$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ba4bfd6-28e5-396e-b191-fd18eb22724b.roa File: 4ba4bfd6-28e5-396e-b191-fd18eb22724b.roa (raw, json) Hash identifier: 3TFKUzdaQZVjPctbgumNyVJhDu0yLMl4jNqxRT+sAlg= Subject key identifier: 94:D2:98:B9:0D:5F:08:B7:9B:2E:90:3B:AA:35:23:B6:4D:73:09:A8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498769BEC41638117E9A9850C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ba4bfd6-28e5-396e-b191-fd18eb22724b.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.200.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:be:c4:16:38:11:7e:9a:98:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=411c9baa-29eb-4551-a531-408d6aaa7d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f5:9a:6e:16:b8:9a:a0:2e:9e:b6:fb:15:1b: 1e:4d:96:ba:e1:9c:e2:4f:90:c4:3c:aa:ad:71:3a: bc:b6:22:c9:98:9f:29:63:f3:b7:8a:b7:f0:95:07: 7a:18:37:76:ec:43:5e:c0:ed:20:8c:f5:de:4c:91: 94:6a:12:56:13:36:0b:d8:b5:0b:a7:9a:35:83:56: e0:f7:e2:05:8f:91:c1:b1:a4:8a:26:7b:d1:d2:82: c4:39:33:fd:de:62:d5:80:36:2c:4c:31:74:fb:70: 3c:ce:e5:9e:2f:06:2a:38:c7:0d:88:af:6d:fa:f6: ca:74:d0:ec:50:1a:0d:d1:cc:b6:f6:90:19:6c:51: 36:76:b1:8b:65:bd:81:27:68:79:c5:9f:c9:b7:9f: ec:6a:9f:52:d0:85:18:d9:a3:42:24:33:4f:ec:90: de:7a:bd:8c:c4:23:b4:89:d6:31:c6:f3:53:11:c6: 41:83:22:c6:62:b1:7c:56:46:d2:1f:fb:bd:05:89: ff:2d:cc:91:dd:88:94:14:bb:cb:0d:2e:c4:7f:43: e1:e7:4b:71:e7:6c:d2:9b:e5:29:6e:af:fb:ca:ec: d7:1f:a6:fe:14:bd:99:d6:5d:14:d5:89:ef:51:d5: cd:87:2b:b8:04:7c:7f:4b:04:7a:05:d0:07:10:f3: 00:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D2:98:B9:0D:5F:08:B7:9B:2E:90:3B:AA:35:23:B6:4D:73:09:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ba4bfd6-28e5-396e-b191-fd18eb22724b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:19:34:1a:f6:2a:fb:d8:c2:32:fc:e7:05:7e:12:ec:81:af: 1c:3a:5e:7e:e1:e5:c9:c0:50:d5:c8:5a:80:25:77:ee:d4:64: 64:98:9b:2d:76:89:d9:a8:f3:b4:bb:98:74:aa:d8:ef:b4:9a: 47:53:a6:28:c6:aa:76:74:fb:74:9c:97:4b:45:4b:85:95:c3: 44:2c:ae:7e:18:a3:f0:21:ad:dd:c4:2e:bd:0d:68:2d:13:aa: ca:49:9f:23:11:00:9c:e6:9b:2d:1a:2a:2b:62:b5:1b:12:cb: 9f:68:c5:eb:27:29:57:74:61:b6:11:f1:6c:cf:99:7a:98:70: 58:ce:1c:61:6d:0d:b9:b2:1a:4d:b8:87:e3:6c:88:bf:d4:1b: ef:cf:7c:b2:1d:60:d5:a3:c3:61:c6:76:38:06:85:b1:6e:19: 62:de:a6:18:91:dd:d6:be:44:7f:0d:3a:45:fc:cc:fb:50:04: 85:2b:ba:c1:81:cb:08:d8:89:0f:9d:1a:d6:94:ae:da:7c:ae: 56:0f:cf:c1:f9:14:29:a7:1c:31:21:67:bb:ef:1e:5e:7e:3b: ce:b5:82:23:41:24:b4:2c:7a:80:4b:90:bb:79:95:b0:9b:d2: a3:48:6b:31:77:c3:c7:53:29:c2:cc:3f:90:b3:c4:1b:43:be: 84:d1:4d:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHab7EFjgRfpqYUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk NDExYzliYWEtMjllYi00NTUxLWE1MzEtNDA4ZDZhYWE3ZDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfWabha4mqAunrb7FRseTZa64ZziT5DEPKqt cTq8tiLJmJ8pY/O3irfwlQd6GDd27ENewO0gjPXeTJGUahJWEzYL2LULp5o1g1bg 9+IFj5HBsaSKJnvR0oLEOTP93mLVgDYsTDF0+3A8zuWeLwYqOMcNiK9t+vbKdNDs UBoN0cy29pAZbFE2drGLZb2BJ2h5xZ/Jt5/sap9S0IUY2aNCJDNP7JDeer2MxCO0 idYxxvNTEcZBgyLGYrF8VkbSH/u9BYn/LcyR3YiUFLvLDS7Ef0Ph50tx52zSm+Up bq/7yuzXH6b+FL2Z1l0U1YnvUdXNhyu4BHx/SwR6BdAHEPMAwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTSmLkNXwi3my6QO6o1I7ZNcwmoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGJhNGJmZDYtMjhlNS0z OTZlLWIxOTEtZmQxOGViMjI3MjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8ghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8ZNBr2KvvYwjL85wV+EuyBrxw6Xn7h5cnAUNXIWoAld+7UZGSYmy12 idmo87S7mHSq2O+0mkdTpijGqnZ0+3Scl0tFS4WVw0Qsrn4Yo/Ahrd3ELr0NaC0T qspJnyMRAJzmmy0aKititRsSy59oxesnKVd0YbYR8WzPmXqYcFjOHGFtDbmyGk24 h+NsiL/UG+/PfLIdYNWjw2HGdjgGhbFuGWLephiR3da+RH8NOkX8zPtQBIUrusGB ywjYiQ+dGtaUrtp8rlYPz8H5FCmnHDEhZ7vvHl5+O861giNBJLQseoBLkLt5lbCb 0qNIazF3w8dTKcLMP5CzxBtDvoTRTXY= -----END CERTIFICATE-----Generated at Mon May 5 14:32:35 2025 by rpki-client