$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9375be63-64c5-3e6f-94e4-a50f7049c682.roa File: 9375be63-64c5-3e6f-94e4-a50f7049c682.roa (raw, json) Hash identifier: sVpjAN8NtZboyMuDaHOVQ1HZHpLXAg+uXfEAR2zrslg= Subject key identifier: D5:66:39:F0:F7:D9:45:8B:62:7D:4C:18:63:FE:39:07:62:F2:55:5A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849833A0E7A4F39EDDA3D1A9060 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9375be63-64c5-3e6f-94e4-a50f7049c682.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 7713 IP address blocks: 23.195.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:3a:0e:7a:4f:39:ed:da:3d:1a:90:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=4dba29fd-9943-40a0-9d4c-94f80c5bd351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:72:cc:5d:bb:ef:73:75:80:14:3f:63:53:56: 27:69:68:cd:e9:92:e1:65:b8:aa:4d:c6:3e:68:7c: 3d:12:94:6a:e0:0c:17:cb:36:5c:65:0f:1c:d9:c0: 7a:e9:a6:f6:84:ec:a5:7e:b0:2c:8e:7b:73:1b:2a: 42:5e:21:b3:b8:c1:3d:76:b2:e8:83:9c:52:ac:b8: d6:7d:d3:24:ad:01:3b:ba:bb:1a:26:70:ac:76:0a: 58:f7:c4:e8:10:f3:88:2d:d2:85:9c:b2:85:30:5f: 46:62:d1:f9:c5:79:1b:4b:57:1d:7f:58:28:6c:ec: 65:c9:e4:28:d6:4c:0b:00:fe:0f:93:e5:d6:1e:28: 8d:05:f5:65:fa:08:6f:de:9b:22:bf:68:cc:02:82: 43:2e:81:e1:9c:70:9c:03:86:54:59:35:7b:f9:4b: 5f:27:09:d4:bc:e5:c8:1c:a3:75:4d:ec:7f:fd:23: 37:ef:b6:7a:50:d6:93:4b:5d:9c:93:32:e9:c5:48: 2f:e9:f5:1f:44:90:0a:ae:47:44:fe:d9:29:af:79: f2:39:a2:a9:27:fd:88:c3:73:4d:66:aa:ec:5f:84: ff:63:67:69:c0:89:14:cd:db:8e:59:7b:a1:70:c8: 7b:a3:aa:a7:e2:68:62:30:19:bf:17:b4:49:18:f1: 4b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:66:39:F0:F7:D9:45:8B:62:7D:4C:18:63:FE:39:07:62:F2:55:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9375be63-64c5-3e6f-94e4-a50f7049c682.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:11:ea:b3:57:3e:36:aa:cd:c3:b9:6b:92:48:0d:da:12:1e: 36:6e:2c:20:57:f5:05:0e:97:74:91:c5:67:70:4b:ac:40:7f: 7f:b5:89:08:a2:07:73:97:eb:37:c5:8b:82:15:07:2d:32:02: cf:e8:63:4e:9c:5b:d1:f9:48:97:7c:bd:24:94:d8:82:51:1b: 33:39:5a:13:35:ea:e8:fa:31:c2:18:34:34:ff:a5:eb:be:38: fb:be:aa:bf:ae:e3:93:eb:d2:2f:71:1a:54:48:af:c6:11:6b: fd:2d:68:ae:09:b9:67:cb:b0:73:05:26:77:e2:50:99:8d:db: de:9b:53:6b:db:38:81:a2:1b:c4:45:f9:32:f1:19:81:a7:c5: f4:f8:94:e5:7a:71:0f:c4:67:97:b9:a4:fa:ed:65:38:74:25: e6:db:7e:bb:05:a6:aa:83:a3:a3:14:45:42:0f:44:0b:6e:c6: a9:b4:7c:f2:65:17:02:fd:59:1d:cc:12:5d:dc:18:5c:95:23: aa:23:89:49:8c:82:4a:d3:36:1e:94:c0:cc:3e:54:af:f0:af: 04:25:da:5b:ae:2e:d7:23:5f:f2:3e:e3:2d:ca:b8:c5:a8:cd: 3b:61:ba:58:17:2a:7d:69:ab:63:8d:9f:38:f2:c9:7d:42:95: 6d:c8:5e:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOg56Tznt2j0akGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk NGRiYTI5ZmQtOTk0My00MGEwLTlkNGMtOTRmODBjNWJkMzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnLMXbvvc3WAFD9jU1YnaWjN6ZLhZbiqTcY+ aHw9EpRq4AwXyzZcZQ8c2cB66ab2hOylfrAsjntzGypCXiGzuME9drLog5xSrLjW fdMkrQE7ursaJnCsdgpY98ToEPOILdKFnLKFMF9GYtH5xXkbS1cdf1gobOxlyeQo 1kwLAP4Pk+XWHiiNBfVl+ghv3psiv2jMAoJDLoHhnHCcA4ZUWTV7+UtfJwnUvOXI HKN1Tex//SM377Z6UNaTS12ckzLpxUgv6fUfRJAKrkdE/tkpr3nyOaKpJ/2Iw3NN ZqrsX4T/Y2dpwIkUzduOWXuhcMh7o6qn4mhiMBm/F7RJGPFLzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVmOfD32UWLYn1MGGP+OQdi8lVaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTM3NWJlNjMtNjRjNS0z ZTZmLTk0ZTQtYTUwZjcwNDljNjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8PwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgR6rNXPjaqzcO5a5JIDdoSHjZuLCBX9QUOl3SRxWdwS6xAf3+1iQii B3OX6zfFi4IVBy0yAs/oY06cW9H5SJd8vSSU2IJRGzM5WhM16uj6McIYNDT/peu+ OPu+qr+u45Pr0i9xGlRIr8YRa/0taK4JuWfLsHMFJnfiUJmN296bU2vbOIGiG8RF +TLxGYGnxfT4lOV6cQ/EZ5e5pPrtZTh0JebbfrsFpqqDo6MURUIPRAtuxqm0fPJl FwL9WR3MEl3cGFyVI6ojiUmMgkrTNh6UwMw+VK/wrwQl2luuLtcjX/I+4y3KuMWo zTthulgXKn1pq2ONnzjyyX1ClW3IXl8= -----END CERTIFICATE-----Generated at Mon May 5 06:28:44 2025 by rpki-client