$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d678fa26-61ac-31c0-9e3b-f1569437cda2.roa File: d678fa26-61ac-31c0-9e3b-f1569437cda2.roa (raw, json) Hash identifier: nFGEeBM+wWE4zdu0KyVv9JZvMJpn9CXtNmsV3HVsBCM= Subject key identifier: BB:07:E4:F7:E4:C5:E4:5D:79:64:A4:E9:2D:48:EE:82:D6:90:26:35 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849797447539D952062EF0EA080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d678fa26-61ac-31c0-9e3b-f1569437cda2.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.210.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:47:53:9d:95:20:62:ef:0e:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=746c75d6-f875-492a-a798-93140579551d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3b:83:f2:2e:b8:1c:5d:8c:80:5e:c8:a2:30: 8b:a5:83:b2:ba:44:d1:7f:82:2d:a6:97:f4:ad:7d: bb:6d:df:e7:a1:6a:55:16:d8:95:43:d7:e3:67:7e: 1c:25:c2:16:17:a9:35:06:e4:18:ec:f0:26:20:63: f3:c8:13:c1:89:32:a4:d1:bc:d4:ca:63:1e:25:f4: bc:d7:2d:15:0c:ae:e5:5f:c0:b1:86:b5:ea:29:8f: 15:44:25:68:76:7f:9f:98:8d:8a:1f:98:0e:26:fc: f6:d1:6b:93:1a:0f:45:42:ac:8c:57:3d:12:13:a1: 61:6b:56:02:b6:87:e6:ea:1c:18:39:27:c2:e0:8d: fc:bd:c4:52:94:5a:84:7e:dd:03:14:5f:68:90:b2: 26:57:ef:70:6a:7e:6e:f5:81:08:3f:9e:09:8e:a3: cf:4c:3b:36:b2:3a:57:23:aa:2b:3b:1c:67:1d:95: 4b:23:43:57:e1:cd:bb:7f:63:a4:57:39:27:2f:16: 48:f8:b6:e5:68:cc:25:65:1b:c8:38:d7:e5:2e:32: 51:0b:f3:d2:6b:d4:c1:91:72:b1:c8:74:67:0c:e6: eb:d2:1b:12:3d:4a:98:79:f9:c1:8b:2f:e3:33:2c: 4d:b3:5b:77:4c:7f:5b:d5:31:0b:23:98:67:d2:d1: d4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:07:E4:F7:E4:C5:E4:5D:79:64:A4:E9:2D:48:EE:82:D6:90:26:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d678fa26-61ac-31c0-9e3b-f1569437cda2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:12:29:63:d3:29:cf:6b:98:32:21:c2:5c:a4:7a:e6:fd:32: b3:9c:fd:45:2c:d4:a5:38:4a:f8:57:29:2a:c6:97:c6:01:74: 99:1a:db:61:d2:e8:62:16:eb:a8:d1:4a:73:8d:ea:53:e5:f5: 56:37:4d:94:ea:bb:0a:ee:35:21:63:17:c1:0c:3d:5d:33:30: 56:a6:01:fd:23:7b:99:fd:1b:69:09:4d:0c:a4:9c:45:d6:b2: c7:55:72:db:b6:5e:f6:25:39:ed:f3:04:66:5a:05:f7:fb:70: 34:e4:48:02:22:f6:1f:b0:7f:6e:76:fc:a6:90:55:14:8c:bf: b7:70:f2:d2:c3:32:74:2c:3d:d2:96:fd:2c:67:f0:2a:77:ae: 0b:ce:99:67:f9:f5:71:b0:0e:d2:57:8d:e6:fa:d6:b0:af:28: f5:ab:a4:d0:6e:e2:9c:ee:8c:cc:03:47:95:32:81:ca:95:5d: 2e:14:2e:18:4a:48:42:4d:a5:a0:0c:e2:f7:2c:46:01:02:cf: 40:3e:58:b8:e2:d5:76:d0:5a:e6:45:5a:ec:1a:0a:3a:38:e2: 1f:2f:da:7c:e9:55:a9:85:d7:ff:b3:f0:46:79:b3:8b:85:3f: cc:21:ce:a1:a2:bc:e0:6b:ad:5a:f1:ca:8d:b1:88:98:e3:47: 1a:a8:d8:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5dEdTnZUgYu8OoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk NzQ2Yzc1ZDYtZjg3NS00OTJhLWE3OTgtOTMxNDA1Nzk1NTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjuD8i64HF2MgF7IojCLpYOyukTRf4Itppf0 rX27bd/noWpVFtiVQ9fjZ34cJcIWF6k1BuQY7PAmIGPzyBPBiTKk0bzUymMeJfS8 1y0VDK7lX8CxhrXqKY8VRCVodn+fmI2KH5gOJvz20WuTGg9FQqyMVz0SE6Fha1YC tofm6hwYOSfC4I38vcRSlFqEft0DFF9okLImV+9wan5u9YEIP54JjqPPTDs2sjpX I6orOxxnHZVLI0NX4c27f2OkVzknLxZI+LblaMwlZRvIONflLjJRC/PSa9TBkXKx yHRnDObr0hsSPUqYefnBiy/jMyxNs1t3TH9b1TELI5hn0tHUmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsH5PfkxeRdeWSk6S1I7oLWkCY1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDY3OGZhMjYtNjFhYy0z MWMwLTllM2ItZjE1Njk0MzdjZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9L7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoSKWPTKc9rmDIhwlykeub9MrOc/UUs1KU4SvhXKSrGl8YBdJka22HS 6GIW66jRSnON6lPl9VY3TZTquwruNSFjF8EMPV0zMFamAf0je5n9G2kJTQyknEXW ssdVctu2XvYlOe3zBGZaBff7cDTkSAIi9h+wf252/KaQVRSMv7dw8tLDMnQsPdKW /Sxn8Cp3rgvOmWf59XGwDtJXjeb61rCvKPWrpNBu4pzujMwDR5UygcqVXS4ULhhK SEJNpaAM4vcsRgECz0A+WLji1XbQWuZFWuwaCjo44h8v2nzpVamF1/+z8EZ5s4uF P8whzqGivOBrrVrxyo2xiJjjRxqo2NA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:17:36 2025 by rpki-client