$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66fc16e3-395f-3c63-8bcc-a6c6dd4d3249.roa File: 66fc16e3-395f-3c63-8bcc-a6c6dd4d3249.roa (raw, json) Hash identifier: nZNQfTXvsSBIf/ishwoGEXuXB49TTZdztqK12xKFD3Q= Subject key identifier: 55:09:5E:9A:63:CF:40:5F:80:C5:46:DD:E5:EF:31:06:07:27:D7:EB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF66CD0456D844CAA23840 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66fc16e3-395f-3c63-8bcc-a6c6dd4d3249.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 9924 IP address blocks: 23.202.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:66:cd:04:56:d8:44:ca:a2:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=54c6e993-00ee-432d-a644-157e3211a581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ea:a0:20:35:89:7a:d2:1d:59:ab:5a:7b:5f: cd:db:59:10:3e:e9:3b:5b:83:51:f1:05:5e:88:62: 6c:a4:44:0c:8e:7d:d4:c8:c8:3e:15:5a:d7:ae:96: ef:66:e8:2d:ba:54:c1:b3:9b:42:84:77:ea:4e:d8: 14:42:3e:19:da:f8:d0:c5:be:88:52:dd:ec:be:01: fa:a6:02:0d:e1:45:6f:69:db:23:cc:ba:7e:0b:05: e6:ea:ea:83:b5:c0:59:3d:dc:41:48:02:07:54:2f: 55:05:24:32:c4:b9:ac:d6:e9:30:23:ad:e9:2f:28: 04:00:43:19:74:2e:3a:7f:58:44:f8:21:f7:bc:da: 3c:45:93:e3:65:09:44:47:a9:ba:2a:a2:73:2e:95: 59:15:f1:2f:31:ae:02:3d:2b:33:e2:7e:b6:6a:d2: aa:f2:4e:5b:0c:0b:b4:59:56:5e:05:8c:07:df:fa: a3:b1:75:ab:7e:53:7c:f4:06:12:24:c3:79:27:dd: c1:25:aa:57:38:af:b6:f2:5a:75:7e:1c:9c:fa:63: a9:0b:ad:f2:c3:4d:ec:6f:f6:72:86:1f:8f:25:0e: a5:78:50:e1:72:58:b3:62:85:5e:bb:38:d1:75:96: af:9f:14:a4:24:41:84:51:2d:5b:d6:e1:6b:1d:82: d5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:09:5E:9A:63:CF:40:5F:80:C5:46:DD:E5:EF:31:06:07:27:D7:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66fc16e3-395f-3c63-8bcc-a6c6dd4d3249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:e8:2c:1d:e3:14:66:bf:ac:2d:c3:91:36:06:0d:7d:95:08: 3f:1e:12:0f:57:86:ae:91:70:3c:2f:b3:41:4d:3c:e9:a0:4e: 1c:10:b7:cc:d3:2e:10:8d:64:c6:8b:6e:ec:4e:e5:5e:8e:24: 05:be:86:4c:0b:df:82:3f:f4:ea:bc:9b:a5:5e:ab:1f:dc:36: c6:68:d0:4b:19:e7:ff:0d:c4:c4:8b:cb:1e:54:da:34:de:b2: bd:8f:c8:f3:f4:f3:12:1a:1e:bb:f1:71:82:09:0c:5f:18:ff: c0:24:90:90:b0:07:82:ff:71:3b:93:22:71:83:4d:35:be:62: f9:dc:df:76:bc:b2:54:c7:f9:8d:7a:32:6f:ed:84:23:67:e1: b2:73:37:73:38:96:27:48:5b:7d:f6:b1:dc:19:e7:22:7b:e4: 47:0b:da:09:99:e3:59:45:d4:80:6d:da:e3:da:66:1d:05:6f: 1d:d3:49:01:20:ee:af:c9:f2:62:d4:c0:a9:1c:a0:38:a0:25: 37:d9:56:c6:b8:d4:08:f5:21:3c:61:60:c8:1c:e4:63:7c:c4: 27:49:80:66:c4:90:c7:d4:14:09:73:d5:e7:cc:38:3f:5f:bf: f5:8b:b4:25:78:7a:f3:58:fa:34:5d:ca:6a:b1:05:15:3b:b9: 56:01:7b:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz2bNBFbYRMqiOEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk NTRjNmU5OTMtMDBlZS00MzJkLWE2NDQtMTU3ZTMyMTFhNTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuqgIDWJetIdWatae1/N21kQPuk7W4NR8QVe iGJspEQMjn3UyMg+FVrXrpbvZugtulTBs5tChHfqTtgUQj4Z2vjQxb6IUt3svgH6 pgIN4UVvadsjzLp+CwXm6uqDtcBZPdxBSAIHVC9VBSQyxLms1ukwI63pLygEAEMZ dC46f1hE+CH3vNo8RZPjZQlER6m6KqJzLpVZFfEvMa4CPSsz4n62atKq8k5bDAu0 WVZeBYwH3/qjsXWrflN89AYSJMN5J93BJapXOK+28lp1fhyc+mOpC63yw03sb/Zy hh+PJQ6leFDhclizYoVeuzjRdZavnxSkJEGEUS1b1uFrHYLVFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUJXppjz0BfgMVG3eXvMQYHJ9frMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjZmYzE2ZTMtMzk1Zi0z YzYzLThiY2MtYTZjNmRkNGQzMjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8p8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/oLB3jFGa/rC3DkTYGDX2VCD8eEg9Xhq6RcDwvs0FNPOmgThwQt8zT LhCNZMaLbuxO5V6OJAW+hkwL34I/9Oq8m6Veqx/cNsZo0EsZ5/8NxMSLyx5U2jTe sr2PyPP08xIaHrvxcYIJDF8Y/8AkkJCwB4L/cTuTInGDTTW+Yvnc33a8slTH+Y16 Mm/thCNn4bJzN3M4lidIW332sdwZ5yJ75EcL2gmZ41lF1IBt2uPaZh0Fbx3TSQEg 7q/J8mLUwKkcoDigJTfZVsa41Aj1ITxhYMgc5GN8xCdJgGbEkMfUFAlz1efMOD9f v/WLtCV4evNY+jRdymqxBRU7uVYBe2Q= -----END CERTIFICATE-----Generated at Mon May 5 05:03:34 2025 by rpki-client