcL1HDnv6Ds/dFxl8KQTNkeNJ44c7rt0L3oK5 8nlWrO3lN0MZoakI1yaXK8js2IQ6UC0n66E3+iL6JmT9VAF+xB5VxliPtHR3TrVg xyWwMIF/FwfEwaDuj0N0gj92B4qCQTl7RP4KQH0R9SlraMoMxpKV8hPjUbQx0uhV RvomloDYWwdHNDu65Y2FuyYFP6B3RoKE1xFgsXG0LR/MWTZuCXp43Uo/d0TAP6CN yvZPx2jLLOS7LonyFgx5k5e40KlZL2GUoJpeZHu2MWtaz45QaTInPZ3+OErG+0as MlQ8wa9+WTcumLvbAGQgWMqvkK+LDTE= -----END CERTIFICATE-----Generated at Mon May 5 02:25:40 2025 by rpki-client