$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de597d2b-33ca-34a0-b718-8db731301d6d.roa File: de597d2b-33ca-34a0-b718-8db731301d6d.roa (raw, json) Hash identifier: qshMJhTnLdF1fxTSdLLBbhyk2CuKXrG3Belma0vBgwI= Subject key identifier: 65:CF:70:32:BD:D1:8E:D8:15:D7:AB:1E:D5:58:12:D4:80:F8:C2:A3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B3A2461ACC3F5BA00200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de597d2b-33ca-34a0-b718-8db731301d6d.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.223.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b3:a2:46:1a:cc:3f:5b:a0:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=0eb18105-317e-4eb3-8e0f-1e2ca6c64843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cc:b7:3d:54:3c:1f:be:dd:a7:85:d0:0f:a3: 04:79:d4:38:44:58:5a:f3:c6:38:ee:62:13:bf:65: 5a:fb:bd:2c:01:4b:8b:2e:71:71:d6:af:61:21:1b: 9f:22:ac:4a:66:d4:8a:9f:3a:22:b1:e0:3b:de:91: 65:2c:ac:6d:4a:8f:74:d9:55:09:01:10:fc:03:01: 2b:cf:15:63:03:53:52:6f:c3:ce:25:c1:a2:c0:34: f4:6d:05:84:f9:4d:98:22:d2:5c:24:0b:41:ee:f7: 58:83:d2:8c:a5:89:b5:89:f1:b4:47:2f:81:44:8f: 84:00:79:78:a2:8b:de:d1:bd:b8:56:92:25:84:9f: d3:a2:58:10:1a:2b:b2:d1:04:66:41:15:b7:3f:42: af:3a:fd:80:71:fa:8a:b9:a9:f3:e4:a5:f0:c1:6c: 85:df:7c:08:6c:e0:47:7d:b9:88:bf:1e:ff:3f:8c: 8c:3f:b9:0a:5e:9b:35:8a:95:54:ee:3b:d1:4a:8b: 45:ae:fd:58:e5:8e:b0:53:a3:f3:c3:31:24:60:5c: de:3a:28:81:c5:65:e0:7a:bf:63:f1:da:3b:33:35: 16:a5:8c:60:db:e8:f1:cf:38:9a:ab:bc:5e:4f:6a: 11:87:67:0d:de:17:6c:3a:47:1d:67:db:b0:80:5b: fb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CF:70:32:BD:D1:8E:D8:15:D7:AB:1E:D5:58:12:D4:80:F8:C2:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de597d2b-33ca-34a0-b718-8db731301d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:52:57:17:b0:54:48:d4:43:f8:e7:be:7f:5b:af:28:c4:1a: e6:6d:5f:6f:81:90:1a:ae:39:20:8c:97:dd:29:d5:ff:42:e3: 7f:41:ba:90:27:00:a4:18:c3:5c:e3:a5:29:9b:d3:28:36:43: bc:ed:71:ba:b6:e1:58:89:dd:cb:c6:bf:b4:c8:6c:de:66:e5: 7f:4f:ec:1b:43:aa:db:d2:f7:26:cc:76:91:ad:9b:46:90:d7: 41:de:c9:de:99:b1:18:0c:be:d6:18:91:1b:0f:09:f6:bf:8a: ee:9b:02:c8:91:5b:cc:da:4f:0b:5f:bc:a2:80:68:0f:e9:70: 31:aa:5d:e9:a6:de:7a:b1:34:24:cf:4a:5d:44:86:83:4a:da: 36:dc:d3:22:b5:dc:8a:ac:f1:ed:af:a9:dc:8b:ee:c3:00:ff: c1:82:6e:0e:52:87:e5:8e:3d:30:b9:ac:e5:c9:30:7e:92:f4: a0:47:59:72:dc:96:8e:53:32:2a:eb:a6:42:7d:80:86:a2:63: 4a:ff:72:44:aa:03:45:67:27:50:1b:54:44:38:ee:39:45:01: aa:88:c7:66:cd:39:2e:ab:27:38:e1:49:78:73:38:c5:5f:f6: b6:bc:72:d7:52:4b:a1:0b:ad:b3:42:8e:0c:82:d6:76:2a:ba: a0:b6:a5:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLOiRhrMP1ugAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk MGViMTgxMDUtMzE3ZS00ZWIzLThlMGYtMWUyY2E2YzY0ODQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8y3PVQ8H77dp4XQD6MEedQ4RFha88Y47mIT v2Va+70sAUuLLnFx1q9hIRufIqxKZtSKnzoiseA73pFlLKxtSo902VUJARD8AwEr zxVjA1NSb8POJcGiwDT0bQWE+U2YItJcJAtB7vdYg9KMpYm1ifG0Ry+BRI+EAHl4 oove0b24VpIlhJ/TolgQGiuy0QRmQRW3P0KvOv2AcfqKuanz5KXwwWyF33wIbOBH fbmIvx7/P4yMP7kKXps1ipVU7jvRSotFrv1Y5Y6wU6PzwzEkYFzeOiiBxWXger9j 8do7MzUWpYxg2+jxzziaq7xeT2oRh2cN3hdsOkcdZ9uwgFv7ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXPcDK90Y7YFderHtVYEtSA+MKjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGU1OTdkMmItMzNjYS0z NGEwLWI3MTgtOGRiNzMxMzAxZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdSVxewVEjUQ/jnvn9bryjEGuZtX2+BkBquOSCMl90p1f9C439BupAn AKQYw1zjpSmb0yg2Q7ztcbq24ViJ3cvGv7TIbN5m5X9P7BtDqtvS9ybMdpGtm0aQ 10Heyd6ZsRgMvtYYkRsPCfa/iu6bAsiRW8zaTwtfvKKAaA/pcDGqXemm3nqxNCTP Sl1EhoNK2jbc0yK13Iqs8e2vqdyL7sMA/8GCbg5Sh+WOPTC5rOXJMH6S9KBHWXLc lo5TMirrpkJ9gIaiY0r/ckSqA0VnJ1AbVEQ47jlFAaqIx2bNOS6rJzjhSXhzOMVf 9ra8ctdSS6ELrbNCjgyC1nYquqC2pfM= -----END CERTIFICATE-----Generated at Mon May 5 15:36:22 2025 by rpki-client