$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30bb97f0-bfd5-3ada-99ab-6da700a21ab5.roa File: 30bb97f0-bfd5-3ada-99ab-6da700a21ab5.roa (raw, json) Hash identifier: c0Xc7nVCE2K8yX2caMM7taZonJoQGRykO522o6ZTq+A= Subject key identifier: 8D:69:F4:61:FE:9C:AB:2D:16:C7:EE:F8:B0:E5:5A:99:C5:70:67:7D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494CC95705835F37FABD05F600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30bb97f0-bfd5-3ada-99ab-6da700a21ab5.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 16625 IP address blocks: 23.32.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:57:05:83:5f:37:fa:bd:05:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=262f84a9-76d9-44db-b5b3-884c5e65f928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1f:e6:ec:96:7b:3b:76:90:71:3d:70:15:8f: 60:cf:5b:a4:75:46:23:01:3d:94:f5:dd:35:41:57: c8:25:11:5b:ad:72:64:30:a9:e1:4c:14:3d:4e:48: 72:af:e7:e2:82:69:81:da:c1:54:29:4f:a0:b6:54: 26:5c:18:d5:1e:76:7d:45:7c:9d:d9:6b:91:59:a1: e8:92:de:d0:5e:36:34:57:cd:f3:17:ce:ba:d4:99: db:34:0a:72:f7:ce:b5:77:69:7d:e8:5c:61:61:27: 3e:f8:a1:8c:d5:c1:fb:10:f1:4d:9a:b5:fc:8d:ed: 05:62:da:6b:58:45:d4:86:40:de:78:b2:72:3d:68: 42:3f:c2:22:09:46:48:ce:a4:5d:fd:8e:16:29:23: e6:59:70:b7:1d:f2:d9:e7:36:04:e7:99:45:0f:93: be:44:1f:d5:a1:8e:e4:6b:2f:ec:8f:9a:17:f3:29: 51:a9:84:11:c9:46:94:32:7b:68:02:9a:e3:52:64: 64:4e:8f:e7:9a:9e:a0:a7:ce:6f:f3:f9:69:75:ee: f6:4e:04:2e:16:b4:86:df:37:f2:62:e9:d3:e5:6a: 0a:4b:ee:72:6c:48:9c:d9:1a:5e:fb:10:cb:3e:a5: 5f:bb:44:03:63:3a:07:6c:a2:11:8f:8b:45:a3:a3: 50:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:69:F4:61:FE:9C:AB:2D:16:C7:EE:F8:B0:E5:5A:99:C5:70:67:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30bb97f0-bfd5-3ada-99ab-6da700a21ab5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:cb:f8:fb:e2:d4:c8:a9:94:d4:01:f2:ce:03:f8:75:fa:fd: a2:c1:81:d0:e1:b7:51:74:dd:97:2f:86:0a:00:39:c4:f4:21: 3b:bd:f6:a0:cc:fa:02:aa:4b:04:06:0a:cf:e6:c9:0e:e9:63: 55:be:68:70:f7:99:af:ad:8b:ca:39:e2:3a:24:23:cd:b0:f4: af:7a:ed:46:cc:e6:8c:56:72:2d:70:2d:1c:36:97:b6:67:b8: e5:bd:02:df:fb:5f:ce:9c:b3:94:79:d9:7a:c3:e5:e6:bb:a1: 9d:87:d7:8b:6f:0c:28:ae:7b:0d:8d:51:ea:e4:3e:76:6d:d7: 4f:a2:dd:bd:5e:47:4e:d9:39:7d:02:b3:08:89:f3:62:32:09: bc:0c:a9:db:12:4b:fa:61:f8:48:15:36:73:02:a1:32:12:9e: 4e:de:d6:73:34:c1:46:80:41:4c:65:74:26:6c:b4:e3:98:d7: 2f:9b:39:e1:f7:ab:86:e6:ac:27:51:65:8f:8a:76:ed:4e:2c: 4c:1a:22:bb:0e:a5:82:94:b2:e2:1e:ba:74:14:17:ed:f4:b1: ca:bf:18:66:be:34:98:73:1d:aa:f0:de:ef:b7:16:0a:7c:be: 2c:14:0b:a5:60:f3:c0:06:7c:c9:25:bc:4d:51:8f:f0:27:f4: 95:61:e4:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVcFg183+r0F9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk MjYyZjg0YTktNzZkOS00NGRiLWI1YjMtODg0YzVlNjVmOTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh/m7JZ7O3aQcT1wFY9gz1ukdUYjAT2U9d01 QVfIJRFbrXJkMKnhTBQ9Tkhyr+figmmB2sFUKU+gtlQmXBjVHnZ9RXyd2WuRWaHo kt7QXjY0V83zF8661JnbNApy9861d2l96FxhYSc++KGM1cH7EPFNmrX8je0FYtpr WEXUhkDeeLJyPWhCP8IiCUZIzqRd/Y4WKSPmWXC3HfLZ5zYE55lFD5O+RB/VoY7k ay/sj5oX8ylRqYQRyUaUMntoAprjUmRkTo/nmp6gp85v8/lpde72TgQuFrSG3zfy YunT5WoKS+5ybEic2Rpe+xDLPqVfu0QDYzoHbKIRj4tFo6NQNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1p9GH+nKstFsfu+LDlWpnFcGd9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzBiYjk3ZjAtYmZkNS0z YWRhLTk5YWItNmRhNzAwYTIxYWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3L+Pvi1MiplNQB8s4D+HX6/aLBgdDht1F03ZcvhgoAOcT0ITu99qDM +gKqSwQGCs/myQ7pY1W+aHD3ma+ti8o54jokI82w9K967UbM5oxWci1wLRw2l7Zn uOW9At/7X86cs5R52XrD5ea7oZ2H14tvDCiuew2NUerkPnZt10+i3b1eR07ZOX0C swiJ82IyCbwMqdsSS/ph+EgVNnMCoTISnk7e1nM0wUaAQUxldCZstOOY1y+bOeH3 q4bmrCdRZY+Kdu1OLEwaIrsOpYKUsuIeunQUF+30scq/GGa+NJhzHarw3u+3Fgp8 viwUC6Vg88AGfMklvE1Rj/An9JVh5FE= -----END CERTIFICATE-----Generated at Tue Apr 29 21:03:40 2025 by rpki-client