$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1383d351-bb22-3d62-a962-47e103801968.roa File: 1383d351-bb22-3d62-a962-47e103801968.roa (raw, json) Hash identifier: zVQ+l7WYWNNJzGZuvO6LACe7MkA1RvaR3WwM0yT8Kz4= Subject key identifier: 50:F0:A2:00:65:31:EB:FE:BF:5C:90:F0:C0:F1:FD:65:9A:87:A7:1B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E1FECD6DA6230807E980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1383d351-bb22-3d62-a962-47e103801968.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.204.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e1:fe:cd:6d:a6:23:08:07:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=da52be67-a004-4cb2-95f4-7c2d2c5e835b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:63:b5:71:ae:71:e4:92:34:d3:56:f2:43:f0: 73:a5:15:17:8a:b9:c8:20:f2:c3:a7:3f:72:69:2b: 63:b9:71:6e:3f:4b:fd:63:7b:e2:0d:64:1e:65:f9: 4b:23:23:89:3d:6e:6f:cf:1c:69:df:24:8b:ee:67: ca:6a:96:dc:76:a8:24:4a:4f:15:ed:45:fe:9a:3d: 7e:64:13:00:16:28:03:86:ea:d9:c6:cb:93:bc:44: 54:de:9b:8d:0c:1b:03:fc:94:d1:67:e6:9a:05:51: 08:a0:b4:c7:e6:ef:d9:3d:b8:36:31:ce:78:0c:81: 8c:a0:62:90:66:d2:72:ea:a8:8e:bb:de:52:eb:8c: 65:17:73:a2:09:f0:ad:51:d6:19:6b:28:7b:b1:a8: 7b:c1:40:b2:33:42:d6:b7:1b:f8:31:97:0d:02:f0: 4b:b8:80:e9:de:a5:6c:87:81:31:f3:6a:5b:fc:80: 3c:85:05:3f:7d:bf:bb:9d:49:09:3d:02:b4:81:37: 72:6d:3d:e1:9f:48:a3:7f:1d:0e:ee:82:23:0c:8c: 5e:4b:e8:10:6f:25:f4:35:1b:e7:94:83:27:4c:5b: 48:79:06:d3:f5:ee:34:02:0a:93:f4:80:8b:30:7f: a1:4d:8a:7f:8c:7b:a1:56:58:a2:82:d8:d2:58:43: 9e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F0:A2:00:65:31:EB:FE:BF:5C:90:F0:C0:F1:FD:65:9A:87:A7:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1383d351-bb22-3d62-a962-47e103801968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:66:08:eb:ce:4d:d1:db:c9:eb:f4:18:8f:64:25:1f:49:22: f7:8d:4c:28:bc:89:86:5d:9d:6c:93:96:c3:1d:76:f5:56:49: 86:db:2d:34:9f:48:62:fb:8a:c4:bc:c0:9e:c0:c4:b7:cd:5c: 35:95:91:8c:f9:22:a3:7a:f4:78:6b:a9:45:cb:bb:f5:0e:a4: e4:6b:3a:f6:4d:e5:17:8f:4d:19:3b:cb:76:c4:ca:47:06:5f: da:be:36:fb:88:69:d2:52:5e:7f:cc:4b:de:1d:74:14:b2:56: 36:2a:d7:e7:4f:dd:01:e4:3e:ff:52:1b:16:74:b2:36:0e:1f: 67:92:cb:07:11:12:6c:9e:8f:45:b4:15:f9:e0:c9:8c:e1:ae: 6e:e4:65:25:51:1f:fe:29:e6:7b:2f:d4:35:b9:86:46:5b:48: 53:82:30:cb:71:5e:88:dd:1c:8f:e6:f6:c8:2e:97:78:7e:75: e8:73:64:45:33:a7:06:e8:6e:39:67:4e:e4:9a:cd:5a:d7:36: d5:b7:64:02:a9:ca:43:3d:b6:2a:3a:70:05:12:67:85:33:77: 49:cd:a9:97:95:e2:25:bb:d2:2a:d4:62:b4:89:02:3f:ea:1b: 40:21:7a:13:e4:c9:5e:a1:e0:b1:24:ec:f5:42:85:9b:16:d3: ea:c8:78:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKeH+zW2mIwgH6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk ZGE1MmJlNjctYTAwNC00Y2IyLTk1ZjQtN2MyZDJjNWU4MzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGO1ca5x5JI001byQ/BzpRUXirnIIPLDpz9y aStjuXFuP0v9Y3viDWQeZflLIyOJPW5vzxxp3ySL7mfKapbcdqgkSk8V7UX+mj1+ ZBMAFigDhurZxsuTvERU3puNDBsD/JTRZ+aaBVEIoLTH5u/ZPbg2Mc54DIGMoGKQ ZtJy6qiOu95S64xlF3OiCfCtUdYZayh7sah7wUCyM0LWtxv4MZcNAvBLuIDp3qVs h4Ex82pb/IA8hQU/fb+7nUkJPQK0gTdybT3hn0ijfx0O7oIjDIxeS+gQbyX0NRvn lIMnTFtIeQbT9e40AgqT9ICLMH+hTYp/jHuhVliigtjSWEOepQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDwogBlMev+v1yQ8MDx/WWah6cbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTM4M2QzNTEtYmIyMi0z ZDYyLWE5NjItNDdlMTAzODAxOTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8xxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdmCOvOTdHbyev0GI9kJR9JIveNTCi8iYZdnWyTlsMddvVWSYbbLTSf SGL7isS8wJ7AxLfNXDWVkYz5IqN69HhrqUXLu/UOpORrOvZN5RePTRk7y3bEykcG X9q+NvuIadJSXn/MS94ddBSyVjYq1+dP3QHkPv9SGxZ0sjYOH2eSywcREmyej0W0 FfngyYzhrm7kZSVRH/4p5nsv1DW5hkZbSFOCMMtxXojdHI/m9sgul3h+dehzZEUz pwbobjlnTuSazVrXNtW3ZAKpykM9tio6cAUSZ4Uzd0nNqZeV4iW70irUYrSJAj/q G0AhehPkyV6h4LEk7PVChZsW0+rIeO0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:42:28 2025 by rpki-client