$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ad752af-3149-3ae3-8c3d-ac7ae2c1c14a.roa File: 1ad752af-3149-3ae3-8c3d-ac7ae2c1c14a.roa (raw, json) Hash identifier: JpbhCZVXcp7Uedj3xOWbiY9BGgHWVVyFp6h+msJ8Wq8= Subject key identifier: 5B:F1:25:91:75:20:63:C3:C1:7B:74:1B:81:68:F8:68:3B:56:A7:B9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849DF5A611863CD553893D2C1C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ad752af-3149-3ae3-8c3d-ac7ae2c1c14a.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 24319 IP address blocks: 23.210.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:61:18:63:cd:55:38:93:d2:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=9919a8bd-65b8-4d20-9e7a-6a06e23a70cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:08:1e:4b:4d:06:83:2c:ad:2e:5d:c3:45:13: cc:51:e1:8f:aa:4e:4f:3f:59:24:d9:75:e0:f2:86: aa:27:2e:72:64:b1:71:df:1b:ab:c4:16:70:95:58: 1d:6a:5f:9d:81:67:f3:7e:ae:b0:2c:82:94:1f:63: 4d:3b:19:60:b3:df:b1:b6:b1:1f:b5:f8:05:33:f9: 70:32:23:df:e2:58:b5:65:d9:27:8b:1b:bb:2a:73: e6:4d:63:d7:1c:ea:c5:68:8b:df:4a:8c:42:e6:6d: d5:ac:8b:dc:1b:52:27:25:87:f8:a9:74:ae:28:ab: ad:aa:3b:59:a7:16:6e:50:00:7e:f5:f4:3d:f9:ab: d9:c8:2f:b5:17:8f:f4:51:84:71:1d:98:2a:43:97: dd:eb:27:e0:8b:72:fa:5d:98:68:14:14:01:70:ec: fa:79:ef:ad:81:4d:55:e0:ac:83:d6:f4:fe:bc:48: f5:b4:27:7e:7b:a2:2d:64:6d:ea:f9:07:0e:fb:33: cd:38:0b:e0:7b:87:30:05:43:c6:79:db:70:63:e6: 5e:05:ea:8e:40:24:d3:49:e1:c3:5c:78:50:83:89: 31:25:94:b8:40:0d:fe:ee:49:c3:d8:7d:13:b1:f3: 38:a0:ee:85:76:02:06:d4:1f:02:3d:c3:38:53:4b: b1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F1:25:91:75:20:63:C3:C1:7B:74:1B:81:68:F8:68:3B:56:A7:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ad752af-3149-3ae3-8c3d-ac7ae2c1c14a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:71:1f:37:fe:8a:91:20:9d:b8:1f:7f:5e:85:00:0b:a1:90: d6:8c:fb:36:1d:ea:7d:f1:ca:5d:81:9d:4e:ff:15:a7:72:04: a4:02:16:76:89:51:93:ca:37:62:5a:6f:f3:f1:91:21:46:b3: f1:5a:cf:3c:50:da:8e:96:16:94:7e:af:39:fb:43:ea:36:30: 51:22:35:fd:dd:8c:be:4e:9a:16:a6:c0:1b:5c:87:6d:51:70: b4:5e:42:33:be:4e:df:c6:93:59:e8:02:73:28:aa:b2:f7:58: 81:bb:22:2a:e1:0d:24:1b:ef:e8:17:9b:a7:ea:72:aa:85:4f: d1:07:6f:a5:ae:23:60:d8:8a:0a:0a:41:f0:ff:4e:01:58:61: a4:ac:de:1b:03:d6:6f:e5:d3:e2:e9:1c:6a:31:ec:5e:03:ad: 2e:49:e7:8b:cc:a9:11:07:72:d2:15:be:93:12:2d:09:31:65: be:54:41:11:22:8a:66:b5:aa:b4:75:b3:a7:cd:d4:4d:e0:5c: bf:66:c1:01:5a:f1:e9:a9:93:92:0c:41:d0:c1:0d:d3:06:97: 40:fd:ca:fa:8d:32:93:58:b3:8b:0d:fa:36:a6:70:a0:5d:2b: c4:e5:d3:92:d2:fc:d4:d5:e1:02:79:76:af:33:f3:86:68:0f: 63:16:a8:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWmEYY81VOJPSwcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk OTkxOWE4YmQtNjViOC00ZDIwLTllN2EtNmEwNmUyM2E3MGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ggeS00GgyytLl3DRRPMUeGPqk5PP1kk2XXg 8oaqJy5yZLFx3xurxBZwlVgdal+dgWfzfq6wLIKUH2NNOxlgs9+xtrEftfgFM/lw MiPf4li1Zdknixu7KnPmTWPXHOrFaIvfSoxC5m3VrIvcG1InJYf4qXSuKKutqjtZ pxZuUAB+9fQ9+avZyC+1F4/0UYRxHZgqQ5fd6yfgi3L6XZhoFBQBcOz6ee+tgU1V 4KyD1vT+vEj1tCd+e6ItZG3q+QcO+zPNOAvge4cwBUPGedtwY+ZeBeqOQCTTSeHD XHhQg4kxJZS4QA3+7knD2H0TsfM4oO6FdgIG1B8CPcM4U0ux3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvxJZF1IGPDwXt0G4Fo+Gg7Vqe5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWFkNzUyYWYtMzE0OS0z YWUzLThjM2QtYWM3YWUyYzFjMTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9JIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9xHzf+ipEgnbgff16FAAuhkNaM+zYd6n3xyl2BnU7/FadyBKQCFnaJ UZPKN2Jab/PxkSFGs/FazzxQ2o6WFpR+rzn7Q+o2MFEiNf3djL5OmhamwBtch21R cLReQjO+Tt/Gk1noAnMoqrL3WIG7IirhDSQb7+gXm6fqcqqFT9EHb6WuI2DYigoK QfD/TgFYYaSs3hsD1m/l0+LpHGox7F4DrS5J54vMqREHctIVvpMSLQkxZb5UQREi ima1qrR1s6fN1E3gXL9mwQFa8empk5IMQdDBDdMGl0D9yvqNMpNYs4sN+jamcKBd K8Tl05LS/NTV4QJ5dq8z84ZoD2MWqLU= -----END CERTIFICATE-----Generated at Sat Jun 7 04:21:47 2025 by rpki-client