$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/821541a2-16ea-31a1-9c8e-5b3715c3ff85.roa File: 821541a2-16ea-31a1-9c8e-5b3715c3ff85.roa (raw, json) Hash identifier: lxbg3k8nUrF67eVBE8FloV2N5WAHwtix3SEgXQwXrJI= Subject key identifier: 89:F3:24:A9:6F:97:17:77:0C:11:BD:47:E2:F7:7E:D3:3C:96:CF:CA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E50B0238C8CD381F6F91D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/821541a2-16ea-31a1-9c8e-5b3715c3ff85.roa Signing time: Tue 25 Mar 2025 14:09:27 +0000 ROA not before: Tue 25 Mar 2025 14:09:27 +0000 ROA not after: Mon 23 Jun 2025 14:09:27 +0000 asID: 16625 IP address blocks: 23.194.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:50:b0:23:8c:8c:d3:81:f6:f9:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 14:09:27 2025 GMT Not After : Jun 23 14:09:27 2025 GMT Subject: CN=a4c467c2-9933-486b-8ea9-79f6bb6afc85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e6:c4:9c:44:60:c6:1f:3f:a9:ad:44:c0:6e: a5:98:26:e4:89:34:79:2e:d4:76:43:e1:66:04:ff: f3:0f:85:07:46:f9:5f:65:31:b7:51:b4:ac:b9:36: a4:c7:7a:bb:23:18:6c:cc:76:da:ac:49:4e:c7:d3: c6:8f:1e:18:f9:67:39:e6:9b:64:57:d8:1f:39:3c: 2e:5f:c3:39:41:3e:df:68:b7:3b:2f:1c:fe:60:89: 03:fa:e6:5b:de:eb:1d:bf:0a:20:2c:92:6d:57:4b: 11:24:04:3e:95:e4:17:12:15:40:f0:d3:50:2d:85: 0b:51:88:5f:97:10:08:6e:38:ea:08:6d:3a:c8:5c: f8:eb:1c:86:e0:e7:5e:b7:3b:aa:ca:05:16:12:aa: 9f:4a:5c:07:1e:26:51:12:fe:a4:b4:48:8e:c2:b4: ff:99:8b:5d:a7:00:37:cc:52:cd:a5:83:a4:f7:6f: ad:df:0a:b5:0a:0b:4f:de:c1:10:0b:36:2d:17:c1: 99:06:65:ac:74:8a:8d:95:33:b0:80:87:06:10:ac: bd:47:e8:cd:5b:10:8b:25:81:4b:59:d6:4b:cf:65: 2c:70:cc:9b:bf:f0:07:a0:1e:9e:dc:21:bf:59:fb: b5:4f:fd:77:e8:66:41:0c:ab:6f:d8:18:3f:1d:71: 04:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F3:24:A9:6F:97:17:77:0C:11:BD:47:E2:F7:7E:D3:3C:96:CF:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/821541a2-16ea-31a1-9c8e-5b3715c3ff85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:67:7a:74:63:42:8d:65:a0:e0:7e:40:df:fa:62:9d:56:da: b1:70:f8:d0:4d:f1:45:63:d0:9d:d1:6b:36:e1:bc:94:1b:44: 63:23:aa:35:aa:84:36:0c:b0:be:10:c8:ce:87:ee:2b:cb:48: 65:f0:80:b1:92:07:7f:d7:46:58:28:9c:e2:2c:0d:1e:7c:c5: 6a:2b:13:0c:da:71:d1:30:4d:e9:dc:76:20:18:c6:0d:98:78: 8b:7d:63:61:7f:ac:5e:79:ec:91:8a:26:5f:f4:3c:08:7f:86: f0:ff:97:50:eb:23:8f:d6:2d:43:6f:68:30:fc:a7:61:d7:ee: 87:72:2c:fd:f5:72:4f:b8:1b:6c:3b:98:58:10:34:98:9b:df: 72:60:2b:13:ec:c1:e8:b8:ae:d8:9a:fe:8b:57:ae:0e:ef:c5: b0:16:53:3a:49:c0:8c:20:db:ed:fd:61:0e:04:8f:31:0d:41: d2:ba:a7:6e:2d:df:b7:9c:fb:32:3c:9c:08:91:bf:0a:73:d2: c6:13:69:67:0e:28:eb:d4:fc:b7:fc:a6:a7:e8:7a:d7:53:4c: 38:c6:7f:cb:0a:e2:bf:04:8d:0c:d9:d2:bb:5b:d0:58:d2:03: 2e:1b:aa:f3:14:43:af:ff:44:4d:13:4a:3a:ac:aa:6e:ff:af: 30:4a:39:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOULAjjIzTgfb5HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTE0MDkyN1oXDTI1MDYyMzE0MDkyN1owLzEtMCsGA1UEAxMk YTRjNDY3YzItOTkzMy00ODZiLThlYTktNzlmNmJiNmFmYzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzubEnERgxh8/qa1EwG6lmCbkiTR5LtR2Q+Fm BP/zD4UHRvlfZTG3UbSsuTakx3q7IxhszHbarElOx9PGjx4Y+Wc55ptkV9gfOTwu X8M5QT7faLc7Lxz+YIkD+uZb3usdvwogLJJtV0sRJAQ+leQXEhVA8NNQLYULUYhf lxAIbjjqCG06yFz46xyG4OdetzuqygUWEqqfSlwHHiZREv6ktEiOwrT/mYtdpwA3 zFLNpYOk92+t3wq1CgtP3sEQCzYtF8GZBmWsdIqNlTOwgIcGEKy9R+jNWxCLJYFL WdZLz2UscMybv/AHoB6e3CG/Wfu1T/136GZBDKtv2Bg/HXEE6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInzJKlvlxd3DBG9R+L3ftM8ls/KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODIxNTQxYTItMTZlYS0z MWExLTljOGUtNWIzNzE1YzNmZjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8K0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1nenRjQo1loOB+QN/6Yp1W2rFw+NBN8UVj0J3RazbhvJQbRGMjqjWq hDYMsL4QyM6H7ivLSGXwgLGSB3/XRlgonOIsDR58xWorEwzacdEwTencdiAYxg2Y eIt9Y2F/rF557JGKJl/0PAh/hvD/l1DrI4/WLUNvaDD8p2HX7odyLP31ck+4G2w7 mFgQNJib33JgKxPswei4rtia/otXrg7vxbAWUzpJwIwg2+39YQ4EjzENQdK6p24t 37ec+zI8nAiRvwpz0sYTaWcOKOvU/Lf8pqfoetdTTDjGf8sK4r8EjQzZ0rtb0FjS Ay4bqvMUQ6//RE0TSjqsqm7/rzBKOaM= -----END CERTIFICATE-----Generated at Sat Apr 5 11:09:10 2025 by rpki-client