$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4282a368-7979-3ad6-beaf-a9aaa8a9fe3e.roa File: 4282a368-7979-3ad6-beaf-a9aaa8a9fe3e.roa (raw, json) Hash identifier: disuHUEHqw3QJDbyuxuT7uz3kL5Da6wcHoaS0b+bp6U= Subject key identifier: E0:57:BF:38:8E:83:3B:65:45:46:D4:1F:BA:8F:97:70:D3:55:08:40 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BBBB94A83A56401DDCEF8680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4282a368-7979-3ad6-beaf-a9aaa8a9fe3e.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.210.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:94:a8:3a:56:40:1d:dc:ef:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=4623d3f1-5de0-42c3-ad79-dece6f929989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:22:6c:82:e8:f5:73:da:be:1a:ca:32:5d:20: 84:89:e7:bb:e2:4e:3f:f8:71:47:f0:16:6e:53:d6: 7b:3e:7f:48:4d:10:27:e9:0e:7e:82:a2:8b:2b:bd: aa:c9:46:3e:ae:e3:1b:e2:fa:bc:b3:ad:10:51:38: 28:25:02:22:dd:5d:6a:87:50:0f:a7:e1:59:a9:c1: 1a:a9:33:9a:bf:5e:54:38:a2:d4:64:8a:a4:f5:5a: d3:b8:62:99:da:6d:a3:a1:1a:88:17:b5:04:3e:c6: d3:b1:a4:61:54:05:b6:8c:4c:76:4f:be:07:30:a8: c6:42:b3:7d:47:4d:21:2f:92:67:78:de:5a:f5:4f: a4:b4:5a:a2:4a:0d:1d:5f:58:a9:3b:30:e7:ad:24: 49:7b:e0:e8:67:21:02:21:d7:37:ca:b2:fe:82:6e: 5e:85:1e:cb:62:8f:fe:5c:66:ec:2b:15:0a:1d:91: 9b:13:38:87:24:30:ae:8e:c5:0e:68:78:02:0b:07: 72:25:ac:68:5d:4c:46:91:7a:95:81:52:c2:bd:e5: d0:71:44:45:51:05:87:30:6c:9d:79:52:21:16:32: 72:93:52:2f:7e:8e:61:d8:41:82:9b:fe:c3:80:c2: f2:fd:23:08:32:4f:1b:36:be:6e:07:c6:84:04:ad: 6f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:57:BF:38:8E:83:3B:65:45:46:D4:1F:BA:8F:97:70:D3:55:08:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4282a368-7979-3ad6-beaf-a9aaa8a9fe3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:57:d8:e9:51:d2:79:b3:ff:4e:c5:58:67:66:a5:8b:d1:60: 06:07:54:58:79:ef:4b:a9:3a:74:b4:08:8f:0c:19:10:88:f1: 8e:af:60:12:f3:a1:d0:25:19:5a:db:e9:cf:1b:d8:aa:d3:3e: 7a:41:59:1c:c0:43:23:85:eb:17:cd:8d:a9:9c:94:1b:44:ff: 0f:61:ed:10:9e:24:a3:c4:de:b5:66:17:1a:07:e4:e7:de:ab: 39:18:4a:e2:4a:9e:59:58:60:8f:bd:db:6e:c3:8b:99:21:f1: c4:b9:92:c7:a9:0b:33:92:c0:c1:f7:b6:41:eb:db:fb:c5:d1: 67:a1:31:0e:8e:13:ee:9f:83:4c:90:ec:ad:39:4c:fa:0e:87: 20:04:1c:5d:c7:63:c9:7c:c8:d6:fc:16:60:e4:04:b2:ce:78: 22:45:fc:f0:75:1e:a3:92:58:97:31:7d:1d:d3:08:e5:31:4c: fe:20:69:65:af:bf:e5:3e:a2:a2:a1:01:fd:b7:4a:d5:90:99: 00:75:c0:f2:fe:04:30:fd:b5:15:8a:71:6e:ea:bf:47:56:dd: 66:3e:02:89:79:38:52:5b:74:89:8a:2a:f3:42:65:35:26:30: d1:88:28:9c:51:7d:61:7e:db:99:a2:79:cc:9e:80:1f:9f:8a: d5:18:e7:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u5SoOlZAHdzvhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk NDYyM2QzZjEtNWRlMC00MmMzLWFkNzktZGVjZTZmOTI5OTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryJsguj1c9q+GsoyXSCEiee74k4/+HFH8BZu U9Z7Pn9ITRAn6Q5+gqKLK72qyUY+ruMb4vq8s60QUTgoJQIi3V1qh1APp+FZqcEa qTOav15UOKLUZIqk9VrTuGKZ2m2joRqIF7UEPsbTsaRhVAW2jEx2T74HMKjGQrN9 R00hL5JneN5a9U+ktFqiSg0dX1ipOzDnrSRJe+DoZyECIdc3yrL+gm5ehR7LYo/+ XGbsKxUKHZGbEziHJDCujsUOaHgCCwdyJaxoXUxGkXqVgVLCveXQcURFUQWHMGyd eVIhFjJyk1Ivfo5h2EGCm/7DgMLy/SMIMk8bNr5uB8aEBK1v9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBXvziOgztlRUbUH7qPl3DTVQhAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDI4MmEzNjgtNzk3OS0z YWQ2LWJlYWYtYTlhYWE4YTlmZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9L6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBX2OlR0nmz/07FWGdmpYvRYAYHVFh570upOnS0CI8MGRCI8Y6vYBLz odAlGVrb6c8b2KrTPnpBWRzAQyOF6xfNjamclBtE/w9h7RCeJKPE3rVmFxoH5Ofe qzkYSuJKnllYYI+9227Di5kh8cS5ksepCzOSwMH3tkHr2/vF0WehMQ6OE+6fg0yQ 7K05TPoOhyAEHF3HY8l8yNb8FmDkBLLOeCJF/PB1HqOSWJcxfR3TCOUxTP4gaWWv v+U+oqKhAf23StWQmQB1wPL+BDD9tRWKcW7qv0dW3WY+Aol5OFJbdImKKvNCZTUm MNGIKJxRfWF+25miecyegB+fitUY5w8= -----END CERTIFICATE-----Generated at Sat Apr 5 11:03:34 2025 by rpki-client