$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1de10830-a371-3b5f-912d-ac79857cc608.roa File: 1de10830-a371-3b5f-912d-ac79857cc608.roa (raw, json) Hash identifier: /JOKjKyxCX9uaYZvIbFkrcy4fE949pPjzvzPfF4WcD0= Subject key identifier: D7:44:CF:F3:00:39:75:E5:09:6E:4B:90:33:4A:8D:60:A2:EB:35:83 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495EEEF609F3EA9F977FCEB980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1de10830-a371-3b5f-912d-ac79857cc608.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.48.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:f6:09:f3:ea:9f:97:7f:ce:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=00bdd33e-604b-43f2-9dc9-aa9f64a82fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:54:fd:f3:bd:42:3f:f0:22:f0:05:1d:e4:1b: a4:af:c7:db:47:50:36:dc:e6:75:73:34:eb:04:bc: fb:78:e0:99:40:15:60:24:17:d6:fc:ac:d0:14:24: cc:e8:5f:ee:d0:41:9e:3e:ee:f7:f2:e0:64:01:b0: e1:a5:20:fd:08:71:b9:02:10:e9:ab:e7:b8:ba:96: a8:89:b7:2d:1d:7a:53:b6:f5:c8:76:e8:ca:80:c2: ae:2e:f8:4b:f9:c3:28:53:b6:8b:1c:4a:9c:80:e0: 6a:a5:75:4f:29:5d:63:5d:27:88:bb:f0:8d:19:82: 93:1b:84:3e:48:7b:92:19:c8:84:1d:9b:29:a7:26: 20:3d:22:39:bb:ed:58:cb:55:7f:0c:d1:3f:86:95: 66:2b:54:18:35:b6:a8:99:cf:29:d1:1b:18:45:ba: bc:5f:54:fa:a5:78:f3:41:65:12:16:e6:84:3e:27: e8:63:7e:b0:19:52:01:6b:0b:df:1a:85:71:7c:ed: 90:2c:54:d8:e6:d6:5d:11:b2:cc:b5:e0:ae:8c:d3: 35:8c:07:f9:b0:b7:c2:b6:fa:78:de:2c:17:aa:aa: 7b:87:2d:dd:12:58:97:ac:f2:af:8b:89:a3:cb:c8: 67:e8:c4:65:64:9d:5e:6d:12:55:b5:bf:9c:b8:51: ec:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:44:CF:F3:00:39:75:E5:09:6E:4B:90:33:4A:8D:60:A2:EB:35:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1de10830-a371-3b5f-912d-ac79857cc608.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:96:64:4a:1e:b8:40:ae:af:54:c1:79:64:39:16:a2:91:06: 35:3a:65:15:6e:97:9e:7b:79:8b:3d:eb:d4:83:58:c2:4d:06: f9:c0:79:6e:a6:7e:ad:7f:e6:87:fb:fb:f0:d7:1c:06:ac:6e: 1c:2a:c9:2c:7f:31:65:86:08:e1:de:a7:22:f4:2a:89:ca:4a: 7f:24:b1:2d:6a:bb:0f:63:dd:b7:80:6c:27:18:fc:e0:67:c6: 2d:39:e2:ef:86:cf:c4:38:5c:4d:d6:9f:a9:7e:0f:d6:01:f6: cb:1a:a0:ea:56:ed:1a:27:0a:28:1b:7a:46:b4:b3:13:3d:be: f8:9f:49:e4:fc:41:ab:39:bd:73:72:3c:0b:85:77:d2:28:2a: 03:3b:df:a8:d8:59:0b:e0:69:6b:a4:60:cd:58:2e:03:53:28: 8d:4e:3a:0c:89:6e:ae:56:43:86:97:b3:3b:b0:f0:ad:df:25: 2d:92:75:b7:25:23:82:b4:b1:39:79:6b:ea:43:0d:e7:d2:21: fe:fe:6d:fa:6f:b7:92:c1:3d:c3:3b:40:f7:1f:d1:c8:0b:68: 73:fe:ae:02:c2:f9:7f:7e:81:61:33:ed:ab:3a:15:7f:ae:04: 8c:5e:81:77:b0:13:57:b6:0f:cd:9d:39:40:84:ea:60:4d:25: 7d:e0:7f:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7vYJ8+qfl3/OuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk MDBiZGQzM2UtNjA0Yi00M2YyLTlkYzktYWE5ZjY0YTgyZmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVT9871CP/Ai8AUd5Bukr8fbR1A23OZ1czTr BLz7eOCZQBVgJBfW/KzQFCTM6F/u0EGePu738uBkAbDhpSD9CHG5AhDpq+e4upao ibctHXpTtvXIdujKgMKuLvhL+cMoU7aLHEqcgOBqpXVPKV1jXSeIu/CNGYKTG4Q+ SHuSGciEHZsppyYgPSI5u+1Yy1V/DNE/hpVmK1QYNbaomc8p0RsYRbq8X1T6pXjz QWUSFuaEPifoY36wGVIBawvfGoVxfO2QLFTY5tZdEbLMteCujNM1jAf5sLfCtvp4 3iwXqqp7hy3dEliXrPKvi4mjy8hn6MRlZJ1ebRJVtb+cuFHsEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdEz/MAOXXlCW5LkDNKjWCi6zWDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWRlMTA4MzAtYTM3MS0z YjVmLTkxMmQtYWM3OTg1N2NjNjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzBfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeWZEoeuECur1TBeWQ5FqKRBjU6ZRVul557eYs969SDWMJNBvnAeW6m fq1/5of7+/DXHAasbhwqySx/MWWGCOHepyL0KonKSn8ksS1quw9j3beAbCcY/OBn xi054u+Gz8Q4XE3Wn6l+D9YB9ssaoOpW7RonCigbeka0sxM9vvifSeT8Qas5vXNy PAuFd9IoKgM736jYWQvgaWukYM1YLgNTKI1OOgyJbq5WQ4aXszuw8K3fJS2Sdbcl I4K0sTl5a+pDDefSIf7+bfpvt5LBPcM7QPcf0cgLaHP+rgLC+X9+gWEz7as6FX+u BIxegXewE1e2D82dOUCE6mBNJX3gf/s= -----END CERTIFICATE-----Generated at Sun Apr 27 01:01:41 2025 by rpki-client