$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a401b9ce-91c6-364d-bf85-56b1a59df6e8.roa File: a401b9ce-91c6-364d-bf85-56b1a59df6e8.roa (raw, json) Hash identifier: p4nKYp529iX4eP9/Hm9pM0T/Wm8pga+xhPqVLJhFT5Q= Subject key identifier: 4B:8D:1A:47:E4:0D:BD:93:2A:13:6F:FF:90:6F:9F:CE:9D:25:3E:E1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A6CB6F296C6A84D5E10CBB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a401b9ce-91c6-364d-bf85-56b1a59df6e8.roa Signing time: Fri 24 Jan 2025 14:00:52 +0000 ROA not before: Fri 24 Jan 2025 14:00:52 +0000 ROA not after: Thu 24 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.199.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a6:cb:6f:29:6c:6a:84:d5:e1:0c:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 24 14:00:52 2025 GMT Not After : Apr 24 13:00:52 2025 GMT Subject: CN=28860174-99fa-4947-b4a0-10603a3c349a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9b:55:27:d2:99:b2:99:d7:3e:2d:a5:b5:5f: 35:d3:20:32:2f:04:83:45:72:07:de:32:8a:3c:93: 73:ad:6b:73:47:54:4e:8f:70:3e:3e:32:2e:0d:73: de:bd:79:55:f3:9d:b5:19:63:ae:c8:4a:6b:33:1a: e7:d3:15:09:d7:01:ab:89:4b:12:8b:a1:02:84:1b: 0c:d9:4a:25:c5:63:97:80:6b:20:c2:22:8d:69:59: 41:10:86:38:ea:fc:05:ad:c8:83:93:f0:1a:9a:37: d5:8b:18:4a:4e:dc:1d:59:17:78:87:d6:41:c7:aa: f1:28:97:ff:15:96:c4:5b:e1:2d:c7:e7:c7:78:04: 75:44:87:b9:21:38:15:23:9c:14:32:59:13:47:a5: 86:12:ca:84:ac:d4:44:1e:65:26:fd:ef:70:96:92: c6:c1:ab:e6:45:17:10:82:f9:43:71:ef:9b:44:a3: 4a:60:46:1d:26:d8:c5:b7:a8:59:42:c9:55:4d:2a: a2:75:87:66:c8:5f:ea:92:66:59:07:4c:eb:05:65: ee:4f:ae:ad:46:83:93:bc:9e:a2:88:95:08:58:4c: bc:5e:5c:a4:3b:63:37:92:df:cc:c3:9a:e8:0a:65: 3a:06:84:c3:3e:7a:15:77:71:fd:22:fc:6e:ba:7a: 41:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8D:1A:47:E4:0D:BD:93:2A:13:6F:FF:90:6F:9F:CE:9D:25:3E:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a401b9ce-91c6-364d-bf85-56b1a59df6e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:48:d4:6d:16:91:00:7c:dd:18:4e:b9:2c:6d:47:be:b9:ae: 2f:ca:59:c2:5e:64:2f:8c:61:7a:75:19:08:90:21:63:be:23: b5:15:1b:36:ac:cc:6a:42:1f:37:0f:53:1b:ca:02:3f:3a:9a: 88:0d:5d:9b:fd:99:5b:0b:bc:70:82:5c:53:6b:4b:26:c8:74: d0:32:dd:1e:ec:d2:d1:25:19:6f:78:e8:56:68:c7:57:12:0b: 3e:aa:7f:a7:88:2a:fb:e9:69:8b:f3:70:6a:41:46:13:98:08: e1:a4:72:78:41:15:0e:66:5b:9f:be:83:99:4f:ff:3a:5a:8d: 8a:41:06:ca:29:3e:5b:5d:18:18:31:36:12:f6:3e:c3:c4:0b: 5c:72:9f:5a:20:50:64:98:0d:04:a0:25:6d:e0:36:07:2a:d6: ba:f0:e9:62:bf:2f:8a:a9:b5:83:3c:77:c7:ba:81:13:9a:2d: ef:06:42:ef:e0:e6:8a:23:da:88:a5:4c:b3:77:d9:33:70:3b: 89:a2:a2:1e:cf:a0:3b:2c:15:b0:3d:9f:54:55:b2:64:48:5f: bb:6b:51:39:2e:62:56:03:36:a0:ed:72:ca:83:a8:64:4b:97: 50:57:15:b2:d6:41:e1:cc:be:a0:1d:52:16:3f:da:51:e7:51: 83:92:65:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEimy28pbGqE1eEMu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNDE0MDA1MloXDTI1MDQyNDEzMDA1MlowLzEtMCsGA1UEAxMk Mjg4NjAxNzQtOTlmYS00OTQ3LWI0YTAtMTA2MDNhM2MzNDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JtVJ9KZspnXPi2ltV810yAyLwSDRXIH3jKK PJNzrWtzR1ROj3A+PjIuDXPevXlV8521GWOuyEprMxrn0xUJ1wGriUsSi6EChBsM 2UolxWOXgGsgwiKNaVlBEIY46vwFrciDk/AamjfVixhKTtwdWRd4h9ZBx6rxKJf/ FZbEW+Etx+fHeAR1RIe5ITgVI5wUMlkTR6WGEsqErNREHmUm/e9wlpLGwavmRRcQ gvlDce+bRKNKYEYdJtjFt6hZQslVTSqidYdmyF/qkmZZB0zrBWXuT66tRoOTvJ6i iJUIWEy8XlykO2M3kt/Mw5roCmU6BoTDPnoVd3H9IvxuunpBswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuNGkfkDb2TKhNv/5Bvn86dJT7hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTQwMWI5Y2UtOTFjNi0z NjRkLWJmODUtNTZiMWE1OWRmNmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8foMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZI1G0WkQB83RhOuSxtR765ri/KWcJeZC+MYXp1GQiQIWO+I7UVGzas zGpCHzcPUxvKAj86mogNXZv9mVsLvHCCXFNrSybIdNAy3R7s0tElGW946FZox1cS Cz6qf6eIKvvpaYvzcGpBRhOYCOGkcnhBFQ5mW5++g5lP/zpajYpBBsopPltdGBgx NhL2PsPEC1xyn1ogUGSYDQSgJW3gNgcq1rrw6WK/L4qptYM8d8e6gROaLe8GQu/g 5ooj2oilTLN32TNwO4mioh7PoDssFbA9n1RVsmRIX7trUTkuYlYDNqDtcsqDqGRL l1BXFbLWQeHMvqAdUhY/2lHnUYOSZcg= -----END CERTIFICATE-----Generated at Sat Apr 5 12:27:50 2025 by rpki-client