$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d376e0b-e530-3c71-9c58-30e99e36c4cb.roa File: 7d376e0b-e530-3c71-9c58-30e99e36c4cb.roa (raw, json) Hash identifier: JUOOlivZIS9eTR3yvA/9hnrQct2bhOWuKT88BKwskTI= Subject key identifier: D3:02:01:33:46:5D:D5:D6:A0:7E:95:B0:DB:E5:98:00:22:3F:53:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E52F88FDBDDD76C09BA2E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d376e0b-e530-3c71-9c58-30e99e36c4cb.roa Signing time: Tue 25 Mar 2025 14:14:03 +0000 ROA not before: Tue 25 Mar 2025 14:14:03 +0000 ROA not after: Mon 23 Jun 2025 14:14:03 +0000 asID: 16625 IP address blocks: 23.198.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:52:f8:8f:db:dd:d7:6c:09:ba:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 14:14:03 2025 GMT Not After : Jun 23 14:14:03 2025 GMT Subject: CN=8ea89edf-b845-476d-aa4a-f823b73bce9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:13:7b:e8:e7:53:b6:55:21:b7:5c:3f:1a:be: f8:13:86:07:c3:27:87:0e:b8:48:4f:6b:5c:d2:2f: 05:11:37:56:36:10:7c:8e:a5:94:86:3e:36:b6:7d: 55:3b:b9:ac:92:d7:0a:92:96:37:a1:ce:72:51:f5: 5c:fa:24:23:08:22:1a:12:09:d6:39:0d:42:e9:1c: 42:0f:27:40:ee:d6:4e:46:a3:de:d0:4b:c5:70:94: d9:25:a6:b6:f3:d5:c8:58:c8:be:fd:d0:72:df:5b: bf:7d:00:bd:85:cc:5c:de:ff:e1:04:5c:0d:2a:fb: fb:c6:69:c4:47:fa:4f:f3:d7:e2:15:f1:73:84:f7: 98:5f:4b:39:e6:b4:43:5a:64:c9:ea:31:35:d7:45: ea:b2:06:af:bf:7e:36:0f:bb:a3:cd:a4:c3:e3:c0: 85:a8:e0:23:c4:f1:45:e1:5c:38:9a:59:b7:9a:f6: 78:82:92:d6:d4:7a:79:1c:04:9b:a1:d4:ed:b9:49: 8a:f5:68:3f:f5:a7:4f:95:d4:2e:76:0e:26:50:e2: fd:b4:10:30:08:e6:51:49:64:bb:c5:ca:72:2b:4c: bb:13:6f:bb:79:2b:ef:58:7c:ba:2d:ab:b0:ba:14: e1:69:c9:2a:5b:d2:af:9d:de:3c:5f:8c:5b:fe:30: d5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:02:01:33:46:5D:D5:D6:A0:7E:95:B0:DB:E5:98:00:22:3F:53:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d376e0b-e530-3c71-9c58-30e99e36c4cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:34:44:c4:9e:53:b9:90:79:22:50:bc:c7:6b:3d:3d:32:d4: 62:7f:2b:50:20:52:e8:dd:0a:6f:e0:2a:4a:47:ef:48:36:16: c0:d6:34:db:37:c3:a6:9b:dc:48:f0:50:b8:ec:9e:eb:7d:27: 0d:e6:ba:92:c2:de:6f:74:65:35:39:92:4b:9e:18:e5:96:ec: 8e:be:8d:16:49:7b:11:b5:90:b7:94:d5:a6:96:00:53:7d:43: 50:f0:78:99:ac:d2:e8:45:b9:82:e5:af:e5:f6:2f:64:b5:c9: 12:b4:10:7b:4d:b8:d9:10:d8:c4:9f:86:8c:dd:ec:e4:7d:ce: 3c:55:ea:7e:43:40:ec:b8:af:7d:e0:ed:b4:e4:64:8d:d5:ea: 09:86:3c:41:a0:4e:8a:73:ad:38:e8:74:90:ac:e6:a4:af:d1: 3f:73:2a:54:74:32:71:87:45:71:f7:25:6a:76:d5:64:df:66: c1:32:61:51:ea:fc:17:89:7a:ad:a2:cc:17:02:76:8e:02:98: 02:c5:83:cd:20:53:57:06:b0:df:10:67:c3:87:95:9a:4f:03: 4b:d9:72:51:4a:e9:18:c4:23:11:ff:f8:c4:d2:c1:89:b0:34: f8:b9:e7:71:49:b0:f0:e5:40:50:9c:7e:83:85:72:84:8a:80: e3:2d:1b:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOUviP293XbAm6LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTE0MTQwM1oXDTI1MDYyMzE0MTQwM1owLzEtMCsGA1UEAxMk OGVhODllZGYtYjg0NS00NzZkLWFhNGEtZjgyM2I3M2JjZTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhN76OdTtlUht1w/Gr74E4YHwyeHDrhIT2tc 0i8FETdWNhB8jqWUhj42tn1VO7msktcKkpY3oc5yUfVc+iQjCCIaEgnWOQ1C6RxC DydA7tZORqPe0EvFcJTZJaa289XIWMi+/dBy31u/fQC9hcxc3v/hBFwNKvv7xmnE R/pP89fiFfFzhPeYX0s55rRDWmTJ6jE110Xqsgavv342D7ujzaTD48CFqOAjxPFF 4Vw4mlm3mvZ4gpLW1Hp5HASbodTtuUmK9Wg/9adPldQudg4mUOL9tBAwCOZRSWS7 xcpyK0y7E2+7eSvvWHy6LauwuhThackqW9Kvnd48X4xb/jDV/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMCATNGXdXWoH6VsNvlmAAiP1PcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2QzNzZlMGItZTUzMC0z YzcxLTljNTgtMzBlOTllMzZjNGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8bgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJU0RMSeU7mQeSJQvMdrPT0y1GJ/K1AgUujdCm/gKkpH70g2FsDWNNs3 w6ab3EjwULjsnut9Jw3mupLC3m90ZTU5kkueGOWW7I6+jRZJexG1kLeU1aaWAFN9 Q1DweJms0uhFuYLlr+X2L2S1yRK0EHtNuNkQ2MSfhozd7OR9zjxV6n5DQOy4r33g 7bTkZI3V6gmGPEGgTopzrTjodJCs5qSv0T9zKlR0MnGHRXH3JWp21WTfZsEyYVHq /BeJeq2izBcCdo4CmALFg80gU1cGsN8QZ8OHlZpPA0vZclFK6RjEIxH/+MTSwYmw NPi553FJsPDlQFCcfoOFcoSKgOMtG/Q= -----END CERTIFICATE-----Generated at Sat Apr 5 11:07:05 2025 by rpki-client