$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35c9c03e-ecbb-39d7-9784-dd96ab34edb0.roa File: 35c9c03e-ecbb-39d7-9784-dd96ab34edb0.roa (raw, json) Hash identifier: hPTF9awiQa1B3PrJ5X9wnSRHsQe1q22qhXl5B7S8rNc= Subject key identifier: FA:24:4E:48:29:EF:69:1D:E4:53:02:8C:BD:0B:B6:12:B8:87:77:2C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849A4BA111A91C240E6876BCF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35c9c03e-ecbb-39d7-9784-dd96ab34edb0.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 16625 IP address blocks: 23.193.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:11:1a:91:c2:40:e6:87:6b:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=fde33e7c-af93-4f6c-8cbe-ddd9e07b41de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:42:e1:8f:85:4e:fd:aa:f6:54:72:fa:4a:e9: 62:fb:ce:31:bb:d0:19:89:6b:af:fb:fa:97:a4:fa: 88:e4:7a:d0:79:2e:f2:f4:0b:6e:99:6d:95:26:cf: f1:0b:86:c2:42:2e:5c:73:ae:01:40:ee:01:8a:8e: dc:02:36:5d:95:15:40:64:73:b6:4d:23:47:b6:95: d2:f0:d6:71:20:76:01:71:05:6d:be:d3:96:d9:ef: 4e:7e:0e:f1:1a:d3:61:21:7a:1a:0a:b4:69:cc:73: ac:0f:00:26:be:36:ea:f2:36:fe:92:f3:88:74:e9: ea:fe:76:6e:8f:9f:ab:86:c2:8c:91:d0:1d:16:40: 60:43:78:97:9a:72:75:8d:44:aa:71:1f:f9:b8:fb: 7b:ff:c0:ee:3a:c9:cb:b0:4c:bb:1a:a3:ca:d2:2a: 82:ae:d6:f8:74:db:3b:d1:ed:1b:3d:14:f1:4a:90: bd:b9:2f:d5:ca:6f:d9:e9:dc:09:b3:89:bd:7a:1c: 6f:b3:08:fe:d1:19:64:a9:32:46:53:11:59:e4:37: 0f:cc:f8:04:66:ff:d8:c0:69:e7:9d:53:07:bc:fd: c4:ed:9f:c5:05:35:e7:16:76:6d:1a:98:39:af:45: d6:7e:99:1a:52:ce:20:c5:37:a8:a2:19:1e:49:a9: eb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:24:4E:48:29:EF:69:1D:E4:53:02:8C:BD:0B:B6:12:B8:87:77:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35c9c03e-ecbb-39d7-9784-dd96ab34edb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.193.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:79:4b:9d:24:0a:ca:3a:47:07:be:40:1a:ef:43:c3:ac:00: 23:00:6b:e6:6f:c6:37:48:a3:cf:61:cf:17:21:22:9f:4d:d2: 1f:ec:fa:fe:29:23:47:50:e3:0b:8c:8e:06:6c:5e:d3:35:89: 50:25:39:e5:50:8b:4e:b8:e6:84:e7:94:b2:dd:6a:5a:08:dd: b7:e7:54:cb:a6:19:20:4a:a4:41:32:9c:7a:34:ed:60:ed:98: 71:57:4a:50:c6:42:ac:7a:62:e0:5a:86:0e:1a:32:4e:f6:81: a2:a6:22:2b:bd:fa:d2:2d:41:42:9a:53:d3:e6:1e:12:df:4e: 9d:54:b5:07:8b:6e:da:6c:16:f9:99:df:f3:4d:98:84:62:01: e7:12:e5:75:f0:3b:18:83:27:00:e5:2d:c3:88:37:ce:98:6d: b9:31:0d:ec:f1:36:57:e9:42:e8:ee:ac:8e:c3:de:53:c3:87: b3:d4:04:ba:57:7f:55:da:bb:03:77:c8:4f:d6:f8:f3:fa:02: bb:54:4a:bb:2e:94:3d:53:9e:0c:f1:e5:5d:5e:b5:b1:02:23: fe:9b:85:cd:1c:8a:84:52:1c:10:03:45:3f:74:e9:32:e0:72: 8e:26:26:c3:aa:ee:df:ab:9f:ea:a4:d1:2b:45:84:82:2a:0e: 7e:fa:8f:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhEakcJA5odrz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmRlMzNlN2MtYWY5My00ZjZjLThjYmUtZGRkOWUwN2I0MWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgULhj4VO/ar2VHL6Suli+84xu9AZiWuv+/qX pPqI5HrQeS7y9AtumW2VJs/xC4bCQi5cc64BQO4Bio7cAjZdlRVAZHO2TSNHtpXS 8NZxIHYBcQVtvtOW2e9Ofg7xGtNhIXoaCrRpzHOsDwAmvjbq8jb+kvOIdOnq/nZu j5+rhsKMkdAdFkBgQ3iXmnJ1jUSqcR/5uPt7/8DuOsnLsEy7GqPK0iqCrtb4dNs7 0e0bPRTxSpC9uS/Vym/Z6dwJs4m9ehxvswj+0RlkqTJGUxFZ5DcPzPgEZv/YwGnn nVMHvP3E7Z/FBTXnFnZtGpg5r0XWfpkaUs4gxTeoohkeSanrKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPokTkgp72kd5FMCjL0LthK4h3csMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzVjOWMwM2UtZWNiYi0z OWQ3LTk3ODQtZGQ5NmFiMzRlZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8H4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABV5S50kCso6Rwe+QBrvQ8OsACMAa+ZvxjdIo89hzxchIp9N0h/s+v4p I0dQ4wuMjgZsXtM1iVAlOeVQi0645oTnlLLdaloI3bfnVMumGSBKpEEynHo07WDt mHFXSlDGQqx6YuBahg4aMk72gaKmIiu9+tItQUKaU9PmHhLfTp1UtQeLbtpsFvmZ 3/NNmIRiAecS5XXwOxiDJwDlLcOIN86YbbkxDezxNlfpQujurI7D3lPDh7PUBLpX f1XauwN3yE/W+PP6ArtUSrsulD1Tngzx5V1etbECI/6bhc0cioRSHBADRT906TLg co4mJsOq7t+rn+qk0StFhIIqDn76jxo= -----END CERTIFICATE-----Generated at Mon May 5 11:28:48 2025 by rpki-client