$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5eb6d38-f2c3-39d4-82c2-3f87be7b3b60.roa File: f5eb6d38-f2c3-39d4-82c2-3f87be7b3b60.roa (raw, json) Hash identifier: ixqAQ2NdUvlY17UaOXxUop7yjvTL7iWSto29n7V9i28= Subject key identifier: 9F:B8:B2:7B:14:49:3E:30:90:25:06:8C:70:A4:B5:48:A2:EC:E0:12 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498769D4FF961EFF409A12D240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5eb6d38-f2c3-39d4-82c2-3f87be7b3b60.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.200.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:d4:ff:96:1e:ff:40:9a:12:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=9204789f-be5e-4326-9170-88a8f723419e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:30:39:0a:ea:a6:7d:63:d7:b2:19:95:fe:4b: 70:48:85:54:4e:45:2f:cc:86:e1:27:6e:bd:42:71: c0:01:68:33:8f:30:59:4e:9a:38:57:ab:26:92:cd: cc:49:cc:fd:12:6f:e8:18:85:b3:cc:38:99:6c:54: c5:f0:36:c3:c7:2f:35:2e:de:9e:85:b5:49:a7:7f: 0f:9a:43:d7:3d:39:f3:b8:28:6b:5e:76:e5:e5:a4: a2:c9:7b:3b:72:44:14:47:72:ad:b2:a1:55:96:9c: a8:63:77:72:9a:a6:ed:c3:64:80:3e:21:6b:33:6c: 22:52:f8:f0:dd:74:59:84:e4:db:d9:83:85:ef:50: 75:af:77:42:a5:bc:28:63:95:23:a1:3a:ac:5f:56: 29:9a:cb:44:99:c8:1e:a9:51:75:71:87:1b:cf:ab: 0f:0e:23:fb:e7:0a:d3:c2:af:ab:9c:0b:0b:ee:d4: bd:b0:c9:7f:4c:20:98:e8:18:6d:4a:51:af:4f:54: e2:ea:96:79:40:d5:38:9e:43:ae:1a:7c:61:17:07: 07:b2:65:24:9e:9c:78:71:12:ac:9b:b9:dd:25:da: 96:65:4e:65:55:7b:18:0b:fd:39:69:69:d8:24:aa: c8:c4:ef:99:70:e0:1a:ea:31:ef:23:d4:e6:9a:6d: 90:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B8:B2:7B:14:49:3E:30:90:25:06:8C:70:A4:B5:48:A2:EC:E0:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5eb6d38-f2c3-39d4-82c2-3f87be7b3b60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a2:bd:07:79:21:9c:55:03:a7:ca:44:e6:0d:14:a5:84:b1: 47:d1:a9:88:06:20:55:33:cc:1d:52:b2:d2:3c:0a:6b:68:ea: 1a:6d:e9:1a:07:71:0a:7a:66:02:86:96:18:5d:40:0b:1e:71: 2b:11:f0:9a:71:0d:77:ca:be:3b:3f:76:74:e1:e8:5c:14:d9: 16:72:3d:ab:67:96:fb:28:ef:06:44:e0:50:01:d3:3e:4c:65: 25:31:ca:cd:7a:2c:58:07:0d:25:83:c9:b3:77:af:2f:05:d7: ce:da:b6:97:a1:3f:80:55:75:9d:47:21:23:2f:14:c5:28:05: e0:04:77:b2:dd:90:b5:08:b0:a6:4b:27:c6:f3:c4:50:d9:8e: 69:b5:f7:3b:32:68:df:df:60:9b:de:9e:04:8b:09:ed:cf:ea: 7d:c6:10:cf:e9:c5:02:ff:6a:8f:0d:31:aa:14:c3:0b:8a:a1: 78:f5:25:81:c8:a6:e1:2a:34:d0:b4:d6:be:df:f5:83:7d:4a: 60:f4:23:50:23:9e:f3:d8:6c:9d:2c:92:41:bb:cc:c1:c1:85: 44:78:f9:25:c3:63:0e:42:67:ac:0c:8b:89:37:4b:9e:b2:70: 5a:f3:17:56:1e:78:94:d5:8e:15:cf:ae:2d:1e:e0:92:0f:16: fc:0f:7b:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHadT/lh7/QJoS0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk OTIwNDc4OWYtYmU1ZS00MzI2LTkxNzAtODhhOGY3MjM0MTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTA5CuqmfWPXshmV/ktwSIVUTkUvzIbhJ269 QnHAAWgzjzBZTpo4V6smks3MScz9Em/oGIWzzDiZbFTF8DbDxy81Lt6ehbVJp38P mkPXPTnzuChrXnbl5aSiyXs7ckQUR3KtsqFVlpyoY3dymqbtw2SAPiFrM2wiUvjw 3XRZhOTb2YOF71B1r3dCpbwoY5UjoTqsX1YpmstEmcgeqVF1cYcbz6sPDiP75wrT wq+rnAsL7tS9sMl/TCCY6BhtSlGvT1Ti6pZ5QNU4nkOuGnxhFwcHsmUknpx4cRKs m7ndJdqWZU5lVXsYC/05aWnYJKrIxO+ZcOAa6jHvI9Tmmm2QQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+4snsUST4wkCUGjHCktUii7OASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjVlYjZkMzgtZjJjMy0z OWQ0LTgyYzItM2Y4N2JlN2IzYjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8jMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICivQd5IZxVA6fKROYNFKWEsUfRqYgGIFUzzB1SstI8Cmto6hpt6RoH cQp6ZgKGlhhdQAsecSsR8JpxDXfKvjs/dnTh6FwU2RZyPatnlvso7wZE4FAB0z5M ZSUxys16LFgHDSWDybN3ry8F187atpehP4BVdZ1HISMvFMUoBeAEd7LdkLUIsKZL J8bzxFDZjmm19zsyaN/fYJvengSLCe3P6n3GEM/pxQL/ao8NMaoUwwuKoXj1JYHI puEqNNC01r7f9YN9SmD0I1AjnvPYbJ0skkG7zMHBhUR4+SXDYw5CZ6wMi4k3S56y cFrzF1YeeJTVjhXPri0e4JIPFvwPe94= -----END CERTIFICATE-----Generated at Sat Jun 7 13:53:27 2025 by rpki-client