$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5448a240-83e8-32ee-8db0-e26396fb2b3f.roa File: 5448a240-83e8-32ee-8db0-e26396fb2b3f.roa (raw, json) Hash identifier: YVDjlmpnd4p9/Of2acL2zIo9Z3ErYxFDZhUJ9KMrqZk= Subject key identifier: 66:09:A4:48:9C:16:30:92:CD:54:7E:5B:C2:9B:3E:AF:35:5E:BF:BA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498339F85D300F615CCD5AE600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5448a240-83e8-32ee-8db0-e26396fb2b3f.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16625 IP address blocks: 23.194.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:f8:5d:30:0f:61:5c:cd:5a:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=a4f3c49d-2bdc-43b8-94cd-182ef92b9025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:79:a2:70:f3:a1:73:2b:50:28:4b:6c:8e:36: a1:62:44:f0:2a:c9:2e:71:a2:41:01:db:ee:d2:cb: 38:b9:58:83:09:39:86:12:8c:30:36:8f:9b:19:f6: e6:d2:0b:d0:51:8c:97:ae:3e:87:6b:e5:a3:bb:a6: 18:c7:06:6a:e0:6e:dc:6f:ff:ce:b8:2e:46:6c:5b: a8:71:db:8a:7e:68:c4:46:67:c4:fd:98:86:33:9a: c3:b1:8b:95:7b:22:85:02:6a:25:56:2f:c9:c9:0f: d1:d4:8a:03:d6:30:78:4a:53:5c:7f:69:3d:4c:1b: c9:99:5f:11:b2:09:16:26:13:75:26:5e:28:a2:73: 22:95:30:70:10:83:f1:c1:18:0b:26:62:45:56:0d: d0:0b:36:0f:61:ed:1e:54:ef:42:b4:b8:32:84:4a: 19:3a:30:fd:ab:b9:0f:1a:92:58:27:25:b8:c7:2c: d1:a6:69:b1:2d:87:b7:a9:32:49:e4:41:89:97:79: d5:b3:ea:fc:78:02:76:55:95:3b:02:5c:aa:25:4c: 3b:13:1e:68:f1:56:37:1d:e0:d1:63:5c:7d:db:a2: 8f:39:78:f9:91:fd:cf:4e:5c:77:3d:29:5c:d3:66: 2f:73:96:c7:46:92:d3:ac:f7:4f:54:54:3d:c6:19: f2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:09:A4:48:9C:16:30:92:CD:54:7E:5B:C2:9B:3E:AF:35:5E:BF:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5448a240-83e8-32ee-8db0-e26396fb2b3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ca:34:ea:c1:9d:26:d3:ea:fd:8d:3c:de:51:0c:c3:86:41: 13:02:2f:b5:f2:d8:37:7f:f8:03:6b:96:a9:23:eb:02:9b:91: 7f:80:5b:d5:90:2c:90:74:f2:0a:98:e6:37:9b:58:13:ae:55: 3c:72:ac:19:d7:54:03:94:85:ed:51:f5:67:73:ce:8c:ea:f4: bc:2e:ba:b6:49:38:17:17:5b:ce:74:db:ec:3b:20:8c:7b:2a: aa:d2:8c:da:1b:33:8c:36:1e:8b:82:ac:23:15:ff:87:cf:b1: b7:d9:27:39:8d:42:40:c0:91:48:ef:c3:50:05:4b:75:7d:f5: 0f:a0:42:0e:2f:57:83:bf:14:b1:13:d9:68:f0:f0:12:22:6a: 56:e4:18:b8:13:01:86:d5:2f:66:7f:53:50:1e:85:9e:dc:09: 24:04:f9:f0:88:39:43:d5:5d:fa:8f:01:bb:5f:74:cf:f0:c8: ec:55:9d:00:20:50:89:86:aa:9f:81:e4:26:2b:a2:9c:c0:f3: 94:4d:f5:7f:de:f7:2a:6b:2d:d5:4e:8a:22:3b:ff:15:ef:70: c4:4b:26:0e:08:72:a5:4f:98:1c:03:5c:67:61:74:d3:67:ad: c9:a1:ff:b1:9b:82:0b:4d:13:74:c9:e4:2a:35:5d:c5:9c:a2: 70:43:7f:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOfhdMA9hXM1a5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk YTRmM2M0OWQtMmJkYy00M2I4LTk0Y2QtMTgyZWY5MmI5MDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXmicPOhcytQKEtsjjahYkTwKskucaJBAdvu 0ss4uViDCTmGEowwNo+bGfbm0gvQUYyXrj6Ha+Wju6YYxwZq4G7cb//OuC5GbFuo cduKfmjERmfE/ZiGM5rDsYuVeyKFAmolVi/JyQ/R1IoD1jB4SlNcf2k9TBvJmV8R sgkWJhN1Jl4oonMilTBwEIPxwRgLJmJFVg3QCzYPYe0eVO9CtLgyhEoZOjD9q7kP GpJYJyW4xyzRpmmxLYe3qTJJ5EGJl3nVs+r8eAJ2VZU7AlyqJUw7Ex5o8VY3HeDR Y1x926KPOXj5kf3PTlx3PSlc02Yvc5bHRpLTrPdPVFQ9xhnyHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYJpEicFjCSzVR+W8KbPq81Xr+6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTQ0OGEyNDAtODNlOC0z MmVlLThkYjAtZTI2Mzk2ZmIyYjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8JsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHKNOrBnSbT6v2NPN5RDMOGQRMCL7Xy2Dd/+ANrlqkj6wKbkX+AW9WQ LJB08gqY5jebWBOuVTxyrBnXVAOUhe1R9Wdzzozq9LwuurZJOBcXW8502+w7IIx7 KqrSjNobM4w2HouCrCMV/4fPsbfZJzmNQkDAkUjvw1AFS3V99Q+gQg4vV4O/FLET 2Wjw8BIialbkGLgTAYbVL2Z/U1AehZ7cCSQE+fCIOUPVXfqPAbtfdM/wyOxVnQAg UImGqp+B5CYropzA85RN9X/e9yprLdVOiiI7/xXvcMRLJg4IcqVPmBwDXGdhdNNn rcmh/7GbggtNE3TJ5Co1XcWconBDf4k= -----END CERTIFICATE-----Generated at Mon May 5 02:42:42 2025 by rpki-client