$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9add5db-07de-37ab-8f25-a960b8ce9fc9.roa File: c9add5db-07de-37ab-8f25-a960b8ce9fc9.roa (raw, json) Hash identifier: NmRK6TnQGLPBFDB+vcqItp6IDEk21hwW6xSW53nkSxM= Subject key identifier: 13:F5:9A:C6:E9:6A:72:5A:C6:66:5E:DB:46:FF:32:F4:55:59:D1:8F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849DF5A610940D179F466B05E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9add5db-07de-37ab-8f25-a960b8ce9fc9.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 24319 IP address blocks: 23.205.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:61:09:40:d1:79:f4:66:b0:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=e78e8b2d-1ce6-4819-ab61-9ccd8cf1ca23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6a:f3:f4:48:8f:f7:14:79:21:39:77:d2:92: e9:68:de:80:a9:51:a8:0d:be:d0:43:72:0c:3c:3c: 29:af:5a:3e:ce:44:09:df:09:cc:9a:73:7b:26:ba: 47:c9:b4:96:0f:ce:11:47:2c:d0:72:af:2b:d5:f8: 0c:d3:ae:40:19:5d:39:37:92:2f:16:76:30:d2:7c: 7d:b2:c0:4a:db:1a:87:19:b6:8f:b1:2d:dd:e6:a9: 43:0f:7a:1a:22:07:f4:72:53:e0:e0:1d:0f:c3:8c: 89:64:60:2b:fc:b8:92:b1:92:5c:85:76:84:d0:df: ae:4f:2e:17:92:4c:b9:4b:ef:db:b9:8b:38:14:0c: e2:ab:3e:f4:a6:59:66:f3:9d:cf:8e:2c:61:88:eb: 00:4b:66:1d:62:b0:5f:2a:e5:89:41:9d:23:33:90: 4a:36:60:e2:2c:b9:16:8c:92:8d:2e:54:64:b9:44: 18:0e:06:cf:70:20:d3:fe:ba:fe:52:ec:46:8a:46: 23:96:d0:61:85:b0:1b:dd:3b:33:e5:c9:f7:df:0e: c0:cb:6c:32:f9:25:fd:31:f0:40:11:bd:b0:d8:b9: 89:18:62:57:bb:98:74:1f:5f:c9:09:aa:b6:59:98: 38:bd:09:ca:ab:fd:9c:69:14:5d:64:78:f5:25:41: af:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F5:9A:C6:E9:6A:72:5A:C6:66:5E:DB:46:FF:32:F4:55:59:D1:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9add5db-07de-37ab-8f25-a960b8ce9fc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:f8:fd:fc:5b:3e:03:cd:7c:19:e6:15:70:dd:e2:8c:29:a9: 52:ca:c3:89:46:26:7a:a9:86:e9:e9:6a:19:90:ae:e7:db:82: f3:e7:3f:20:b7:ca:4c:49:e5:69:1e:4e:b3:09:32:a3:7a:46: e7:ba:6d:9d:ca:9d:58:33:87:f7:9f:c5:74:ed:00:25:e9:ea: d2:20:ac:c6:45:84:43:0a:8f:1b:f5:4b:c9:84:a0:b0:31:9f: fb:f4:a9:b5:b8:6f:0a:3f:0f:a3:f9:09:cd:2c:44:28:fd:9e: 62:3c:a3:ed:55:7f:14:e8:d2:57:f0:fb:58:5f:79:ce:45:36: cc:da:d0:6d:c8:c9:0b:8f:e9:ac:3b:57:24:fa:87:9c:16:a5: ca:50:2a:91:3c:7c:06:61:64:45:85:eb:b4:10:91:a9:a2:29: 5e:85:77:52:b0:64:71:9e:a5:4f:ea:86:d2:45:53:5d:03:1b: 87:25:b0:ee:ce:d2:c6:a5:b1:d1:f1:41:60:c9:bc:21:a4:06: 21:78:67:f7:69:14:75:85:c8:0d:6c:26:1f:c9:dd:7d:80:66: 24:e2:61:b5:c6:b8:3c:b5:7c:9b:d0:db:7e:d0:55:e1:9d:27: 59:7e:a9:3d:5f:0b:e2:6c:e0:02:98:9f:0f:d7:bc:47:3a:11: 90:43:bb:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWmEJQNF59GawXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZTc4ZThiMmQtMWNlNi00ODE5LWFiNjEtOWNjZDhjZjFjYTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWrz9EiP9xR5ITl30pLpaN6AqVGoDb7QQ3IM PDwpr1o+zkQJ3wnMmnN7JrpHybSWD84RRyzQcq8r1fgM065AGV05N5IvFnYw0nx9 ssBK2xqHGbaPsS3d5qlDD3oaIgf0clPg4B0Pw4yJZGAr/LiSsZJchXaE0N+uTy4X kky5S+/buYs4FAziqz70pllm853PjixhiOsAS2YdYrBfKuWJQZ0jM5BKNmDiLLkW jJKNLlRkuUQYDgbPcCDT/rr+UuxGikYjltBhhbAb3Tsz5cn33w7Ay2wy+SX9MfBA Eb2w2LmJGGJXu5h0H1/JCaq2WZg4vQnKq/2caRRdZHj1JUGvywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBP1msbpanJaxmZe20b/MvRVWdGPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzlhZGQ1ZGItMDdkZS0z N2FiLThmMjUtYTk2MGI4Y2U5ZmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF81wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFT4/fxbPgPNfBnmFXDd4owpqVLKw4lGJnqphunpahmQrufbgvPnPyC3 ykxJ5WkeTrMJMqN6Rue6bZ3KnVgzh/efxXTtACXp6tIgrMZFhEMKjxv1S8mEoLAx n/v0qbW4bwo/D6P5Cc0sRCj9nmI8o+1VfxTo0lfw+1hfec5FNsza0G3IyQuP6aw7 VyT6h5wWpcpQKpE8fAZhZEWF67QQkamiKV6Fd1KwZHGepU/qhtJFU10DG4clsO7O 0salsdHxQWDJvCGkBiF4Z/dpFHWFyA1sJh/J3X2AZiTiYbXGuDy1fJvQ237QVeGd J1l+qT1fC+Js4AKYnw/XvEc6EZBDu7s= -----END CERTIFICATE-----Generated at Fri Jun 6 04:58:18 2025 by rpki-client