$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/325a98b1-9323-31e0-8bc1-73824fea011b.roa File: 325a98b1-9323-31e0-8bc1-73824fea011b.roa (raw, json) Hash identifier: TcdWel/xQMCmodSj++eTqG5nSf4/7VUnBvGjqhSA9ew= Subject key identifier: B9:D3:68:B6:3E:F2:0F:6E:29:70:78:B1:CC:7F:32:58:99:08:BA:D0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF475535CE32CCACEED948 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/325a98b1-9323-31e0-8bc1-73824fea011b.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.216.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:47:55:35:ce:32:cc:ac:ee:d9:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=3dd699c1-90ea-439c-8ede-722a967aca6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0c:f8:42:99:e1:88:f0:15:4f:92:70:00:68: 43:8e:87:e0:94:32:78:6f:ca:89:c9:fc:b8:b8:b5: 4c:1d:7c:6d:f4:35:0a:b4:6f:43:b1:50:8a:e0:81: ba:7a:81:86:be:ba:50:dd:e8:47:94:0d:9a:84:ff: a8:1a:6d:82:ef:c2:7f:33:ef:c8:82:13:12:65:6f: ae:02:41:d5:c0:5f:f7:a7:e5:5a:b6:07:13:f2:60: c6:e2:ea:04:5f:8c:5f:77:3a:4b:ba:01:d9:78:5c: 65:ce:05:ec:61:70:b9:22:79:00:ad:59:35:9d:9b: 8c:02:e1:73:9c:40:2e:7a:20:18:bd:bf:97:66:ff: 4d:9d:60:27:d7:b7:4e:69:14:17:7c:e5:6a:63:5b: d9:14:25:3d:28:1d:cf:f3:cb:ba:1e:51:05:ba:19: c5:f7:f1:e3:4d:ca:28:26:4b:46:19:a2:0e:03:2a: 2c:c3:ee:7c:91:94:5b:2e:a7:60:b5:1e:84:43:b2: 2e:f8:81:cc:0d:3d:d6:9b:f4:df:e5:bc:97:ac:90: 63:34:96:b0:22:81:6d:22:ef:08:22:57:92:26:36: aa:d0:94:43:b4:a9:5c:8f:a0:17:fa:45:bc:c6:20: 08:73:02:6c:ae:ac:57:f7:f7:e8:b4:bc:cb:2c:90: ff:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D3:68:B6:3E:F2:0F:6E:29:70:78:B1:CC:7F:32:58:99:08:BA:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/325a98b1-9323-31e0-8bc1-73824fea011b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d6:32:9d:1f:91:22:7d:de:a9:0f:80:cd:bf:fe:23:1f:94: eb:da:10:f5:7a:4a:9c:2b:f2:56:cf:bc:e7:11:da:f3:0a:38: e6:c1:71:ce:06:9b:57:f6:71:a1:af:f5:b4:95:23:17:5c:77: fe:a7:40:56:86:a6:5e:2c:36:eb:50:45:bd:3b:9b:9a:28:c2: bd:cd:3e:df:f9:02:59:3b:06:df:2e:e4:58:b1:e5:4a:bc:88: eb:41:9b:58:5b:50:76:16:02:8c:77:49:36:04:7d:1b:54:85: 30:05:20:68:c3:62:53:9c:30:12:a8:c0:a0:80:78:66:25:3e: db:76:43:07:35:67:29:6b:bd:81:4a:81:a3:ea:6f:3e:32:85: c8:ee:1d:87:25:48:5b:21:6f:e7:9e:c9:31:ec:b8:86:99:47: 7c:96:fc:53:99:10:e1:59:29:cc:46:ce:14:de:b8:62:28:1e: 46:0c:15:2c:fc:a6:31:e9:a6:b7:49:be:5f:a9:31:b0:49:a2: 88:42:aa:7b:25:cf:e4:6a:87:e0:a2:db:0f:57:43:0e:85:91: 41:1d:2f:a3:71:f6:38:65:20:1d:4f:16:0f:23:0b:f2:6a:69: f4:da:3f:24:05:1b:94:f9:dc:24:a5:7c:5f:53:f1:1b:83:9b: 53:d9:12:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0dVNc4yzKzu2UgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk M2RkNjk5YzEtOTBlYS00MzljLThlZGUtNzIyYTk2N2FjYTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgz4QpnhiPAVT5JwAGhDjofglDJ4b8qJyfy4 uLVMHXxt9DUKtG9DsVCK4IG6eoGGvrpQ3ehHlA2ahP+oGm2C78J/M+/IghMSZW+u AkHVwF/3p+VatgcT8mDG4uoEX4xfdzpLugHZeFxlzgXsYXC5InkArVk1nZuMAuFz nEAueiAYvb+XZv9NnWAn17dOaRQXfOVqY1vZFCU9KB3P88u6HlEFuhnF9/HjTcoo JktGGaIOAyosw+58kZRbLqdgtR6EQ7Iu+IHMDT3Wm/Tf5byXrJBjNJawIoFtIu8I IleSJjaq0JRDtKlcj6AX+kW8xiAIcwJsrqxX9/fotLzLLJD/bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnTaLY+8g9uKXB4scx/MliZCLrQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzI1YTk4YjEtOTMyMy0z MWUwLThiYzEtNzM4MjRmZWEwMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9g3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjWMp0fkSJ93qkPgM2//iMflOvaEPV6Spwr8lbPvOcR2vMKOObBcc4G m1f2caGv9bSVIxdcd/6nQFaGpl4sNutQRb07m5oowr3NPt/5Alk7Bt8u5Fix5Uq8 iOtBm1hbUHYWAox3STYEfRtUhTAFIGjDYlOcMBKowKCAeGYlPtt2Qwc1ZylrvYFK gaPqbz4yhcjuHYclSFshb+eeyTHsuIaZR3yW/FOZEOFZKcxGzhTeuGIoHkYMFSz8 pjHpprdJvl+pMbBJoohCqnslz+Rqh+Ci2w9XQw6FkUEdL6Nx9jhlIB1PFg8jC/Jq afTaPyQFG5T53CSlfF9T8RuDm1PZEtI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:17:58 2025 by rpki-client