$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbc8cafd-f1e7-3a53-aa40-ac823708aa68.roa File: dbc8cafd-f1e7-3a53-aa40-ac823708aa68.roa (raw, json) Hash identifier: QbUxpY5ks3y5Chve+B8kQ1N95qOkEiK1y5BJ81Ggydc= Subject key identifier: 37:E8:0D:6E:C0:40:CE:53:7C:45:09:94:AF:13:77:E9:9E:B0:69:4B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF49B73B6F2CE0DA4901500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbc8cafd-f1e7-3a53-aa40-ac823708aa68.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.210.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:9b:73:b6:f2:ce:0d:a4:90:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=f398313d-6a0b-48bf-9289-db805c5726fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:eb:b7:f4:2f:f3:62:df:17:bc:1d:04:e7:b7: 7f:1b:1b:8d:97:98:f3:83:92:8e:0d:5b:78:b3:a7: e8:4a:7e:7d:a5:d5:da:5f:86:0f:37:f9:ac:98:c6: f6:00:0c:cf:14:4d:47:e9:8d:9f:18:cf:2a:2a:fe: 1e:9f:b3:68:60:7e:bb:9e:6c:ce:97:cc:08:17:98: 0a:c2:84:e2:3a:05:60:3e:e9:0f:92:db:b7:f5:3c: a3:ad:fc:b5:93:c2:0f:2f:c3:d5:ad:45:69:2f:b0: 15:84:ac:b7:13:20:9a:bb:32:3c:b4:d0:d0:c2:c4: 05:34:a7:5d:2e:ab:f9:42:80:26:70:32:38:05:42: 6c:d8:67:1c:43:e1:d3:d3:95:2f:72:32:18:77:89: d1:a4:94:c9:56:bd:7c:04:54:ed:3f:bc:32:40:4e: ba:86:4a:b6:27:52:2d:db:10:f7:ea:7d:ea:be:07: 90:46:f4:e9:89:fb:1d:1d:09:c4:54:0d:54:da:e7: 2b:6f:47:ce:d2:6f:2a:b4:7b:0a:71:c2:41:e4:40: 4a:37:55:9d:43:18:9c:c4:63:6d:a5:26:da:11:07: 9f:a6:f3:45:71:e2:d5:5f:c8:a6:28:d0:12:ae:df: cf:de:a0:15:fd:b7:dc:81:ea:84:35:0c:53:a6:0b: f3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E8:0D:6E:C0:40:CE:53:7C:45:09:94:AF:13:77:E9:9E:B0:69:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbc8cafd-f1e7-3a53-aa40-ac823708aa68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:b1:2c:0b:90:ae:2c:0d:2a:80:31:e4:44:f5:c3:67:87:d6: 07:3a:d2:e6:4c:91:8f:4d:ea:98:8a:3f:db:9e:74:9d:4d:2b: c6:7d:f9:95:2c:f1:28:2a:8a:64:3b:92:29:10:10:1d:d7:5e: 79:ef:a5:49:5e:35:55:03:d0:2d:03:94:96:f0:00:f3:68:18: a1:dc:2b:12:36:65:b5:23:94:02:a1:9b:2b:f7:56:9c:63:74: c5:8e:e0:a5:67:a0:8e:3f:65:32:1d:8c:68:db:91:74:d6:7a: 34:af:76:4a:4d:ff:ab:9d:2f:83:00:61:73:d9:a3:5f:bc:69: 22:3c:73:92:61:c0:c8:c5:bf:e6:05:08:8c:7a:84:2f:1f:a2: 8b:fb:34:1c:9b:32:a9:87:a8:f7:7f:a2:52:c9:1a:f4:a5:ee: 87:1a:8b:d9:9f:62:60:3d:4d:f9:71:fa:f2:eb:25:7d:a8:e4: 5f:f1:fd:07:ae:8b:7e:f4:26:08:49:c5:fc:86:b7:0a:61:57: 67:61:2f:cd:62:94:a2:22:89:8d:b9:9c:9a:43:d3:42:7d:88: a5:ac:9f:17:5d:e2:cc:45:54:36:e8:33:05:33:44:bf:c4:f6: 9d:18:6c:24:63:84:e6:e7:47:07:5a:a6:5d:70:cf:69:4b:d1: c5:bf:b7:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JtztvLODaSQFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZjM5ODMxM2QtNmEwYi00OGJmLTkyODktZGI4MDVjNTcyNmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheu39C/zYt8XvB0E57d/GxuNl5jzg5KODVt4 s6foSn59pdXaX4YPN/msmMb2AAzPFE1H6Y2fGM8qKv4en7NoYH67nmzOl8wIF5gK woTiOgVgPukPktu39Tyjrfy1k8IPL8PVrUVpL7AVhKy3EyCauzI8tNDQwsQFNKdd Lqv5QoAmcDI4BUJs2GccQ+HT05UvcjIYd4nRpJTJVr18BFTtP7wyQE66hkq2J1It 2xD36n3qvgeQRvTpifsdHQnEVA1U2ucrb0fO0m8qtHsKccJB5EBKN1WdQxicxGNt pSbaEQefpvNFceLVX8imKNASrt/P3qAV/bfcgeqENQxTpgvz1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfoDW7AQM5TfEUJlK8Td+mesGlLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGJjOGNhZmQtZjFlNy0z YTUzLWFhNDAtYWM4MjM3MDhhYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9KwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+xLAuQriwNKoAx5ET1w2eH1gc60uZMkY9N6piKP9uedJ1NK8Z9+ZUs 8SgqimQ7kikQEB3XXnnvpUleNVUD0C0DlJbwAPNoGKHcKxI2ZbUjlAKhmyv3Vpxj dMWO4KVnoI4/ZTIdjGjbkXTWejSvdkpN/6udL4MAYXPZo1+8aSI8c5JhwMjFv+YF CIx6hC8foov7NBybMqmHqPd/olLJGvSl7ocai9mfYmA9Tflx+vLrJX2o5F/x/Qeu i370JghJxfyGtwphV2dhL81ilKIiiY25nJpD00J9iKWsnxdd4sxFVDboMwUzRL/E 9p0YbCRjhObnRwdapl1wz2lL0cW/t1U= -----END CERTIFICATE-----Generated at Mon May 5 01:54:27 2025 by rpki-client