$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2900587d-94fe-3090-82b7-e7cad60c7766.roa File: 2900587d-94fe-3090-82b7-e7cad60c7766.roa (raw, json) Hash identifier: mQyS5rnQA5CE6O4tM/BUjl+H/Nq0X6gB7VwQBKgkpVw= Subject key identifier: 44:F7:B1:EF:31:AD:0A:16:5D:F0:4C:38:00:68:60:90:C7:83:00:BE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496CE46958389CE05EE2677DE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2900587d-94fe-3090-82b7-e7cad60c7766.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.59.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:69:58:38:9c:e0:5e:e2:67:7d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=668ba63b-8c74-47a1-bb31-05fad0adb851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9d:7a:26:7d:e4:2f:e5:56:7b:a5:bc:12:66: 57:a7:7e:c4:11:0e:c5:d0:68:f5:a3:28:26:6e:ec: 6f:66:96:a1:bc:07:d7:0e:9d:80:35:d8:93:75:e6: 64:d0:b6:31:45:c3:f0:b1:2e:dc:de:a9:43:76:fd: e7:ad:d3:4c:31:3b:dd:16:27:3e:cb:e5:50:16:87: cd:6a:f0:07:b3:c9:3d:43:ea:ea:05:a8:e5:66:2e: e5:9e:e4:f1:af:1d:ce:f4:d4:03:aa:bb:b1:a7:b5: 70:ee:7a:7b:19:51:fe:06:e0:38:a0:cd:a8:8c:6f: d9:1a:cd:cd:55:ec:2a:e5:e1:e8:fb:79:b3:e0:d2: 99:5d:d8:8a:61:21:24:3b:c9:9c:5d:bf:70:fd:98: c8:12:3f:a6:32:61:ce:8a:ba:eb:b7:2d:09:42:a2: 10:f2:22:c2:64:7a:aa:50:98:32:e2:c3:08:df:38: 04:6a:19:41:06:a0:c3:56:69:08:54:f7:6b:2e:ee: ff:28:51:08:c1:1b:4f:f0:de:6e:e7:66:e9:1e:3f: 54:ee:fc:22:c9:46:48:8d:7f:21:0b:da:44:02:1c: 79:28:13:7e:da:19:6a:57:5b:15:c0:22:4c:66:e7: fd:87:5c:b7:52:ce:f5:e6:67:fd:76:71:31:bd:e9: 30:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F7:B1:EF:31:AD:0A:16:5D:F0:4C:38:00:68:60:90:C7:83:00:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2900587d-94fe-3090-82b7-e7cad60c7766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d4:c4:80:fa:d9:5c:43:90:4e:e5:4f:d8:3c:dd:18:9a:bb: 89:53:7b:35:29:ed:aa:30:b2:6c:95:73:a6:f8:3c:67:88:9c: 52:5d:ba:02:65:f6:09:a0:52:5d:fa:b5:68:44:9a:2a:02:03: b6:ee:c2:24:eb:a8:e8:fe:43:d2:b9:b3:fb:d0:5e:37:ef:fd: 99:1c:31:65:44:03:ae:14:e6:20:9e:93:5b:03:78:ae:42:33: a3:7f:74:da:f1:fa:cf:ea:ca:ce:db:1d:99:4c:24:fb:25:f8: 9e:c5:7c:0a:c4:6c:39:03:d4:2f:5c:19:27:6e:af:ac:54:53: 09:d8:ee:90:00:2a:6a:71:06:5e:f3:77:64:ea:dd:b8:07:ed: 97:a7:9c:c5:d6:aa:47:d5:38:dd:9d:d4:4d:b8:22:16:2c:55: 93:b6:09:2d:00:8c:84:13:cd:6f:b9:2a:ce:da:39:b8:e2:62: 7f:57:b9:e9:f1:bd:4f:c2:50:18:08:73:6f:3f:a9:e0:f9:e3: e1:bc:63:3c:ce:86:e5:d1:c1:dc:a2:91:1f:f2:08:80:76:e4: dd:6d:8e:6c:6d:a9:47:b8:95:71:e2:9c:9f:20:2b:3b:a9:c4: d2:84:4b:92:e1:af:8e:d5:24:83:52:94:55:52:3d:90:da:68: 53:aa:f9:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5GlYOJzgXuJnfeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk NjY4YmE2M2ItOGM3NC00N2ExLWJiMzEtMDVmYWQwYWRiODUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5J16Jn3kL+VWe6W8EmZXp37EEQ7F0Gj1oygm buxvZpahvAfXDp2ANdiTdeZk0LYxRcPwsS7c3qlDdv3nrdNMMTvdFic+y+VQFofN avAHs8k9Q+rqBajlZi7lnuTxrx3O9NQDqruxp7Vw7np7GVH+BuA4oM2ojG/ZGs3N Vewq5eHo+3mz4NKZXdiKYSEkO8mcXb9w/ZjIEj+mMmHOirrrty0JQqIQ8iLCZHqq UJgy4sMI3zgEahlBBqDDVmkIVPdrLu7/KFEIwRtP8N5u52bpHj9U7vwiyUZIjX8h C9pEAhx5KBN+2hlqV1sVwCJMZuf9h1y3Us715mf9dnExvekwUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFET3se8xrQoWXfBMOABoYJDHgwC+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjkwMDU4N2QtOTRmZS0z MDkwLTgyYjctZTdjYWQ2MGM3NzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzuxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnUxID62VxDkE7lT9g83Riau4lTezUp7aowsmyVc6b4PGeInFJdugJl 9gmgUl36tWhEmioCA7buwiTrqOj+Q9K5s/vQXjfv/ZkcMWVEA64U5iCek1sDeK5C M6N/dNrx+s/qys7bHZlMJPsl+J7FfArEbDkD1C9cGSdur6xUUwnY7pAAKmpxBl7z d2Tq3bgH7ZennMXWqkfVON2d1E24IhYsVZO2CS0AjIQTzW+5Ks7aObjiYn9Xuenx vU/CUBgIc28/qeD54+G8YzzOhuXRwdyikR/yCIB25N1tjmxtqUe4lXHinJ8gKzup xNKES5Lhr47VJINSlFVSPZDaaFOq+dQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:00:42 2025 by rpki-client