$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57cb0076-5239-325e-af4d-e9e131da6456.roa File: 57cb0076-5239-325e-af4d-e9e131da6456.roa (raw, json) Hash identifier: lvSafCMKedRFlDM3449P7i4nMsXzv7lCJlOMBGyfSDo= Subject key identifier: 51:58:A8:4B:0B:D6:1A:7F:95:15:94:EA:79:32:18:A8:AF:88:B3:6D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A830B81CEC201ECE8089D600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57cb0076-5239-325e-af4d-e9e131da6456.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.200.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:b8:1c:ec:20:1e:ce:80:89:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=b756e19b-2317-4b25-ba35-716fd40159bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b5:0a:9a:dd:82:7e:de:34:03:61:59:86:1d: 83:3d:2a:55:c3:ad:ee:06:22:83:f3:9e:11:f4:16: 7d:8e:52:db:4d:32:c9:b7:ac:c9:09:27:3d:f1:81: 0f:a4:c9:3e:b2:61:17:42:fa:a1:a5:5d:29:45:54: ec:d8:4a:85:12:16:7a:06:9e:c1:ee:b5:7f:4c:14: 2d:9b:e1:d8:7f:28:8f:09:69:21:05:d9:5c:8b:76: 48:45:6c:cc:36:53:84:f5:b2:17:7f:44:e6:fa:99: 60:92:15:6d:cf:25:1b:be:38:99:5e:4e:68:60:81: 11:92:3f:f5:ff:b1:d4:eb:cf:f5:50:51:56:2a:5a: d7:6d:2a:1e:80:57:33:ed:c1:ad:51:2a:22:99:7a: 1d:6c:37:3e:59:1e:98:1c:19:97:44:98:9b:26:28: 3a:8a:9d:54:d3:d8:dc:a1:1b:d0:b4:34:91:15:04: 49:9a:44:5f:12:aa:26:e9:e6:56:f8:14:f7:9d:01: 53:d6:7d:5f:6e:a0:05:6a:1b:f2:40:d3:0a:9f:77: 2e:ff:36:b7:a2:1b:6c:60:06:98:a7:c2:6d:06:4f: a9:d4:12:b0:df:a8:2b:7c:ff:d7:13:1e:d4:65:9b: 68:6c:0b:fc:ec:8a:32:e1:20:cf:8b:4e:31:90:4a: 68:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:58:A8:4B:0B:D6:1A:7F:95:15:94:EA:79:32:18:A8:AF:88:B3:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57cb0076-5239-325e-af4d-e9e131da6456.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ff:bb:38:32:67:e5:f0:d6:c6:28:0d:c1:5d:e7:79:1a:a9: 85:14:f5:21:e6:9a:48:03:5c:2c:ff:d5:2b:e0:2e:43:02:cd: 3d:f9:ee:12:d0:4d:3b:c6:d2:99:d7:79:be:d5:c2:cc:50:59: fc:48:f8:68:53:66:b9:2b:30:9d:97:a6:47:d6:e2:33:81:e1: b9:8f:88:07:72:3f:c8:c0:34:35:74:e6:d3:89:bd:1b:53:6a: a9:64:aa:f1:93:40:17:85:2d:66:a7:1e:f4:b8:13:c3:ed:38: 97:af:a1:8b:74:85:f3:8b:c3:18:f3:23:c1:1a:14:22:53:2e: b9:29:a3:bc:3e:8d:bc:6d:34:4d:34:43:b7:e5:ce:92:94:20: 55:8b:27:7c:9e:b5:0a:57:67:bb:32:61:f8:59:6c:9d:10:ac: 66:d0:24:67:fe:a7:d2:84:e2:72:22:d0:c8:3f:4e:8d:10:14: 38:08:e2:a7:11:cc:c3:08:bb:21:42:0f:9c:ad:d1:28:6a:f7: 74:55:6e:4e:e6:de:fd:a8:08:01:3b:1a:56:60:86:3e:42:76: e3:3b:fc:a1:03:f1:46:53:9d:49:b8:5b:fb:1e:d1:e7:af:70: fd:f4:ec:f0:74:f1:31:d0:c2:18:47:5c:d4:73:06:69:30:5a: e9:51:17:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMLgc7CAezoCJ1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk Yjc1NmUxOWItMjMxNy00YjI1LWJhMzUtNzE2ZmQ0MDE1OWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrUKmt2Cft40A2FZhh2DPSpVw63uBiKD854R 9BZ9jlLbTTLJt6zJCSc98YEPpMk+smEXQvqhpV0pRVTs2EqFEhZ6Bp7B7rV/TBQt m+HYfyiPCWkhBdlci3ZIRWzMNlOE9bIXf0Tm+plgkhVtzyUbvjiZXk5oYIERkj/1 /7HU68/1UFFWKlrXbSoegFcz7cGtUSoimXodbDc+WR6YHBmXRJibJig6ip1U09jc oRvQtDSRFQRJmkRfEqom6eZW+BT3nQFT1n1fbqAFahvyQNMKn3cu/za3ohtsYAaY p8JtBk+p1BKw36grfP/XEx7UZZtobAv87Ioy4SDPi04xkEpoiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFYqEsL1hp/lRWU6nkyGKiviLNtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTdjYjAwNzYtNTIzOS0z MjVlLWFmNGQtZTllMTMxZGE2NDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8iMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEP/uzgyZ+Xw1sYoDcFd53kaqYUU9SHmmkgDXCz/1SvgLkMCzT357hLQ TTvG0pnXeb7VwsxQWfxI+GhTZrkrMJ2XpkfW4jOB4bmPiAdyP8jANDV05tOJvRtT aqlkqvGTQBeFLWanHvS4E8PtOJevoYt0hfOLwxjzI8EaFCJTLrkpo7w+jbxtNE00 Q7flzpKUIFWLJ3yetQpXZ7syYfhZbJ0QrGbQJGf+p9KE4nIi0Mg/To0QFDgI4qcR zMMIuyFCD5yt0Shq93RVbk7m3v2oCAE7GlZghj5CduM7/KED8UZTnUm4W/se0eev cP307PB08THQwhhHXNRzBmkwWulRF9U= -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:49 2025 by rpki-client