$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcad7221-dde8-3e43-b459-3f5879926769.roa File: bcad7221-dde8-3e43-b459-3f5879926769.roa (raw, json) Hash identifier: 2rBamlmIXkYXUFr2qYiyFSCFHbxgzs4jCKd10pMHWV0= Subject key identifier: 22:15:61:E3:7E:8B:F8:F8:74:F9:78:98:86:6F:46:68:10:08:F2:41 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849C904F6F767AA5CC3E65219D0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcad7221-dde8-3e43-b459-3f5879926769.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 20940 IP address blocks: 23.206.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:f6:f7:67:aa:5c:c3:e6:52:19:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=2dffc30d-2104-4647-886f-726ffed55a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bd:51:08:75:8b:8f:8e:2e:5d:6a:48:4d:cc: 9a:1b:16:f3:f7:b4:52:0f:9c:e2:6a:19:99:0f:9d: 2e:55:a2:14:a1:2b:14:45:70:3a:04:80:e9:3b:2b: 45:47:39:ef:1c:bb:ba:6d:01:1f:88:74:47:5b:8e: 67:04:fb:51:59:95:da:0d:75:69:79:67:c4:79:5c: f6:c5:7e:75:72:7f:a7:6e:71:7e:2c:c9:1f:d4:50: 93:fa:3d:f6:f0:56:bb:35:15:f1:ef:e8:22:fb:b2: 22:91:b9:ba:24:0d:15:b9:35:da:b6:85:fc:cc:51: b4:ab:85:14:d3:ba:d5:eb:f6:80:9d:2d:51:e2:4b: c6:03:a2:ea:ad:15:55:25:4c:ad:1e:15:03:4e:c7: 08:b7:f9:3c:f0:4c:d4:52:68:75:8b:c0:a9:c7:14: d8:2c:b9:cb:f8:bb:00:63:f4:0b:3d:b0:01:36:69: 41:65:51:79:32:36:b2:43:1a:7d:e4:03:86:fc:52: b7:e8:60:e6:a9:92:9c:f9:93:cb:44:57:50:f2:20: 40:24:c4:87:f3:84:ee:8f:7a:b2:c8:52:a8:61:43: 51:9d:34:c0:7a:96:eb:62:31:82:e2:f3:9e:53:ee: 75:51:00:3c:30:e0:0f:fd:50:71:e0:89:f9:2b:b4: b7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:15:61:E3:7E:8B:F8:F8:74:F9:78:98:86:6F:46:68:10:08:F2:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcad7221-dde8-3e43-b459-3f5879926769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:39:17:52:4c:e9:ec:59:6b:c7:79:79:79:40:c9:8e:43:b3: 63:04:29:c7:f2:e4:68:24:af:61:96:f0:d5:aa:4b:17:e8:c6: 6e:1d:7e:47:26:98:bf:9a:9b:0b:8e:af:fb:3c:71:3e:34:80: c5:a6:93:bb:d1:45:e4:6e:f7:01:05:92:b1:15:81:6a:3b:94: 07:bd:78:07:61:99:06:10:8a:8c:94:c5:40:d3:4f:0c:f3:8a: 9a:c5:80:aa:27:fd:5c:14:a9:cc:86:d3:82:14:fe:52:df:d9: fe:bd:42:26:6a:65:4b:7f:86:03:fe:57:ca:96:91:72:4b:eb: 61:45:13:9d:74:2f:90:93:fe:3a:49:a9:21:ac:93:a2:0e:d0: 93:c3:75:14:2c:d4:69:8b:d1:ae:21:78:1f:23:11:d9:8a:96: 36:be:68:5e:a6:04:90:63:0d:87:f7:43:6f:e9:e1:f0:7e:71: fd:f7:06:3c:f3:cb:74:3d:ff:00:7d:56:17:6a:e7:ed:2b:4d: 9a:ac:6e:46:34:ed:3f:a1:84:98:39:c9:57:94:46:e4:12:61: 0d:58:ed:60:c9:fe:d9:b0:7f:49:53:a3:22:a9:b1:e4:34:44: c4:60:0e:20:26:45:9e:1c:03:63:50:59:a4:4d:97:e8:ac:f6: a3:f3:cc:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBPb3Z6pcw+ZSGdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk MmRmZmMzMGQtMjEwNC00NjQ3LTg4NmYtNzI2ZmZlZDU1YTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib1RCHWLj44uXWpITcyaGxbz97RSD5ziahmZ D50uVaIUoSsURXA6BIDpOytFRznvHLu6bQEfiHRHW45nBPtRWZXaDXVpeWfEeVz2 xX51cn+nbnF+LMkf1FCT+j328Fa7NRXx7+gi+7Iikbm6JA0VuTXatoX8zFG0q4UU 07rV6/aAnS1R4kvGA6LqrRVVJUytHhUDTscIt/k88EzUUmh1i8CpxxTYLLnL+LsA Y/QLPbABNmlBZVF5MjayQxp95AOG/FK36GDmqZKc+ZPLRFdQ8iBAJMSH84Tuj3qy yFKoYUNRnTTAepbrYjGC4vOeU+51UQA8MOAP/VBx4In5K7S3twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIVYeN+i/j4dPl4mIZvRmgQCPJBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmNhZDcyMjEtZGRlOC0z ZTQzLWI0NTktM2Y1ODc5OTI2NzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF87EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAI5F1JM6exZa8d5eXlAyY5Ds2MEKcfy5Ggkr2GW8NWqSxfoxm4dfkcm mL+amwuOr/s8cT40gMWmk7vRReRu9wEFkrEVgWo7lAe9eAdhmQYQioyUxUDTTwzz iprFgKon/VwUqcyG04IU/lLf2f69QiZqZUt/hgP+V8qWkXJL62FFE510L5CT/jpJ qSGsk6IO0JPDdRQs1GmL0a4heB8jEdmKlja+aF6mBJBjDYf3Q2/p4fB+cf33Bjzz y3Q9/wB9Vhdq5+0rTZqsbkY07T+hhJg5yVeURuQSYQ1Y7WDJ/tmwf0lToyKpseQ0 RMRgDiAmRZ4cA2NQWaRNl+is9qPzzCI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:32:32 2025 by rpki-client