$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a186bc38-5602-308a-98b1-e05c95d95a2f.roa File: a186bc38-5602-308a-98b1-e05c95d95a2f.roa (raw, json) Hash identifier: +QresYASViHr3R7E54JzaEBxeM6S7FA/ibU8CH2Kzow= Subject key identifier: 0B:7E:90:A3:33:13:00:84:22:0A:6C:87:1A:D5:2A:53:B6:4C:E7:BF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498339F87505BB2BF5F623DE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a186bc38-5602-308a-98b1-e05c95d95a2f.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.194.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:f8:75:05:bb:2b:f5:f6:23:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=f104e20f-2298-421c-83e4-3cde41c2d85e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:de:51:6e:82:21:e7:4a:c7:77:00:1e:a5: 2a:d5:5f:3c:35:82:d8:73:c2:25:47:ff:76:09:3a: e6:ec:32:a4:d9:f4:95:e5:8e:ac:27:71:b3:d4:c6: 22:ad:db:c6:1d:5f:16:e5:b5:07:e6:58:45:ad:e1: 2e:94:cd:a8:b0:29:b7:3d:90:57:bf:80:6c:9d:44: 14:6c:10:b2:e9:6b:28:66:7f:c1:aa:af:bd:f1:29: 42:52:78:6e:bf:3e:a4:6c:37:25:70:79:e8:19:11: f4:5f:e4:42:83:8b:ec:fa:d3:52:b4:ea:75:0a:99: 44:bf:e5:51:e5:ef:ad:5b:7b:44:99:67:b1:ca:82: 3f:80:4b:cf:a6:5f:1b:b7:52:91:ba:11:c2:20:03: 50:56:0e:ce:e1:b7:22:16:7f:d1:99:9c:52:52:7e: 62:c8:c2:65:a5:52:af:de:9d:42:29:73:90:46:95: 2c:a0:83:9a:68:2d:35:34:3c:3b:50:8e:06:a9:38: a2:67:70:5a:96:46:94:36:78:c9:20:a1:a4:1b:8e: 05:45:20:79:86:fd:fc:b7:44:7f:9f:86:19:d5:5b: 9a:f0:71:c2:6c:bd:94:49:c7:28:49:98:23:91:d3: da:dd:13:d2:56:f6:86:5f:31:b6:44:23:15:c8:04: 7e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:7E:90:A3:33:13:00:84:22:0A:6C:87:1A:D5:2A:53:B6:4C:E7:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a186bc38-5602-308a-98b1-e05c95d95a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:b2:bf:a2:5d:56:4b:19:0c:0a:b2:a3:21:6b:10:7c:0f:7b: 27:81:60:dc:44:e1:96:47:b1:36:dc:76:e9:a1:95:02:96:37: 31:07:0b:08:d3:7d:5c:33:04:0b:50:68:2a:88:75:77:ea:2d: 3f:bc:37:2c:e6:0d:e5:71:18:f0:1c:45:07:22:90:72:e7:48: 91:6f:50:05:0d:a9:2f:02:45:59:26:fc:5d:31:b0:36:ec:ae: d0:f3:de:87:de:90:15:97:31:d5:40:9d:f7:f2:84:e1:68:f7: b1:cd:c6:f6:8f:30:c5:bb:25:6e:51:67:17:63:42:58:b6:26: 27:24:a5:3c:f7:33:c8:56:65:8c:fe:f4:9f:1e:ad:fc:99:b4: 75:49:74:5b:94:12:5e:a6:f6:94:db:cd:e3:09:1c:2a:6d:6b: da:a0:94:d7:67:8f:e9:57:79:65:b7:f7:87:31:d8:bd:04:ea: aa:01:00:26:07:29:81:10:38:06:a2:3a:ad:1e:5b:8a:67:0d: 98:07:7d:0d:7c:6c:cf:44:d7:b5:cd:0c:6a:cd:77:87:14:2f: 5b:8b:43:db:3b:c1:d3:ab:bf:85:68:f7:d6:6a:b0:71:93:cd: 9e:df:f2:50:f6:d8:b9:de:ab:d3:51:d4:61:1e:f4:50:b5:ce: ce:89:b8:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOfh1Bbsr9fYj3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk ZjEwNGUyMGYtMjI5OC00MjFjLTgzZTQtM2NkZTQxYzJkODVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0XeUW6CIedKx3cAHqUq1V88NYLYc8IlR/92 CTrm7DKk2fSV5Y6sJ3Gz1MYirdvGHV8W5bUH5lhFreEulM2osCm3PZBXv4BsnUQU bBCy6WsoZn/Bqq+98SlCUnhuvz6kbDclcHnoGRH0X+RCg4vs+tNStOp1CplEv+VR 5e+tW3tEmWexyoI/gEvPpl8bt1KRuhHCIANQVg7O4bciFn/RmZxSUn5iyMJlpVKv 3p1CKXOQRpUsoIOaaC01NDw7UI4GqTiiZ3BalkaUNnjJIKGkG44FRSB5hv38t0R/ n4YZ1Vua8HHCbL2USccoSZgjkdPa3RPSVvaGXzG2RCMVyAR+gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAt+kKMzEwCEIgpshxrVKlO2TOe/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTE4NmJjMzgtNTYwMi0z MDhhLTk4YjEtZTA1Yzk1ZDk1YTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8J0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+yv6JdVksZDAqyoyFrEHwPeyeBYNxE4ZZHsTbcdumhlQKWNzEHCwjT fVwzBAtQaCqIdXfqLT+8NyzmDeVxGPAcRQcikHLnSJFvUAUNqS8CRVkm/F0xsDbs rtDz3ofekBWXMdVAnffyhOFo97HNxvaPMMW7JW5RZxdjQli2JickpTz3M8hWZYz+ 9J8erfyZtHVJdFuUEl6m9pTbzeMJHCpta9qglNdnj+lXeWW394cx2L0E6qoBACYH KYEQOAaiOq0eW4pnDZgHfQ18bM9E17XNDGrNd4cUL1uLQ9s7wdOrv4Vo99ZqsHGT zZ7f8lD22Lneq9NR1GEe9FC1zs6JuO0= -----END CERTIFICATE-----Generated at Wed May 7 16:38:25 2025 by rpki-client