$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4282a368-7979-3ad6-beaf-a9aaa8a9fe3e.roa File: 4282a368-7979-3ad6-beaf-a9aaa8a9fe3e.roa (raw, json) Hash identifier: 3bUnArGS/6ipqo0sAd/G7jXdekO5kkvOsJ3/RSOOL1U= Subject key identifier: F6:F7:82:0C:D5:30:C2:D4:64:2F:59:95:50:D5:03:BA:38:EB:27:26 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF49C4D9D2B6695408B4E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4282a368-7979-3ad6-beaf-a9aaa8a9fe3e.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.210.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:9c:4d:9d:2b:66:95:40:8b:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=6fb52659-a7b7-4af6-a48c-4739ad0bc690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:19:16:30:f7:5e:2d:38:8e:62:17:2e:17:81: 16:f4:ac:ac:b3:3a:b9:8a:f3:e6:fe:32:b0:ab:35: 5a:9d:a8:30:83:db:00:56:a8:79:b1:75:d1:ff:4d: 08:06:11:0a:fb:a2:87:8b:06:5a:f7:2d:2c:3b:b7: 7e:69:5f:03:9a:a9:68:8a:50:0f:be:c6:a2:48:0e: fc:80:f0:21:92:57:7c:a3:ae:3f:3d:3d:27:b2:f3: 51:01:f1:cb:14:b0:c8:71:bb:63:00:c8:28:19:be: 80:83:67:6c:7b:cd:28:f8:8a:35:c9:89:6e:ff:e4: 45:24:70:b8:50:fb:ef:0b:5f:82:08:e5:9c:d1:c7: fd:f7:96:f6:af:07:24:d4:76:76:9a:57:3a:c6:2e: 6e:bc:79:35:72:f5:5d:ac:d0:3a:3c:53:68:58:10: 18:82:cc:bd:25:86:d3:dc:f3:55:91:67:c2:e9:94: 36:16:9f:6b:46:75:9a:08:76:7b:36:38:d7:fc:8b: 90:7c:6b:1b:f5:68:36:a8:00:78:7b:bb:73:ff:1d: 6c:83:e6:9e:da:0e:56:d8:2d:ab:27:28:9e:62:35: a9:05:83:94:cf:83:a2:9d:54:43:3b:e4:0e:5e:ba: 23:5d:c4:0a:4c:12:58:20:23:bb:e0:1c:2f:69:e2: 06:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F7:82:0C:D5:30:C2:D4:64:2F:59:95:50:D5:03:BA:38:EB:27:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4282a368-7979-3ad6-beaf-a9aaa8a9fe3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:7f:75:9b:d4:53:50:bd:04:48:41:f0:e8:be:33:1a:27:4e: 79:ef:25:69:9e:de:53:92:43:40:9d:00:d8:57:db:d9:38:34: 07:5f:af:e8:65:12:2d:3e:35:73:06:4f:40:32:2f:06:bd:a4: b3:32:50:1c:e1:ff:bc:3c:cf:0d:e8:8b:8d:a9:c7:ff:fc:3d: 27:ac:83:bf:3b:b8:ec:f5:db:ec:09:c3:bb:13:4d:c3:9b:55: 5c:30:d4:07:b2:2a:1e:34:78:97:62:4d:ea:78:fa:95:e2:fe: 65:27:d2:ed:39:69:61:be:0a:f8:80:1b:a3:f4:54:cb:8d:a3: c3:50:91:bc:1f:ac:12:36:50:73:9c:71:b7:24:64:20:3c:46: 68:2c:b6:fb:21:03:30:38:ef:20:ca:f1:95:2d:22:51:29:69: 4f:9a:2e:8b:33:48:35:eb:b7:53:e6:a4:e1:06:b6:7e:97:5a: 3b:b6:04:58:a4:4c:9e:ae:da:7c:4a:46:f1:6e:19:14:ea:72: 6b:9f:db:b9:c8:d6:04:a0:8e:c0:8d:77:b0:fe:a2:d2:42:c7: 9a:aa:17:91:e4:63:2a:a0:52:f8:b2:bf:dd:7f:63:21:d0:97: 74:49:7b:31:5a:71:56:f3:d7:4b:58:09:36:d7:f6:b5:d3:cc: e5:1e:de:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JxNnStmlUCLTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NmZiNTI2NTktYTdiNy00YWY2LWE0OGMtNDczOWFkMGJjNjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRkWMPdeLTiOYhcuF4EW9Kysszq5ivPm/jKw qzVanagwg9sAVqh5sXXR/00IBhEK+6KHiwZa9y0sO7d+aV8DmqloilAPvsaiSA78 gPAhkld8o64/PT0nsvNRAfHLFLDIcbtjAMgoGb6Ag2dse80o+Io1yYlu/+RFJHC4 UPvvC1+CCOWc0cf995b2rwck1HZ2mlc6xi5uvHk1cvVdrNA6PFNoWBAYgsy9JYbT 3PNVkWfC6ZQ2Fp9rRnWaCHZ7NjjX/IuQfGsb9Wg2qAB4e7tz/x1sg+ae2g5W2C2r JyieYjWpBYOUz4OinVRDO+QOXrojXcQKTBJYICO74BwvaeIGhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPb3ggzVMMLUZC9ZlVDVA7o46ycmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDI4MmEzNjgtNzk3OS0z YWQ2LWJlYWYtYTlhYWE4YTlmZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9L6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIx/dZvUU1C9BEhB8Oi+MxonTnnvJWme3lOSQ0CdANhX29k4NAdfr+hl Ei0+NXMGT0AyLwa9pLMyUBzh/7w8zw3oi42px//8PSesg787uOz12+wJw7sTTcOb VVww1AeyKh40eJdiTep4+pXi/mUn0u05aWG+CviAG6P0VMuNo8NQkbwfrBI2UHOc cbckZCA8RmgstvshAzA47yDK8ZUtIlEpaU+aLoszSDXrt1PmpOEGtn6XWju2BFik TJ6u2nxKRvFuGRTqcmuf27nI1gSgjsCNd7D+otJCx5qqF5HkYyqgUviyv91/YyHQ l3RJezFacVbz10tYCTbX9rXTzOUe3nY= -----END CERTIFICATE-----Generated at Thu May 8 00:22:40 2025 by rpki-client