$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b8a8cda-8690-35a3-9929-fd524c6e5cf9.roa File: 8b8a8cda-8690-35a3-9929-fd524c6e5cf9.roa (raw, json) Hash identifier: 1k4s8NQpht4K5hBfPNNn6QVQeEKfr6V+Y4f0AR1l1jU= Subject key identifier: 07:FB:8D:DC:C9:87:06:53:1C:1B:BF:A0:84:28:D5:A2:41:09:62:45 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498769CFF677863F0C3400B125 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b8a8cda-8690-35a3-9929-fd524c6e5cf9.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.201.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:cf:f6:77:86:3f:0c:34:00:b1:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=855478aa-deec-4d08-a0a9-5f00fdefea7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a4:c0:41:93:ad:47:04:a3:93:bc:38:15:51: bb:9c:e0:43:54:99:b3:fd:30:21:05:dc:4c:77:e6: 6d:13:b6:fc:c9:48:ed:db:4d:51:de:ec:37:63:ba: 2a:6d:c0:d5:79:b3:d1:df:6f:85:84:aa:80:60:a4: 57:23:ba:1b:12:31:50:1f:8e:da:6b:f3:c5:8e:da: 31:d1:a2:a7:8b:71:97:96:11:ba:9b:21:ff:a6:d6: 27:e4:ad:d1:ce:6c:6f:b1:40:cd:01:0d:53:5d:b4: 97:8d:ec:1d:f3:44:18:df:58:4b:53:e8:e2:88:b8: 07:3b:f5:37:41:a5:8b:aa:f1:2f:d3:69:72:41:92: b9:18:92:b8:82:00:90:4c:83:66:f7:5b:f4:60:e0: 31:5b:e5:cd:f0:73:76:5f:0c:ff:bf:50:ea:48:88: 28:a6:6c:a3:94:2a:c5:91:fe:32:11:50:0d:ca:57: d1:e9:b4:c0:42:6d:21:ae:1c:df:94:ca:8e:f3:9a: 44:70:0f:a3:f7:e6:82:3b:a6:32:9b:75:f8:80:87: d2:e3:30:b5:8c:7d:6e:79:1a:8c:44:d8:ed:ba:e5: 50:12:a0:b3:cf:ac:ce:ab:fa:73:78:c8:65:aa:2e: 76:dd:a7:7d:34:03:5c:93:35:35:1c:8b:c9:97:20: 9d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FB:8D:DC:C9:87:06:53:1C:1B:BF:A0:84:28:D5:A2:41:09:62:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b8a8cda-8690-35a3-9929-fd524c6e5cf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:42:0f:94:f9:ac:8d:c0:f1:d6:64:02:6a:2d:b9:9f:a2:0e: 5b:1c:9b:cf:a5:fb:e6:30:8a:e0:30:6b:8a:17:d1:bf:77:81: 99:c5:fc:b0:f9:a9:1f:fc:4c:a0:05:29:a3:86:a7:ac:a9:ce: 21:39:e8:57:89:1f:4a:32:8d:ad:43:3d:02:98:e7:0c:00:41: c9:84:9a:44:34:c9:90:29:93:6c:a2:22:6a:db:e6:53:f0:c7: 27:1b:03:a1:8b:3d:5c:bd:35:d7:3d:bc:97:eb:39:04:ee:49: da:fb:4c:98:0e:0a:fe:e3:36:07:e7:9c:57:1d:48:f9:95:9c: 61:01:d3:d7:be:ad:96:d9:0f:1c:e8:cd:26:c3:6f:76:87:72: a9:ee:41:24:76:67:4d:a2:50:74:5b:0a:18:97:ef:36:51:ea: 54:0e:3f:5b:23:d0:90:f7:ce:9e:63:f7:20:39:9d:96:aa:e0: 3e:bb:7e:4c:a3:79:6a:96:0b:b8:e4:73:d6:24:ba:e8:57:ee: cd:f8:c4:16:c1:7c:0c:dd:d4:fd:ba:f9:1f:c0:b2:1f:9a:82: c9:e2:d3:c3:4a:84:58:bd:3b:a2:1d:94:15:95:ed:32:08:ac: 77:b9:77:c5:50:a4:e2:21:73:4b:52:6a:af:9e:76:a4:46:f1: 1e:64:b2:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHac/2d4Y/DDQAsSUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ODU1NDc4YWEtZGVlYy00ZDA4LWEwYTktNWYwMGZkZWZlYTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKTAQZOtRwSjk7w4FVG7nOBDVJmz/TAhBdxM d+ZtE7b8yUjt201R3uw3Y7oqbcDVebPR32+FhKqAYKRXI7obEjFQH47aa/PFjtox 0aKni3GXlhG6myH/ptYn5K3RzmxvsUDNAQ1TXbSXjewd80QY31hLU+jiiLgHO/U3 QaWLqvEv02lyQZK5GJK4ggCQTINm91v0YOAxW+XN8HN2Xwz/v1DqSIgopmyjlCrF kf4yEVANylfR6bTAQm0hrhzflMqO85pEcA+j9+aCO6Yym3X4gIfS4zC1jH1ueRqM RNjtuuVQEqCzz6zOq/pzeMhlqi523ad9NANckzU1HIvJlyCd3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAf7jdzJhwZTHBu/oIQo1aJBCWJFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGI4YThjZGEtODY5MC0z NWEzLTk5MjktZmQ1MjRjNmU1Y2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8ktMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlCD5T5rI3A8dZkAmotuZ+iDlscm8+l++YwiuAwa4oX0b93gZnF/LD5 qR/8TKAFKaOGp6ypziE56FeJH0oyja1DPQKY5wwAQcmEmkQ0yZApk2yiImrb5lPw xycbA6GLPVy9Ndc9vJfrOQTuSdr7TJgOCv7jNgfnnFcdSPmVnGEB09e+rZbZDxzo zSbDb3aHcqnuQSR2Z02iUHRbChiX7zZR6lQOP1sj0JD3zp5j9yA5nZaq4D67fkyj eWqWC7jkc9YkuuhX7s34xBbBfAzd1P26+R/Ash+agsni08NKhFi9O6IdlBWV7TII rHe5d8VQpOIhc0tSaq+edqRG8R5ksv4= -----END CERTIFICATE-----Generated at Mon May 5 01:57:24 2025 by rpki-client