$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9561cbb5-46d4-351e-95d3-273fb0129542.roa File: 9561cbb5-46d4-351e-95d3-273fb0129542.roa (raw, json) Hash identifier: KIW8MyPrLgXnT40y5ME63lm7Rwdt2vT6pYTYfcp1CyQ= Subject key identifier: A1:9C:E3:F5:83:F4:D9:29:23:1C:A3:1C:8D:27:EE:BC:63:B3:AB:5B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498339FAB885F166E366036F40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9561cbb5-46d4-351e-95d3-273fb0129542.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.195.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:fa:b8:85:f1:66:e3:66:03:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=12e2bbdf-6044-4df9-b402-6d6e29e80abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:57:e4:79:ce:55:1c:2c:08:ad:47:56:db: df:3d:b0:59:05:35:bd:23:4e:b2:8c:97:90:b0:9b: 1a:df:f5:91:f4:e3:f0:9d:b6:79:b6:db:a9:bf:31: f4:59:7d:1f:ad:b0:04:5d:51:d8:ee:68:29:35:b1: 75:f7:62:61:13:d8:65:f2:6b:09:fd:65:b7:1d:a7: 31:35:35:61:14:d2:c4:f7:d1:67:53:df:59:24:0b: 48:d2:04:d5:cc:66:64:54:ce:8f:34:0f:28:40:c2: 01:37:e1:c5:56:1a:cd:46:f8:3e:6e:aa:7c:22:be: 14:68:cb:5d:96:d6:8b:4a:7b:4f:4a:28:85:3b:7d: 17:e2:af:ab:1d:e4:ad:cc:ba:83:6d:22:02:21:d7: 8d:43:d4:9c:62:61:12:ae:3c:01:7b:9e:cb:e7:aa: 71:23:9d:41:11:78:25:0a:a1:fe:39:dd:4d:67:65: b0:35:06:69:3f:cf:24:87:d1:c9:bc:f9:a1:3a:a0: a6:62:75:43:ba:97:1a:41:5a:c8:70:87:b1:00:15: d4:88:14:91:9f:39:2d:e3:b4:a4:bf:df:0c:ac:e2: 44:98:0f:2e:cc:ad:b9:ea:65:f3:ca:52:23:44:53: 37:47:e6:2c:72:62:56:07:ce:41:42:36:d1:4f:0b: f2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9C:E3:F5:83:F4:D9:29:23:1C:A3:1C:8D:27:EE:BC:63:B3:AB:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9561cbb5-46d4-351e-95d3-273fb0129542.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:6f:f6:be:f5:3e:ef:d3:00:51:5d:4c:81:f7:4c:15:be:24: 7e:47:68:d4:48:50:46:2c:d9:f7:84:9d:33:5c:99:9d:74:66: b8:b8:2a:d2:6a:f5:d5:07:2f:27:06:d1:5e:69:73:81:6c:09: 77:b5:78:b5:5b:12:46:ee:65:6e:88:24:09:8b:8c:27:e6:7e: db:b4:14:18:12:d5:d2:21:bb:fe:fc:1f:42:77:4e:84:4b:a6: 5a:da:a2:82:eb:04:d2:7b:a2:8d:aa:de:c3:25:75:d0:f1:e5: 24:71:9b:d8:91:7b:29:ae:74:cf:f9:33:2c:9f:a2:dc:e7:87: 89:c0:32:ea:ae:f2:53:7e:5c:b0:50:f2:15:7c:54:38:37:03: f7:17:b0:44:cd:d6:f1:98:81:1b:5f:35:9b:cc:5f:40:d0:1a: 42:9a:92:c2:d1:4f:4b:cc:d3:80:ff:48:09:eb:8c:8b:84:62: 37:8c:a1:f9:c9:c5:16:ca:1c:25:6e:23:78:48:cd:e1:d0:75: b1:af:38:6d:3d:ca:b7:8d:70:b6:7b:40:5d:c3:dd:35:72:10: 87:11:92:aa:6b:47:7e:2b:13:6e:ba:88:90:38:11:c2:0f:53: df:80:5b:8f:01:38:0a:1f:70:1c:98:b4:69:70:3d:3a:c8:e8: 9d:9e:68:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOfq4hfFm42YDb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk MTJlMmJiZGYtNjA0NC00ZGY5LWI0MDItNmQ2ZTI5ZTgwYWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmJX5HnOVRwsCK1HVtvfPbBZBTW9I06yjJeQ sJsa3/WR9OPwnbZ5ttupvzH0WX0frbAEXVHY7mgpNbF192JhE9hl8msJ/WW3Hacx NTVhFNLE99FnU99ZJAtI0gTVzGZkVM6PNA8oQMIBN+HFVhrNRvg+bqp8Ir4UaMtd ltaLSntPSiiFO30X4q+rHeStzLqDbSICIdeNQ9ScYmESrjwBe57L56pxI51BEXgl CqH+Od1NZ2WwNQZpP88kh9HJvPmhOqCmYnVDupcaQVrIcIexABXUiBSRnzkt47Sk v98MrOJEmA8uzK256mXzylIjRFM3R+YscmJWB85BQjbRTwvy3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGc4/WD9NkpIxyjHI0n7rxjs6tbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTU2MWNiYjUtNDZkNC0z NTFlLTk1ZDMtMjczZmIwMTI5NTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8OAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJv9r71Pu/TAFFdTIH3TBW+JH5HaNRIUEYs2feEnTNcmZ10Zri4KtJq 9dUHLycG0V5pc4FsCXe1eLVbEkbuZW6IJAmLjCfmftu0FBgS1dIhu/78H0J3ToRL plraooLrBNJ7oo2q3sMlddDx5SRxm9iReymudM/5Myyfotznh4nAMuqu8lN+XLBQ 8hV8VDg3A/cXsETN1vGYgRtfNZvMX0DQGkKaksLRT0vM04D/SAnrjIuEYjeMofnJ xRbKHCVuI3hIzeHQdbGvOG09yreNcLZ7QF3D3TVyEIcRkqprR34rE266iJA4EcIP U9+AW48BOAofcByYtGlwPTrI6J2eaAw= -----END CERTIFICATE-----Generated at Fri May 9 20:54:38 2025 by rpki-client