$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43de1d2e-2d24-35d7-881a-a177dc742059.roa File: 43de1d2e-2d24-35d7-881a-a177dc742059.roa (raw, json) Hash identifier: bJUym/aw6lvy0eeIQY4exnDxPiepOo+oeqRpUbbr1UA= Subject key identifier: 15:A9:5B:EA:21:34:C7:FF:34:B2:77:31:A0:B2:F7:D8:1D:53:A2:8B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858491D7165505605FF4B2B459510 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43de1d2e-2d24-35d7-881a-a177dc742059.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.198.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:65:50:56:05:ff:4b:2b:45:95:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=7a1e82c6-2052-42ce-9d10-9ce944aed61e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b9:eb:70:a4:6e:05:3b:23:58:40:2e:37:e3: 6f:eb:1e:cb:35:35:b8:56:d1:c2:03:75:08:db:3f: 5a:5e:77:13:f7:0b:52:b1:72:d9:2c:d3:96:4b:49: 63:48:a5:7a:78:ba:65:7e:e1:fb:c5:bd:82:fb:74: d6:d4:1c:c5:c9:24:f3:fd:d8:67:78:94:85:d4:74: bd:df:09:55:9e:5f:00:19:e6:e2:f4:99:43:47:29: b0:a5:92:89:5d:fc:a0:7c:2a:a9:b2:23:05:dd:cb: e6:4b:4c:32:70:3c:69:6d:2b:a7:07:c1:55:83:9e: d5:15:ad:12:a4:9b:b4:7c:91:3c:46:dc:5e:b2:4b: 71:86:6b:7c:74:34:21:1a:6c:08:3f:bf:82:28:71: dc:08:d4:de:fe:e3:4f:ea:55:d0:0d:e5:4a:18:2d: 3b:b2:67:86:a9:f0:5d:8d:8b:2d:0f:2e:3b:ab:82: 3b:76:54:8e:70:4b:4b:6d:36:4a:83:13:65:54:32: 2e:9c:d5:dd:a9:37:f8:d3:9c:cb:18:c3:99:85:a0: 0c:83:c0:14:04:b3:7a:55:f4:a2:e4:cc:59:1f:a6: 8d:e5:4e:f6:83:3a:52:ba:e4:c5:54:99:3e:19:e6: 27:3e:8c:32:0b:8c:3d:9a:d2:51:11:2d:b6:b8:9e: a1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A9:5B:EA:21:34:C7:FF:34:B2:77:31:A0:B2:F7:D8:1D:53:A2:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43de1d2e-2d24-35d7-881a-a177dc742059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:38:d3:41:7f:c9:8e:0a:50:a0:30:ec:c6:40:7e:c0:99:c4: c5:e5:c8:aa:71:3f:13:06:13:a9:1e:77:b3:98:fb:2d:7c:0c: 56:81:6d:18:30:cb:c6:31:9a:5c:98:62:70:4b:ec:1b:ec:9c: ed:a2:db:34:a4:82:6c:e0:91:e3:c4:5d:a2:d7:28:f8:91:a2: 25:ed:04:15:29:ff:e3:28:61:1d:98:90:b8:ee:b5:53:9b:46: 40:e9:3b:09:2d:39:0f:e4:9b:c4:63:f0:26:f4:ec:0b:72:cb: 17:05:0c:d8:4c:2b:05:19:d6:5b:e4:e2:34:16:ed:bf:6b:76: 9e:56:02:ef:46:7b:0b:18:e5:a9:6d:63:83:27:72:b2:4e:9e: 09:e7:e7:fb:0f:19:4a:7c:2b:3d:53:53:ca:ba:5b:de:af:67: 70:d3:39:a8:c2:cc:bd:c0:90:77:85:11:53:c8:62:b7:6b:ab: 20:45:4a:4c:9d:4f:48:c9:74:31:51:d2:d7:b5:ca:5f:67:1e: 6f:22:f0:26:07:76:e8:1f:1b:33:f4:17:a4:9f:40:08:3c:25: 95:28:46:84:64:78:ba:d5:8c:78:00:4a:da:b5:43:70:00:9e: bc:d5:47:06:ac:8d:eb:e6:a1:06:ae:1c:e0:4e:52:7c:02:b7: 7a:cc:fa:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWVQVgX/SytFlRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk N2ExZTgyYzYtMjA1Mi00MmNlLTlkMTAtOWNlOTQ0YWVkNjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrnrcKRuBTsjWEAuN+Nv6x7LNTW4VtHCA3UI 2z9aXncT9wtSsXLZLNOWS0ljSKV6eLplfuH7xb2C+3TW1BzFySTz/dhneJSF1HS9 3wlVnl8AGebi9JlDRymwpZKJXfygfCqpsiMF3cvmS0wycDxpbSunB8FVg57VFa0S pJu0fJE8Rtxesktxhmt8dDQhGmwIP7+CKHHcCNTe/uNP6lXQDeVKGC07smeGqfBd jYstDy47q4I7dlSOcEtLbTZKgxNlVDIunNXdqTf405zLGMOZhaAMg8AUBLN6VfSi 5MxZH6aN5U72gzpSuuTFVJk+GeYnPowyC4w9mtJRES22uJ6hoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWpW+ohNMf/NLJ3MaCy99gdU6KLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDNkZTFkMmUtMmQyNC0z NWQ3LTg4MWEtYTE3N2RjNzQyMDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8YAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACA400F/yY4KUKAw7MZAfsCZxMXlyKpxPxMGE6ked7OY+y18DFaBbRgw y8YxmlyYYnBL7BvsnO2i2zSkgmzgkePEXaLXKPiRoiXtBBUp/+MoYR2YkLjutVOb RkDpOwktOQ/km8Rj8Cb07AtyyxcFDNhMKwUZ1lvk4jQW7b9rdp5WAu9GewsY5alt Y4MncrJOngnn5/sPGUp8Kz1TU8q6W96vZ3DTOajCzL3AkHeFEVPIYrdrqyBFSkyd T0jJdDFR0te1yl9nHm8i8CYHdugfGzP0F6SfQAg8JZUoRoRkeLrVjHgAStq1Q3AA nrzVRwasjevmoQauHOBOUnwCt3rM+lE= -----END CERTIFICATE-----Generated at Sat Apr 5 10:54:31 2025 by rpki-client