$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4113ee81-7e77-3e1b-91a4-e683577da305.roa File: 4113ee81-7e77-3e1b-91a4-e683577da305.roa (raw, json) Hash identifier: C+G/+snWNW2ajsUr12YXwcgaCzYqthWZKhhR3YJYwGk= Subject key identifier: 09:05:97:57:5B:BE:FA:F0:9F:68:3A:AE:3E:A0:B8:D2:FC:E6:3B:5C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A00DAF81331D00A8B84771F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4113ee81-7e77-3e1b-91a4-e683577da305.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.205.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:f8:13:31:d0:0a:8b:84:77:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=40b2ae1b-7624-418f-87a9-eb9164737c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f2:bf:f6:ee:4a:7e:1b:cf:e1:27:10:9e:e6: 17:12:1f:4f:44:ab:db:a4:75:51:59:b7:f6:05:27: f6:e6:f1:c4:f7:32:bd:65:f7:cc:19:85:50:6a:3a: cf:57:bc:10:ed:c7:fb:e3:87:92:ab:a9:9b:25:77: 8d:d0:38:53:11:42:13:fd:ba:3e:76:cd:f3:22:8f: 72:58:6e:fc:71:9e:d1:71:39:e2:48:9c:d9:a9:aa: a9:d4:b8:55:d7:44:5c:d0:8f:a1:a0:61:3c:85:0c: df:5f:12:aa:d9:84:67:ac:dd:2c:3e:24:bc:1a:25: cf:ad:2f:90:d9:e5:ad:51:14:42:b1:0a:cb:01:7e: 2a:16:ad:f8:a8:40:84:44:04:fd:6f:59:20:ca:6f: 2b:39:a9:0d:cd:f8:60:e7:4f:23:28:83:3e:f2:71: 0d:ac:66:f7:07:cc:69:94:03:1c:a9:ce:14:54:2e: fe:66:52:1e:26:63:1c:f9:dc:c7:0c:6b:1e:8f:4b: df:56:c6:f2:8c:fa:bf:63:f1:32:1d:17:c1:e4:82: 36:c9:10:e3:2b:3e:c2:35:4a:08:9a:fe:f3:56:56: f6:9e:66:9b:18:9e:79:23:c9:57:00:9d:48:b7:b6: 1e:73:37:e8:3e:9d:08:5a:28:95:de:9b:a5:40:5d: 79:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:05:97:57:5B:BE:FA:F0:9F:68:3A:AE:3E:A0:B8:D2:FC:E6:3B:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4113ee81-7e77-3e1b-91a4-e683577da305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:15:c8:53:08:3c:cc:1e:0b:7d:0d:7c:76:7c:09:f1:02:68: b2:86:ed:b9:db:27:4f:4a:07:cc:68:a0:93:e9:0b:60:fb:85: 35:82:49:bb:1d:d2:69:aa:4c:f0:70:fc:bb:c1:63:68:c6:5b: 3e:b0:22:b2:97:75:92:5c:fb:32:ef:66:4e:eb:be:02:fd:65: 8e:d1:f2:2b:c3:3d:51:a7:d3:fa:04:88:92:dd:ec:bc:68:8f: d6:61:8e:02:b6:d7:34:8d:e1:2a:06:2a:25:33:17:14:50:53: f8:25:34:21:50:b6:0f:44:ab:32:d6:34:d3:ec:59:d1:b6:f1: d0:88:e6:92:02:48:23:90:03:97:41:89:e3:53:47:94:88:9b: 13:1f:b7:ca:e7:ef:10:bb:9f:a8:68:5b:46:20:88:8d:90:19: a9:14:d9:71:93:d3:74:13:70:f4:7c:f2:98:7b:fd:fb:2e:ae: 7b:2e:63:96:ae:b8:a9:ef:b0:9c:d5:66:4c:bd:97:bf:79:88: fc:8d:39:b4:64:f4:e7:26:54:0a:92:9e:64:85:88:49:7e:14: a6:91:cc:6a:59:2d:69:6f:d0:40:84:43:af:13:44:bc:6e:90: ab:21:50:3d:f4:b9:14:f8:d7:48:2f:ba:49:01:dd:a1:7e:e1: 97:09:cc:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2vgTMdAKi4R3HwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk NDBiMmFlMWItNzYyNC00MThmLTg3YTktZWI5MTY0NzM3Yzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPK/9u5KfhvP4ScQnuYXEh9PRKvbpHVRWbf2 BSf25vHE9zK9ZffMGYVQajrPV7wQ7cf744eSq6mbJXeN0DhTEUIT/bo+ds3zIo9y WG78cZ7RcTniSJzZqaqp1LhV10Rc0I+hoGE8hQzfXxKq2YRnrN0sPiS8GiXPrS+Q 2eWtURRCsQrLAX4qFq34qECERAT9b1kgym8rOakNzfhg508jKIM+8nENrGb3B8xp lAMcqc4UVC7+ZlIeJmMc+dzHDGsej0vfVsbyjPq/Y/EyHRfB5II2yRDjKz7CNUoI mv7zVlb2nmabGJ55I8lXAJ1It7YeczfoPp0IWiiV3pulQF15MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkFl1dbvvrwn2g6rj6guNL85jtcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDExM2VlODEtN2U3Ny0z ZTFiLTkxYTQtZTY4MzU3N2RhMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF82WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcVyFMIPMweC30NfHZ8CfECaLKG7bnbJ09KB8xooJPpC2D7hTWCSbsd 0mmqTPBw/LvBY2jGWz6wIrKXdZJc+zLvZk7rvgL9ZY7R8ivDPVGn0/oEiJLd7Lxo j9ZhjgK21zSN4SoGKiUzFxRQU/glNCFQtg9EqzLWNNPsWdG28dCI5pICSCOQA5dB ieNTR5SImxMft8rn7xC7n6hoW0YgiI2QGakU2XGT03QTcPR88ph7/fsurnsuY5au uKnvsJzVZky9l795iPyNObRk9OcmVAqSnmSFiEl+FKaRzGpZLWlv0ECEQ68TRLxu kKshUD30uRT410gvukkB3aF+4ZcJzEU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:28:34 2025 by rpki-client