$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18f9c906-2e5a-30e6-a295-dfe22ed0b25f.roa File: 18f9c906-2e5a-30e6-a295-dfe22ed0b25f.roa (raw, json) Hash identifier: JD+rxw/38RGmx6EWz0wmMnQ0RZPFFr3WwXCjv6VcmKs= Subject key identifier: AD:98:90:57:A0:FA:C8:4C:9D:D3:53:50:78:E2:99:2C:68:EB:88:56 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A9966209F677F01ACD6F6980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18f9c906-2e5a-30e6-a295-dfe22ed0b25f.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.202.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:62:09:f6:77:f0:1a:cd:6f:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=c2f5599a-d176-42f0-9125-a3330fcab55c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6f:2d:b9:b6:51:a4:ad:99:b4:ec:e6:a6:72: 94:49:69:2b:d6:36:a5:ce:70:06:37:d8:20:b3:71: 7a:b8:0c:78:ba:e8:56:00:17:b8:6c:4c:c3:95:df: 6d:af:35:5e:b7:f1:51:df:cb:29:eb:ba:be:86:fb: 1c:bb:fe:5e:62:c9:ce:d4:30:fd:46:0b:91:74:ad: af:a4:cd:29:70:d1:bf:9a:a9:19:73:de:7c:91:dd: 78:e5:c2:77:c1:68:24:4b:47:f1:31:76:1f:88:46: 47:ca:f5:14:00:4f:08:0e:c9:c2:7a:89:57:7f:72: 17:56:25:79:32:ef:08:7c:76:15:e3:5e:b1:9c:32: 53:68:c9:59:15:b2:12:ee:54:ee:f3:77:aa:08:ee: ef:06:42:60:ac:b3:b0:a9:b9:15:ce:75:a4:23:21: 47:4c:90:07:f7:95:64:81:67:39:d4:4d:57:81:af: d9:e4:c7:a9:e7:7c:a7:3e:82:8f:63:ba:7e:ff:99: 6c:82:2d:40:6e:f5:9b:f9:f1:15:d3:49:c9:ea:af: 75:ad:e1:97:2d:fd:6d:e6:77:cb:13:de:02:ae:07: 37:fd:e2:41:4d:d5:5e:27:96:9c:b8:0b:15:25:1b: b3:b3:66:06:5e:35:d2:f8:4a:ba:84:13:b6:13:21: 02:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:98:90:57:A0:FA:C8:4C:9D:D3:53:50:78:E2:99:2C:68:EB:88:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18f9c906-2e5a-30e6-a295-dfe22ed0b25f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:f7:6f:3d:29:f7:f3:68:c3:51:35:da:97:be:9e:99:d2:74: 63:56:5b:ae:54:e7:9e:e2:e0:67:30:e8:44:3e:a2:2b:ec:bd: b7:49:28:a7:57:55:38:59:6f:b4:13:f2:ad:5b:a1:7b:4e:cb: 73:77:f9:03:6b:b1:64:e2:fb:aa:50:38:c2:25:e6:f4:29:cb: 4f:8d:95:e5:43:d3:40:97:d7:9c:17:7b:4a:11:5d:37:5b:ac: 71:93:8a:57:c9:db:3e:10:fb:c5:9b:d5:d2:77:a0:8a:9f:6c: 37:f6:aa:5f:b5:52:80:63:c7:3d:2c:3c:6e:8c:05:12:cc:6e: 03:1e:a8:f7:c6:e7:ab:82:cd:15:0d:25:bc:58:e9:a2:ab:07: 9d:39:34:32:6b:40:57:66:9c:2c:3f:ba:92:e2:21:a1:9a:be: cf:9a:14:87:61:da:51:56:d9:e7:73:ab:9e:2c:32:4b:42:f3: 68:bc:58:49:29:d1:6b:ea:dd:12:c5:90:42:f9:71:54:ba:75: 7c:f6:39:d6:34:55:21:78:d6:86:3d:1d:c2:07:60:55:c5:b9: aa:80:04:5f:9f:ab:79:6e:79:64:03:df:36:6c:62:a3:0d:cf: db:86:65:48:dd:50:b5:52:64:0d:2e:df:d3:e5:53:3b:22:2b: 87:50:c0:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplmIJ9nfwGs1vaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk YzJmNTU5OWEtZDE3Ni00MmYwLTkxMjUtYTMzMzBmY2FiNTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW8tubZRpK2ZtOzmpnKUSWkr1jalznAGN9gg s3F6uAx4uuhWABe4bEzDld9trzVet/FR38sp67q+hvscu/5eYsnO1DD9RguRdK2v pM0pcNG/mqkZc958kd145cJ3wWgkS0fxMXYfiEZHyvUUAE8IDsnCeolXf3IXViV5 Mu8IfHYV416xnDJTaMlZFbIS7lTu83eqCO7vBkJgrLOwqbkVznWkIyFHTJAH95Vk gWc51E1Xga/Z5Mep53ynPoKPY7p+/5lsgi1AbvWb+fEV00nJ6q91reGXLf1t5nfL E94Crgc3/eJBTdVeJ5acuAsVJRuzs2YGXjXS+Eq6hBO2EyECTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2YkFeg+shMndNTUHjimSxo64hWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMThmOWM5MDYtMmU1YS0z MGU2LWEyOTUtZGZlMjJlZDBiMjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8q4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG33bz0p9/Now1E12pe+npnSdGNWW65U557i4Gcw6EQ+oivsvbdJKKdX VThZb7QT8q1boXtOy3N3+QNrsWTi+6pQOMIl5vQpy0+NleVD00CX15wXe0oRXTdb rHGTilfJ2z4Q+8Wb1dJ3oIqfbDf2ql+1UoBjxz0sPG6MBRLMbgMeqPfG56uCzRUN JbxY6aKrB505NDJrQFdmnCw/upLiIaGavs+aFIdh2lFW2edzq54sMktC82i8WEkp 0Wvq3RLFkEL5cVS6dXz2OdY0VSF41oY9HcIHYFXFuaqABF+fq3lueWQD3zZsYqMN z9uGZUjdULVSZA0u39PlUzsiK4dQwI0= -----END CERTIFICATE-----Generated at Sat Apr 5 10:54:23 2025 by rpki-client