$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c286dade-7563-35b5-b40f-3ad8b7e2407f.roa File: c286dade-7563-35b5-b40f-3ad8b7e2407f.roa (raw, json) Hash identifier: u27mZ0LxbTiwrVLlsZF4+1ZSn76dFLjJcA4xvQamgl8= Subject key identifier: BA:06:C9:89:6E:4D:63:9D:88:7C:0C:32:D0:F8:8A:28:DF:B6:17:D8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EBABCA04D5475FE564CA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c286dade-7563-35b5-b40f-3ad8b7e2407f.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.196.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:ba:bc:a0:4d:54:75:fe:56:4c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=990e0400-f276-4d4b-9bca-bbaf8b58dc41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:78:6c:c5:28:30:57:25:26:1d:e4:fb:0c:7a: 2b:02:01:f9:e0:60:69:56:2c:e7:b7:4a:65:f1:d0: 29:80:fe:8e:56:db:9e:92:fd:07:a1:84:84:94:1c: f3:0b:2e:d0:81:64:06:87:95:22:20:64:78:01:cf: 90:d5:38:f6:02:0a:d4:e3:5a:e8:a7:57:1a:4b:db: c1:87:cd:4f:c6:a5:2f:87:ce:a3:ea:f7:fc:d1:69: a9:3b:65:59:78:46:8a:ea:a3:24:bc:86:9b:d6:9b: 49:33:7b:37:cf:1e:8a:07:b0:75:56:8f:bc:ee:42: 24:6a:21:1b:78:b8:97:6f:0a:a8:40:75:d1:45:fa: a0:f2:17:8b:a7:c0:fc:b5:fa:24:80:61:09:ba:c0: 6a:df:0c:62:5e:1e:04:92:ee:a5:38:d9:e2:d5:cf: 94:ae:9b:f1:e7:69:bb:62:53:5c:23:45:d8:93:87: 77:a3:fa:4d:75:d2:49:92:ea:f4:e1:fd:f6:83:9c: b6:1b:8a:bf:e2:67:43:88:2b:8a:09:48:54:02:dc: 81:ce:b7:3d:0c:5c:9d:a5:cf:5f:f6:57:c8:0d:45: 5d:a4:15:39:e9:33:18:7e:1f:b1:fd:b4:fb:f7:be: 06:a7:df:91:34:2d:96:c8:ca:76:af:a8:2c:d0:b2: 2f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:06:C9:89:6E:4D:63:9D:88:7C:0C:32:D0:F8:8A:28:DF:B6:17:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c286dade-7563-35b5-b40f-3ad8b7e2407f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:06:d6:56:27:d8:59:af:87:aa:d3:01:99:d2:33:4f:cb:21: 1d:7a:71:4a:c8:e0:92:5e:d7:c3:0c:19:0c:a4:49:1c:79:ae: b0:ad:8d:c4:47:49:5f:85:c1:cc:e5:8d:62:0a:d4:12:43:ac: 63:a9:1c:bb:c4:4c:50:99:35:6b:e8:b0:05:c5:ac:7b:c0:98: 14:37:1e:ed:07:24:36:34:89:53:95:1d:8c:ba:8e:af:86:0d: 32:d6:85:af:e1:e2:a5:c6:4f:d2:44:e8:f8:3b:61:a5:2d:c6: c0:b4:b9:3c:54:30:c1:91:0c:6c:83:93:58:d7:67:b7:92:9f: 88:2c:1a:14:a7:a8:a1:8b:34:7c:26:c8:8a:1b:ae:7f:7d:01: 07:5f:80:f8:ea:83:4f:e5:f4:f8:d9:b9:88:df:87:53:db:c7: 9d:e3:d7:32:7b:3f:0d:62:9a:17:95:d0:5b:91:01:58:67:a6: 40:67:9e:99:68:ed:93:f9:5b:ed:60:d8:3c:07:e5:75:09:61: 2c:4c:6e:06:98:dc:e5:6c:76:34:5d:84:7d:20:4f:7c:dc:ca: 0b:e1:39:56:7b:0b:f9:4f:87:84:03:54:a4:35:0b:92:78:8a: 06:88:27:c1:a7:0b:f6:f9:24:0b:60:60:18:93:9d:e7:57:2b: e7:a7:3c:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrq8oE1Udf5WTKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk OTkwZTA0MDAtZjI3Ni00ZDRiLTliY2EtYmJhZjhiNThkYzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXhsxSgwVyUmHeT7DHorAgH54GBpViznt0pl 8dApgP6OVtuekv0HoYSElBzzCy7QgWQGh5UiIGR4Ac+Q1Tj2AgrU41rop1caS9vB h81PxqUvh86j6vf80WmpO2VZeEaK6qMkvIab1ptJM3s3zx6KB7B1Vo+87kIkaiEb eLiXbwqoQHXRRfqg8heLp8D8tfokgGEJusBq3wxiXh4Eku6lONni1c+Urpvx52m7 YlNcI0XYk4d3o/pNddJJkur04f32g5y2G4q/4mdDiCuKCUhUAtyBzrc9DFydpc9f 9lfIDUVdpBU56TMYfh+x/bT7974Gp9+RNC2WyMp2r6gs0LIvDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoGyYluTWOdiHwMMtD4iijfthfYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzI4NmRhZGUtNzU2My0z NWI1LWI0MGYtM2FkOGI3ZTI0MDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8TjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwG1lYn2Fmvh6rTAZnSM0/LIR16cUrI4JJe18MMGQykSRx5rrCtjcRH SV+FwczljWIK1BJDrGOpHLvETFCZNWvosAXFrHvAmBQ3Hu0HJDY0iVOVHYy6jq+G DTLWha/h4qXGT9JE6Pg7YaUtxsC0uTxUMMGRDGyDk1jXZ7eSn4gsGhSnqKGLNHwm yIobrn99AQdfgPjqg0/l9PjZuYjfh1Pbx53j1zJ7Pw1imheV0FuRAVhnpkBnnplo 7ZP5W+1g2DwH5XUJYSxMbgaY3OVsdjRdhH0gT3zcygvhOVZ7C/lPh4QDVKQ1C5J4 igaIJ8GnC/b5JAtgYBiTnedXK+enPEE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:09:16 2025 by rpki-client