$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/012c5b07-5466-37f5-8756-20418f510c0c.roa File: 012c5b07-5466-37f5-8756-20418f510c0c.roa (raw, json) Hash identifier: l8wt9UOd4+bnyvnjeT9KbJI5oPUKt4cQKvhYKndPWVQ= Subject key identifier: 53:08:9C:AC:63:29:CE:25:1A:07:3A:C3:FB:B8:2E:B3:CC:28:06:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849244E8EBDB92A028C2B3B5D81 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/012c5b07-5466-37f5-8756-20418f510c0c.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.8.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:8e:bd:b9:2a:02:8c:2b:3b:5d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=4f4d1f0d-2ab2-4cc6-bd7a-ec40a44d69fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:00:5c:78:7a:9f:2d:ad:49:00:df:08:5c:f3: a3:48:eb:d0:64:24:bd:e7:32:c4:33:78:26:db:20: 74:e2:e1:2d:de:d2:44:0c:8e:88:4b:3a:31:bc:ef: 0a:a0:c7:f1:48:7d:c7:22:bc:07:02:5e:00:ef:28: 95:a0:39:39:58:7a:af:6e:39:14:f7:a2:37:5a:0e: 9c:00:03:80:7f:c8:aa:b8:e2:21:ec:7e:bd:26:f3: 0e:02:13:17:40:e5:2b:86:3e:ed:68:c2:8a:0d:3e: ac:f8:e7:36:c5:8d:e6:cb:13:e0:ff:1a:da:3f:cf: 95:0f:30:a9:c3:9a:e0:a2:ce:89:69:0e:ef:06:e7: de:ff:8e:d3:f9:a6:43:38:0f:0b:6c:1d:87:58:2c: 19:28:3a:b8:8c:4e:8e:02:0c:ab:fe:fa:df:c5:89: 40:6f:5e:6f:43:9d:04:c1:51:40:03:d2:d6:39:90: 0a:02:cd:6c:ea:2c:11:19:07:92:0d:e8:5d:5b:ba: 55:d4:8a:8b:f0:6e:ee:0b:90:56:53:de:1f:ba:87: 9e:1a:54:92:37:a6:fe:fd:88:8d:6a:bd:97:1b:0d: e5:68:e8:7e:4c:81:17:f8:2e:b8:3a:63:4d:be:c2: e1:88:13:b6:e6:38:13:5c:6d:ed:2a:09:97:19:d4: a1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:08:9C:AC:63:29:CE:25:1A:07:3A:C3:FB:B8:2E:B3:CC:28:06:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/012c5b07-5466-37f5-8756-20418f510c0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.8.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:5d:ca:31:e7:a8:bb:2c:70:07:eb:4a:25:6a:ba:e0:d3:9b: fe:3b:ef:14:16:4d:e1:82:14:6f:e6:c5:1e:50:41:f3:3a:d7: c0:97:6e:92:05:98:0f:12:1a:01:f1:37:d1:a0:1a:0d:64:a7: 59:2f:c3:75:af:7a:5e:bd:29:c2:75:81:ad:dc:6a:ca:c0:76: 06:7e:86:f4:d6:6e:93:a5:4c:28:88:1c:5b:5d:2a:ac:e9:b9: 3e:b9:81:00:ce:1c:ef:0a:cd:8b:f5:e6:84:df:18:35:40:e4: 83:fc:ae:b8:17:ed:b2:de:bd:b0:16:0c:d4:83:6c:0e:87:14: 57:b4:c5:39:2e:90:14:cb:d4:51:b5:98:93:6d:4d:d3:db:78: aa:3a:79:7e:a2:ad:9f:d0:51:95:57:70:c2:04:26:b1:5a:48: f7:43:3c:8c:b4:98:32:a7:bd:19:fe:ab:8c:94:f7:2b:0d:f1: 70:63:af:9d:09:0f:9f:1b:a0:ab:77:fd:c5:ee:f7:34:e0:e2: 9c:20:64:8c:ca:2d:1d:6e:1c:57:2f:95:ae:33:39:60:eb:4f: 7c:8c:a2:d5:9f:8f:0e:c3:2f:71:9c:dc:e6:15:2c:fe:96:d8: cf:33:f2:a5:de:e6:07:c4:59:02:28:1b:1f:81:9f:14:0b:18: f9:a1:47:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTo69uSoCjCs7XYEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NGY0ZDFmMGQtMmFiMi00Y2M2LWJkN2EtZWM0MGE0NGQ2OWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQBceHqfLa1JAN8IXPOjSOvQZCS95zLEM3gm 2yB04uEt3tJEDI6ISzoxvO8KoMfxSH3HIrwHAl4A7yiVoDk5WHqvbjkU96I3Wg6c AAOAf8iquOIh7H69JvMOAhMXQOUrhj7taMKKDT6s+Oc2xY3myxPg/xraP8+VDzCp w5rgos6JaQ7vBufe/47T+aZDOA8LbB2HWCwZKDq4jE6OAgyr/vrfxYlAb15vQ50E wVFAA9LWOZAKAs1s6iwRGQeSDehdW7pV1IqL8G7uC5BWU94fuoeeGlSSN6b+/YiN ar2XGw3laOh+TIEX+C64OmNNvsLhiBO25jgTXG3tKgmXGdShywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMInKxjKc4lGgc6w/u4LrPMKAZVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDEyYzViMDctNTQ2Ni0z N2Y1LTg3NTYtMjA0MThmNTEwYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZdyjHnqLsscAfrSiVquuDTm/477xQWTeGCFG/mxR5QQfM618CXbpIF mA8SGgHxN9GgGg1kp1kvw3Wvel69KcJ1ga3casrAdgZ+hvTWbpOlTCiIHFtdKqzp uT65gQDOHO8KzYv15oTfGDVA5IP8rrgX7bLevbAWDNSDbA6HFFe0xTkukBTL1FG1 mJNtTdPbeKo6eX6irZ/QUZVXcMIEJrFaSPdDPIy0mDKnvRn+q4yU9ysN8XBjr50J D58boKt3/cXu9zTg4pwgZIzKLR1uHFcvla4zOWDrT3yMotWfjw7DL3Gc3OYVLP6W 2M8z8qXe5gfEWQIoGx+BnxQLGPmhRzA= -----END CERTIFICATE-----Generated at Sat Apr 26 21:54:42 2025 by rpki-client