$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e9e1c3c-6edd-37a4-b5c2-0fb65c1aba91.roa File: 9e9e1c3c-6edd-37a4-b5c2-0fb65c1aba91.roa (raw, json) Hash identifier: 8F3bPd1ffOy8G4QxGTz08snuN0L4wmHhZfb5eTT/c/Y= Subject key identifier: 73:61:34:B0:4B:01:31:73:7D:12:8E:1A:E2:1F:49:E1:F3:BF:65:6E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EC0B4D6CF2EDD5AEB5100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e9e1c3c-6edd-37a4-b5c2-0fb65c1aba91.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.192.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:c0:b4:d6:cf:2e:dd:5a:eb:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=2c044255-ef36-4207-bfbf-2a6cd49d6f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b5:65:26:65:9e:c9:26:35:b5:b6:9b:98:91: 54:6b:10:b4:87:8b:e5:cf:a1:67:e3:36:e0:6e:11: 65:ff:9e:dc:01:45:e8:c3:ac:83:85:50:ed:e2:9a: b3:ae:47:4b:cc:d4:18:1d:4c:a2:56:6a:dc:91:4e: f4:cc:d3:51:b2:dd:1f:15:28:b3:48:ce:04:f4:bc: 2d:53:03:99:1d:db:f4:ec:d3:06:9d:18:9c:0f:85: 48:a7:39:7e:d4:26:70:7a:1d:1b:c2:00:9e:92:f4: 2c:69:c4:99:6a:7a:ef:28:7e:34:86:42:b5:4a:7a: 59:d5:94:d5:f3:e3:45:71:e4:15:b7:49:ff:60:64: 76:a4:13:d4:89:ba:1a:cc:a3:d2:bb:d9:35:12:de: 4d:6f:6f:7e:0b:54:3e:4e:cf:66:6c:2c:3a:46:83: 13:53:d5:c7:c7:24:cb:58:6e:a1:6d:04:0e:8c:6b: e1:b8:6f:1a:9b:16:71:59:7f:d1:97:fb:fa:10:27: c3:f5:0c:c9:0b:37:89:6a:f3:42:65:95:38:1d:7c: d8:62:08:6e:0f:56:0a:06:1e:a6:e2:ed:aa:81:7f: 09:aa:3c:61:8c:df:1b:c8:c4:eb:85:a4:d9:36:59: aa:07:90:5b:a6:34:ca:1a:09:54:e0:25:a4:95:21: 40:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:61:34:B0:4B:01:31:73:7D:12:8E:1A:E2:1F:49:E1:F3:BF:65:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e9e1c3c-6edd-37a4-b5c2-0fb65c1aba91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.192.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a4:21:f9:d7:2d:d5:af:e5:ea:70:e6:1b:97:94:de:6d:8d: 5a:02:fc:06:5a:ce:9a:3d:c2:8c:4f:e4:6a:12:ed:2c:59:66: 2d:b0:3b:bc:5b:b6:ed:ee:c1:90:eb:3a:42:09:d6:b6:c3:1d: 05:fa:16:ad:f0:a4:13:a6:c3:4a:1e:f1:67:e5:09:3a:57:15: 00:ab:87:6f:40:92:02:ee:28:96:bf:2f:b2:40:4e:d2:37:53: 55:37:26:0b:de:fd:63:64:85:c3:f4:80:56:48:47:e4:e9:f9: e7:ab:04:6d:bb:01:f3:1e:c9:db:f7:aa:8c:c9:ee:1f:ad:23: 79:21:90:1f:4a:ca:d2:5e:9f:d6:bc:9b:c2:28:b1:ef:2f:0c: 90:33:95:5b:13:22:a0:23:18:24:2f:65:75:a5:a0:32:a1:7e: 78:7d:27:c7:11:cb:12:b9:d5:cb:84:1b:ef:be:90:58:4d:b9: ab:92:af:83:bf:e8:1d:77:2d:1f:b5:30:1e:8d:d6:ee:2d:2b: 01:5a:d4:77:8d:91:73:d6:a9:34:b8:ff:56:35:74:43:6d:a5: 3f:35:da:c3:9a:20:f5:63:00:6b:27:31:af:2d:c5:7a:79:79: 09:e9:99:91:9a:28:e1:a7:ca:f1:37:e6:0a:7a:2b:2d:82:0c: ad:cc:46:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLsC01s8u3VrrUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk MmMwNDQyNTUtZWYzNi00MjA3LWJmYmYtMmE2Y2Q0OWQ2ZjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorVlJmWeySY1tbabmJFUaxC0h4vlz6Fn4zbg bhFl/57cAUXow6yDhVDt4pqzrkdLzNQYHUyiVmrckU70zNNRst0fFSizSM4E9Lwt UwOZHdv07NMGnRicD4VIpzl+1CZweh0bwgCekvQsacSZanrvKH40hkK1SnpZ1ZTV 8+NFceQVt0n/YGR2pBPUiboazKPSu9k1Et5Nb29+C1Q+Ts9mbCw6RoMTU9XHxyTL WG6hbQQOjGvhuG8amxZxWX/Rl/v6ECfD9QzJCzeJavNCZZU4HXzYYghuD1YKBh6m 4u2qgX8JqjxhjN8byMTrhaTZNlmqB5BbpjTKGglU4CWklSFAKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNhNLBLATFzfRKOGuIfSeHzv2VuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWU5ZTFjM2MtNmVkZC0z N2E0LWI1YzItMGZiNjVjMWFiYTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8DMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqkIfnXLdWv5epw5huXlN5tjVoC/AZazpo9woxP5GoS7SxZZi2wO7xb tu3uwZDrOkIJ1rbDHQX6Fq3wpBOmw0oe8WflCTpXFQCrh29AkgLuKJa/L7JATtI3 U1U3Jgve/WNkhcP0gFZIR+Tp+eerBG27AfMeydv3qozJ7h+tI3khkB9KytJen9a8 m8Iose8vDJAzlVsTIqAjGCQvZXWloDKhfnh9J8cRyxK51cuEG+++kFhNuauSr4O/ 6B13LR+1MB6N1u4tKwFa1HeNkXPWqTS4/1Y1dENtpT812sOaIPVjAGsnMa8txXp5 eQnpmZGaKOGnyvE35gp6Ky2CDK3MRv0= -----END CERTIFICATE-----Generated at Sat Apr 5 12:12:58 2025 by rpki-client