$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b95e87e-a638-393e-8f6d-33808b7b0c64.roa File: 1b95e87e-a638-393e-8f6d-33808b7b0c64.roa (raw, json) Hash identifier: mpxJVY+XL76f8Y/IqR2WA/c8AB1u+FP4FvbW+TgQ5Cw= Subject key identifier: 1A:C0:D9:B1:7A:6B:8C:63:63:37:A1:B2:E8:CF:36:26:23:58:39:07 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E124DC835A1A536E81C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b95e87e-a638-393e-8f6d-33808b7b0c64.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 24319 IP address blocks: 23.204.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e1:24:dc:83:5a:1a:53:6e:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=63c7c204-f836-47ff-b3f5-6fa24dd0cca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8d:76:52:d4:3c:c1:3b:96:4f:17:fe:c0:dd: bd:78:71:41:ed:f3:61:a8:a9:d4:c9:57:fc:4e:5f: aa:6f:44:11:27:2a:0d:70:2c:6b:a8:41:06:2c:42: 8b:26:0f:50:06:49:76:76:87:cc:a7:f6:31:21:05: f6:51:b1:64:a7:10:76:78:f7:88:68:a0:37:c9:f7: a9:90:0a:8c:f2:4e:08:a7:f8:ac:a0:c7:a5:ce:19: 05:8f:fe:d7:2d:d3:7d:01:ee:9b:11:7b:6a:fa:c7: 4e:b8:46:c2:63:89:6d:09:93:cc:0c:bc:b7:5e:bf: e4:e8:0f:fd:09:9e:f1:e0:2c:ba:97:50:41:33:9c: d8:80:65:63:82:4e:81:cb:36:b0:a4:1f:33:50:fe: 82:ad:10:a0:d5:7d:ed:45:df:2e:65:da:45:4f:85: 9c:72:64:e8:d9:8d:fd:90:24:43:54:fc:97:78:02: 74:55:fb:33:20:95:cd:01:04:d9:37:2c:e6:6c:bc: 6a:2d:22:dc:e4:dc:a7:21:b5:74:e4:43:a6:7a:39: 92:af:1c:bc:3c:e3:21:82:cd:90:39:13:af:23:10: 73:1e:d8:4c:4c:31:dc:07:33:05:e2:94:76:fc:8b: 0b:1b:bb:ba:e4:f8:18:1e:b0:52:23:03:5b:59:53: 13:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C0:D9:B1:7A:6B:8C:63:63:37:A1:B2:E8:CF:36:26:23:58:39:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b95e87e-a638-393e-8f6d-33808b7b0c64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a2:38:e4:7d:27:f2:1f:90:5b:c0:1a:29:df:f8:00:29:88: 5a:5d:ab:b1:52:07:2a:bd:6f:78:51:4f:4e:b8:ed:49:13:04: 98:bb:cb:bc:f6:cc:b8:01:5f:84:3d:c0:2c:07:c0:65:51:d1: 09:9b:27:6a:30:88:12:68:30:61:36:cd:34:e5:62:48:1a:ee: 3b:9a:e5:2a:75:b4:cf:64:c9:66:c2:11:d6:1b:87:4f:38:d1: c9:09:c4:c7:15:90:2a:d3:22:78:e0:fe:dd:39:35:da:28:53: a2:e2:be:b9:d9:31:31:53:5d:9c:69:a6:49:c0:08:9f:ed:da: 63:49:c2:d6:3b:79:fd:60:72:61:00:6a:d6:70:d5:88:81:2f: 35:1a:a2:08:46:38:1a:92:9c:12:10:31:3e:e4:46:0a:0b:aa: d2:b2:72:66:02:4b:ec:e7:b4:e6:34:1c:77:25:6c:fc:61:c9: 55:dc:6d:fc:a3:1e:46:a8:74:e9:e7:41:04:1b:78:bd:72:81: cb:ee:df:b4:e5:58:ea:74:81:3f:a7:53:be:b8:5e:48:fd:02: 94:f2:2a:f1:e1:21:35:d1:15:43:c6:99:fb:ac:8f:5a:38:bd: 19:b6:62:2f:6f:8d:55:fc:f2:29:b4:c8:e9:45:ba:fa:ff:4f: db:e1:b7:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKeEk3INaGlNugcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NjNjN2MyMDQtZjgzNi00N2ZmLWIzZjUtNmZhMjRkZDBjY2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI12UtQ8wTuWTxf+wN29eHFB7fNhqKnUyVf8 Tl+qb0QRJyoNcCxrqEEGLEKLJg9QBkl2dofMp/YxIQX2UbFkpxB2ePeIaKA3yfep kAqM8k4Ip/isoMelzhkFj/7XLdN9Ae6bEXtq+sdOuEbCY4ltCZPMDLy3Xr/k6A/9 CZ7x4Cy6l1BBM5zYgGVjgk6ByzawpB8zUP6CrRCg1X3tRd8uZdpFT4WccmTo2Y39 kCRDVPyXeAJ0VfszIJXNAQTZNyzmbLxqLSLc5NynIbV05EOmejmSrxy8POMhgs2Q OROvIxBzHthMTDHcBzMF4pR2/IsLG7u65PgYHrBSIwNbWVMTZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrA2bF6a4xjYzehsujPNiYjWDkHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWI5NWU4N2UtYTYzOC0z OTNlLThmNmQtMzM4MDhiN2IwYzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8xJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeiOOR9J/IfkFvAGinf+AApiFpdq7FSByq9b3hRT0647UkTBJi7y7z2 zLgBX4Q9wCwHwGVR0QmbJ2owiBJoMGE2zTTlYkga7jua5Sp1tM9kyWbCEdYbh084 0ckJxMcVkCrTInjg/t05NdooU6LivrnZMTFTXZxppknACJ/t2mNJwtY7ef1gcmEA atZw1YiBLzUaoghGOBqSnBIQMT7kRgoLqtKycmYCS+zntOY0HHclbPxhyVXcbfyj HkaodOnnQQQbeL1ygcvu37TlWOp0gT+nU764Xkj9ApTyKvHhITXRFUPGmfusj1o4 vRm2Yi9vjVX88im0yOlFuvr/T9vht5s= -----END CERTIFICATE-----Generated at Tue May 6 03:04:25 2025 by rpki-client