$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ea64f7d-d12c-3d16-bb98-8c4043aaa284.roa File: 2ea64f7d-d12c-3d16-bb98-8c4043aaa284.roa (raw, json) Hash identifier: JRdohXP33V+itvnpyFALYdWJ3vb1HAjox0b8WAwXRg0= Subject key identifier: 62:27:90:86:DF:E3:95:D8:3F:10:5A:1A:88:E3:DC:10:48:17:BA:40 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584913AC3BDD02D974000FF83080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ea64f7d-d12c-3d16-bb98-8c4043aaa284.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.64.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:3b:dd:02:d9:74:00:0f:f8:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=db10122c-30aa-4a4f-9c07-7f83c1254be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6c:b7:51:71:6b:4d:69:15:86:98:ce:36:e3: 7a:9a:14:45:a2:04:a0:71:3c:1e:a9:0a:86:29:2a: 7c:b4:11:2a:e5:99:0e:1e:01:be:72:2c:50:6d:26: e5:24:fe:29:21:eb:0c:9a:d2:b7:cb:14:96:61:3b: 21:74:46:b6:6e:0a:19:5e:ad:73:fd:ce:c7:13:3d: 07:53:9c:69:e9:d3:bd:95:ae:ca:e7:34:38:33:22: 65:07:47:4b:35:f4:56:c9:7d:23:a6:2f:71:3c:a7: a8:3a:cc:3a:6a:e5:81:20:38:eb:3e:f4:d8:2e:ef: ab:29:35:f7:5d:a5:bc:bf:fc:87:77:2e:d2:7f:96: 6f:af:6a:c1:65:17:3c:b4:5b:6e:bc:91:c3:73:f6: 44:72:c0:82:2f:53:3a:db:09:8f:75:6f:cb:8f:0b: 8a:82:b8:04:80:56:1d:ad:a2:fd:f8:d5:e2:1b:ef: 60:00:63:4f:d5:5a:c1:93:d0:bb:9a:a7:bb:9c:12: 15:84:6a:d4:dc:93:64:99:46:d3:9f:65:6f:49:a4: ee:28:8d:58:31:c3:f7:5c:a4:fe:df:06:39:27:7c: 17:70:e7:83:b7:fa:23:f4:67:e8:ca:63:28:88:07: c0:e4:66:a9:4e:cf:22:e8:85:e6:14:53:0a:4c:56: 34:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:27:90:86:DF:E3:95:D8:3F:10:5A:1A:88:E3:DC:10:48:17:BA:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ea64f7d-d12c-3d16-bb98-8c4043aaa284.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.64.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:7f:2f:e0:8e:5c:c1:da:27:38:a2:c9:10:40:03:bf:dc:35: ae:b5:ca:64:25:7e:2b:c1:69:6c:a4:bf:ad:db:6a:82:1c:79: 50:f7:f6:8d:e0:cb:98:db:a4:1d:2b:77:03:ea:87:37:1c:1d: 25:43:13:39:9f:56:4c:f8:fc:96:51:2b:30:b3:e6:df:a6:b8: 7f:6f:0f:c5:2e:97:ac:3e:21:83:47:48:47:79:62:ca:fb:69: ff:3c:73:76:05:9b:c4:ea:13:48:4d:45:cb:81:41:84:e8:0d: 85:35:c0:63:e5:2a:ec:79:06:c9:43:52:a3:f0:ce:fd:a7:d4: 63:ff:7b:2e:13:8d:45:4e:1f:24:6f:c2:44:1a:18:0d:4a:f9: 18:8d:b4:22:f1:dc:4e:c6:9e:5e:7e:db:4c:86:e2:01:a7:e5: a4:69:11:e3:2c:cb:55:2c:df:6b:43:f6:d4:f0:07:9f:03:24: 58:fb:94:35:0f:49:69:50:3c:96:e9:1c:a1:1f:fd:19:29:01: 81:79:ac:83:4c:c7:8a:1d:57:5a:f2:2e:bc:af:ef:e6:be:f2: 59:c6:94:7c:d0:45:c4:16:8a:68:7b:2d:69:35:89:7d:18:82: cb:f8:3c:93:11:64:51:8e:14:a6:5c:c8:91:f8:a0:43:a4:97: 77:2a:5a:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrDvdAtl0AA/4MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk ZGIxMDEyMmMtMzBhYS00YTRmLTljMDctN2Y4M2MxMjU0YmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmy3UXFrTWkVhpjONuN6mhRFogSgcTweqQqG KSp8tBEq5ZkOHgG+cixQbSblJP4pIesMmtK3yxSWYTshdEa2bgoZXq1z/c7HEz0H U5xp6dO9la7K5zQ4MyJlB0dLNfRWyX0jpi9xPKeoOsw6auWBIDjrPvTYLu+rKTX3 XaW8v/yHdy7Sf5Zvr2rBZRc8tFtuvJHDc/ZEcsCCL1M62wmPdW/LjwuKgrgEgFYd raL9+NXiG+9gAGNP1VrBk9C7mqe7nBIVhGrU3JNkmUbTn2VvSaTuKI1YMcP3XKT+ 3wY5J3wXcOeDt/oj9GfoymMoiAfA5GapTs8i6IXmFFMKTFY0qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGInkIbf45XYPxBaGojj3BBIF7pAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmVhNjRmN2QtZDEyYy0z ZDE2LWJiOTgtOGM0MDQzYWFhMjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0BzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADN/L+COXMHaJziiyRBAA7/cNa61ymQlfivBaWykv63baoIceVD39o3g y5jbpB0rdwPqhzccHSVDEzmfVkz4/JZRKzCz5t+muH9vD8Uul6w+IYNHSEd5Ysr7 af88c3YFm8TqE0hNRcuBQYToDYU1wGPlKux5BslDUqPwzv2n1GP/ey4TjUVOHyRv wkQaGA1K+RiNtCLx3E7Gnl5+20yG4gGn5aRpEeMsy1Us32tD9tTwB58DJFj7lDUP SWlQPJbpHKEf/RkpAYF5rINMx4odV1ryLryv7+a+8lnGlHzQRcQWimh7LWk1iX0Y gsv4PJMRZFGOFKZcyJH4oEOkl3cqWr8= -----END CERTIFICATE-----Generated at Sat Apr 26 17:42:04 2025 by rpki-client