$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0c5231c-6933-3b40-aa6c-89c0a4d997db.roa File: c0c5231c-6933-3b40-aa6c-89c0a4d997db.roa (raw, json) Hash identifier: LPLk4ImvNWOVW8OgVUD10pbDEWs30/h/mz/rfKtJPCE= Subject key identifier: F3:85:15:3B:EC:81:9E:C5:8A:D3:37:81:5E:F7:88:BD:53:9D:AB:E9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849D85FCE3B346F5E2DBDD6EF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0c5231c-6933-3b40-aa6c-89c0a4d997db.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.195.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:ce:3b:34:6f:5e:2d:bd:d6:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=865e4792-37e7-4ca7-832d-63bc7407083d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bf:f2:b5:10:51:c2:90:86:b6:ef:61:04:d3: 3a:ee:49:b1:67:c5:42:6e:9b:ce:70:8c:4b:b8:45: 88:7b:be:a0:3f:1e:39:06:06:59:fb:64:92:d0:6e: dc:25:35:2b:23:8d:21:94:86:09:c3:58:0e:2c:73: 06:6d:dd:c5:50:12:42:32:5c:f2:98:cf:15:70:52: 19:9c:85:9d:83:e9:66:7c:dc:8f:89:03:83:84:22: 81:32:eb:db:c9:cc:12:b9:74:00:b6:24:c1:bc:17: 2b:fa:f4:fb:da:6b:b5:45:78:2b:3f:c7:13:50:7e: 5c:88:3b:ee:33:86:95:0a:0d:d3:8b:b6:f7:d3:e2: 0c:2f:1c:26:8f:21:18:e0:d8:2a:b8:ca:cf:8b:3c: 2b:d6:f8:21:3a:27:50:52:b9:10:6c:74:03:d6:96: f8:a9:d4:c3:94:8e:04:87:e0:0c:97:55:a3:8b:d0: a5:40:ce:62:93:51:d6:22:65:fc:e7:7d:16:f7:64: 28:bf:f3:81:e3:73:6e:e8:41:14:7c:4a:0d:e6:9f: 42:af:88:37:db:1b:27:21:81:25:41:b9:22:a5:36: ea:40:70:46:c4:a7:ea:3e:fc:66:49:94:98:ce:7e: d4:d0:c0:d2:dd:ca:e2:bd:bc:a1:14:b5:49:34:20: 0e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:85:15:3B:EC:81:9E:C5:8A:D3:37:81:5E:F7:88:BD:53:9D:AB:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0c5231c-6933-3b40-aa6c-89c0a4d997db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:24:57:20:f2:ad:fe:5f:35:ae:6b:28:0b:ad:0e:71:d4:cf: af:f5:8d:98:8d:07:f0:8b:af:93:08:ac:77:bf:49:4e:9b:91: a3:29:66:c4:81:f9:1b:d4:5d:4a:97:c5:39:cb:2b:75:df:f9: 20:00:5f:e2:1b:03:31:42:28:77:2b:c1:90:5b:bd:5f:77:6a: f7:05:23:4a:67:bc:32:1d:22:ba:cb:39:8d:68:cf:3c:56:76: 94:8f:35:51:77:fd:cc:36:34:71:5e:3b:21:05:71:06:72:59: 76:50:d3:5a:4e:b0:8c:36:73:21:65:6a:2f:10:45:48:73:67: 86:ae:d4:24:b7:6b:a0:5d:7d:c2:06:5e:03:2b:b1:95:54:de: 4b:8a:cb:4e:59:88:83:22:45:26:c6:3c:3b:91:69:33:b6:33: e3:c5:94:c9:6a:c4:d4:05:ea:97:bd:4c:63:ac:f8:8b:55:61: 31:56:a5:5a:93:e6:88:28:7a:32:fc:dc:a3:31:26:9b:d9:36: fe:5f:65:24:84:5a:c8:c2:3d:96:1e:9e:f3:dc:88:ac:84:48: 6a:49:2b:c1:da:d8:01:61:b9:ea:b0:7b:20:27:b9:fe:15:4e: 97:13:d7:1f:eb:59:59:05:87:b5:a4:3d:6c:89:b1:d8:00:36: 58:8a:9a:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX847NG9eLb3W7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ODY1ZTQ3OTItMzdlNy00Y2E3LTgzMmQtNjNiYzc0MDcwODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur/ytRBRwpCGtu9hBNM67kmxZ8VCbpvOcIxL uEWIe76gPx45BgZZ+2SS0G7cJTUrI40hlIYJw1gOLHMGbd3FUBJCMlzymM8VcFIZ nIWdg+lmfNyPiQODhCKBMuvbycwSuXQAtiTBvBcr+vT72mu1RXgrP8cTUH5ciDvu M4aVCg3Ti7b30+IMLxwmjyEY4NgquMrPizwr1vghOidQUrkQbHQD1pb4qdTDlI4E h+AMl1Wji9ClQM5ik1HWImX8530W92Qov/OB43Nu6EEUfEoN5p9Cr4g32xsnIYEl QbkipTbqQHBGxKfqPvxmSZSYzn7U0MDS3crivbyhFLVJNCAOrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOFFTvsgZ7FitM3gV73iL1TnavpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzBjNTIzMWMtNjkzMy0z YjQwLWFhNmMtODljMGE0ZDk5N2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8NrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIskVyDyrf5fNa5rKAutDnHUz6/1jZiNB/CLr5MIrHe/SU6bkaMpZsSB +RvUXUqXxTnLK3Xf+SAAX+IbAzFCKHcrwZBbvV93avcFI0pnvDIdIrrLOY1ozzxW dpSPNVF3/cw2NHFeOyEFcQZyWXZQ01pOsIw2cyFlai8QRUhzZ4au1CS3a6BdfcIG XgMrsZVU3kuKy05ZiIMiRSbGPDuRaTO2M+PFlMlqxNQF6pe9TGOs+ItVYTFWpVqT 5ogoejL83KMxJpvZNv5fZSSEWsjCPZYenvPciKyESGpJK8Ha2AFhueqweyAnuf4V TpcT1x/rWVkFh7WkPWyJsdgANliKmgI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:21:27 2025 by rpki-client