$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/899c1f86-efa0-3f0a-a51b-66eb8a290b96.roa File: 899c1f86-efa0-3f0a-a51b-66eb8a290b96.roa (raw, json) Hash identifier: fz6yiQBo+x4Ekq5TpBF49zIscXb+vd8LsB+Sjag+FF8= Subject key identifier: 95:DD:BB:04:2E:12:45:FC:46:15:BA:C7:E4:76:A2:48:39:1C:F0:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848B8F0DC40AF48519503CD5DA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/899c1f86-efa0-3f0a-a51b-66eb8a290b96.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.205.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:dc:40:af:48:51:95:03:cd:5d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=25d5c136-f18d-43bf-9463-dcad5860a296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2c:ef:ba:9d:81:16:65:14:b0:3d:25:4f:cb: 3f:cb:e4:1e:c3:40:76:06:a3:c9:45:bd:03:3e:b6: 8c:8d:b0:77:c8:69:5f:ad:ec:74:d7:9c:26:2b:92: e3:33:11:35:93:46:55:91:0b:4f:9c:72:0d:ed:9e: 1d:cb:96:e9:7c:6a:9b:c6:71:e2:42:02:1a:c4:cc: ea:b8:04:77:4d:ba:6d:54:bb:32:f3:60:8c:fa:b7: f5:e9:c9:be:5d:b3:77:6f:bf:8d:04:20:c2:13:54: 35:03:b9:e5:e5:27:cf:4d:01:fb:bb:7d:9a:28:14: 66:d1:64:a6:1b:d9:89:91:15:e9:06:64:2d:0f:2d: 60:2f:b3:fe:6d:6b:77:8d:da:5a:9e:65:f4:ca:a7: 0b:c8:6e:6f:b1:01:3f:2c:25:6f:78:25:26:91:95: b6:20:db:76:28:8f:24:80:aa:be:13:da:45:b4:31: 1e:45:a6:8b:25:b8:f9:5f:51:bb:1f:b6:33:e5:ed: b6:52:ae:c0:57:e3:65:c8:c0:1a:79:35:0c:06:4c: 1c:6d:e9:57:37:1a:2f:0d:42:75:09:be:58:b6:d5: de:11:64:e4:c7:05:49:d0:ce:64:68:6d:ba:56:fa: 0f:98:95:51:34:53:a5:96:0d:72:af:28:8d:11:11: be:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DD:BB:04:2E:12:45:FC:46:15:BA:C7:E4:76:A2:48:39:1C:F0:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/899c1f86-efa0-3f0a-a51b-66eb8a290b96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:b2:90:42:5a:93:7b:3a:58:15:10:6b:f7:f7:2a:69:ab:10: 79:e3:05:7f:e8:a6:34:74:9b:a8:bb:e3:f7:81:e7:30:6b:75: 44:8b:4d:0a:2b:bb:9d:47:84:ea:84:5c:00:9d:ab:c6:87:f7: c9:4a:95:fc:fa:b2:d4:18:92:2d:b4:e7:45:67:02:2c:38:ac: 28:02:49:d7:ad:4f:ac:11:ab:6d:af:c8:50:03:f7:f5:c6:51: de:49:5f:85:df:25:30:df:38:39:21:63:11:bd:f3:c6:a5:86: f2:b3:f0:49:e7:72:67:85:e6:11:a9:72:5a:04:7d:b9:8a:3e: c8:f0:16:21:06:4d:ac:3c:58:95:57:6b:41:7f:b6:c0:21:2d: 97:c6:51:44:68:4a:62:6d:ec:8e:a9:58:94:e5:cc:5b:e5:8f: 93:63:60:7f:53:02:85:a2:48:63:7a:f2:14:38:15:8a:a9:48: 15:8e:4a:b7:00:a5:74:3c:6f:30:f7:86:31:bb:89:7e:5a:16: 11:ba:0e:ef:9d:3c:69:68:66:dd:3e:23:b8:44:da:aa:ff:6c: 4c:3a:51:e4:d7:3c:6b:3b:10:c3:49:91:0b:2c:05:c5:25:73: ca:b5:93:c5:ec:37:e5:69:1b:e8:b0:79:70:bf:dc:93:bd:6a: 4c:4f:51:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48NxAr0hRlQPNXaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk MjVkNWMxMzYtZjE4ZC00M2JmLTk0NjMtZGNhZDU4NjBhMjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Czvup2BFmUUsD0lT8s/y+Qew0B2BqPJRb0D PraMjbB3yGlfrex015wmK5LjMxE1k0ZVkQtPnHIN7Z4dy5bpfGqbxnHiQgIaxMzq uAR3TbptVLsy82CM+rf16cm+XbN3b7+NBCDCE1Q1A7nl5SfPTQH7u32aKBRm0WSm G9mJkRXpBmQtDy1gL7P+bWt3jdpanmX0yqcLyG5vsQE/LCVveCUmkZW2INt2KI8k gKq+E9pFtDEeRaaLJbj5X1G7H7Yz5e22Uq7AV+NlyMAaeTUMBkwcbelXNxovDUJ1 Cb5YttXeEWTkxwVJ0M5kaG26VvoPmJVRNFOllg1yryiNERG+CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXduwQuEkX8RhW6x+R2okg5HPD4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODk5YzFmODYtZWZhMC0z ZjBhLWE1MWItNjZlYjhhMjkwYjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF81aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWykEJak3s6WBUQa/f3KmmrEHnjBX/opjR0m6i74/eB5zBrdUSLTQor u51HhOqEXACdq8aH98lKlfz6stQYki2050VnAiw4rCgCSdetT6wRq22vyFAD9/XG Ud5JX4XfJTDfODkhYxG988alhvKz8EnncmeF5hGpcloEfbmKPsjwFiEGTaw8WJVX a0F/tsAhLZfGUURoSmJt7I6pWJTlzFvlj5NjYH9TAoWiSGN68hQ4FYqpSBWOSrcA pXQ8bzD3hjG7iX5aFhG6Du+dPGloZt0+I7hE2qr/bEw6UeTXPGs7EMNJkQssBcUl c8q1k8XsN+VpG+iweXC/3JO9akxPUac= -----END CERTIFICATE-----Generated at Wed Apr 9 16:16:51 2025 by rpki-client