$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36d6a23a-6cb5-3598-b5d9-324368f4c125.roa File: 36d6a23a-6cb5-3598-b5d9-324368f4c125.roa (raw, json) Hash identifier: hElzHK1JMb5yc6QR7Zi1Ihgr9rLdZq8vcgPJItYpLaA= Subject key identifier: 84:FB:F8:24:09:DB:04:95:12:F7:64:A2:9A:92:FF:8C:A2:CA:C1:5D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496CE470F746F706008EE7D980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36d6a23a-6cb5-3598-b5d9-324368f4c125.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 55836 IP address blocks: 23.55.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:70:f7:46:f7:06:00:8e:e7:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=0a1017d1-56b0-474d-9819-77bef36bc61b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e8:88:8d:40:3f:66:45:91:92:cf:1f:59:0d: 55:29:41:19:31:7a:50:33:cd:f9:9a:80:40:87:8b: 51:33:ad:1f:a9:01:98:e0:96:3e:a6:b0:b3:69:a5: 1d:76:3d:1c:be:88:39:6d:cc:d8:71:21:41:19:98: f2:ce:4b:4a:dc:aa:e9:78:62:94:ca:66:87:c6:64: 0e:51:c7:f1:b1:e0:a8:94:ec:04:bc:25:bf:9f:d8: cd:90:cc:f0:a3:90:fb:42:e3:18:e7:4b:a5:97:22: 86:1f:8d:c4:53:49:0f:af:1f:a7:5e:21:ec:5d:07: 54:12:e7:16:89:d3:b6:a6:d9:52:2f:29:3d:0c:f3: 44:cc:d1:03:9f:7d:19:bc:98:7a:4e:64:54:b0:b4: 1b:96:bb:27:f7:e2:e4:e3:86:07:5a:fd:9d:2f:1c: 20:af:1a:61:e0:9b:50:36:3f:a8:07:5f:3e:7b:31: 35:8b:e7:db:8b:1b:f5:1b:9d:91:22:be:2d:dc:e2: 0c:a3:56:8b:05:c8:6e:ff:b6:fe:45:10:0b:2f:f9: 48:67:bc:b3:fb:67:ed:6b:21:87:7d:d5:4e:9f:dd: 71:41:1d:be:17:78:ba:97:18:d6:6f:21:39:43:3c: 6b:04:44:fa:72:f1:71:d8:33:e3:b2:df:af:a9:54: b6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:FB:F8:24:09:DB:04:95:12:F7:64:A2:9A:92:FF:8C:A2:CA:C1:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36d6a23a-6cb5-3598-b5d9-324368f4c125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.55.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ef:37:7a:85:cc:7b:2f:2e:23:f8:5c:a6:d3:37:32:22:eb: c9:5e:6d:4d:2b:8b:48:3a:54:bf:22:de:73:8a:63:a3:ef:17: 89:47:5c:ac:a6:37:42:9a:29:ab:d1:8d:b4:75:dc:5c:fb:bc: 56:e9:13:6c:1c:7c:9a:23:8e:f4:72:0f:dd:4c:f4:ff:53:50: 88:54:0c:4a:5f:42:31:2a:29:c3:42:94:7e:8e:6d:d0:a7:15: cd:7e:d5:f8:d9:c9:96:04:31:6c:7d:c9:b0:40:9e:66:15:c1: 27:84:86:5e:a1:04:77:54:49:f4:11:19:77:57:6b:bb:51:5c: bc:ac:9e:52:9f:54:c3:38:e8:df:ee:95:55:61:fa:ae:22:4e: fb:80:ea:11:7e:9f:f9:55:2d:db:3f:87:d9:56:2e:51:2a:89: 05:33:73:cd:42:2b:bc:8e:f2:82:16:fb:4a:d7:9d:d7:e6:8c: 5a:51:e7:72:2b:70:6f:d2:38:dc:f9:4e:67:26:0c:fd:6a:db: 49:7d:6d:2c:9a:63:c3:ac:da:57:3e:6c:11:f8:21:d6:02:6a: b0:eb:a0:4e:03:24:e0:ab:09:65:6a:b5:07:95:57:d6:43:c6: 24:0b:49:ec:67:08:02:69:34:09:55:a2:2e:97:a3:75:b2:c0: 9d:ac:57:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5HD3RvcGAI7n2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk MGExMDE3ZDEtNTZiMC00NzRkLTk4MTktNzdiZWYzNmJjNjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeiIjUA/ZkWRks8fWQ1VKUEZMXpQM835moBA h4tRM60fqQGY4JY+prCzaaUddj0cvog5bczYcSFBGZjyzktK3KrpeGKUymaHxmQO UcfxseColOwEvCW/n9jNkMzwo5D7QuMY50ullyKGH43EU0kPrx+nXiHsXQdUEucW idO2ptlSLyk9DPNEzNEDn30ZvJh6TmRUsLQblrsn9+Lk44YHWv2dLxwgrxph4JtQ Nj+oB18+ezE1i+fbixv1G52RIr4t3OIMo1aLBchu/7b+RRALL/lIZ7yz+2ftayGH fdVOn91xQR2+F3i6lxjWbyE5QzxrBET6cvFx2DPjst+vqVS2FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIT7+CQJ2wSVEvdkopqS/4yiysFdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzZkNmEyM2EtNmNiNS0z NTk4LWI1ZDktMzI0MzY4ZjRjMTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzcQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrvN3qFzHsvLiP4XKbTNzIi68lebU0ri0g6VL8i3nOKY6PvF4lHXKym N0KaKavRjbR13Fz7vFbpE2wcfJojjvRyD91M9P9TUIhUDEpfQjEqKcNClH6ObdCn Fc1+1fjZyZYEMWx9ybBAnmYVwSeEhl6hBHdUSfQRGXdXa7tRXLysnlKfVMM46N/u lVVh+q4iTvuA6hF+n/lVLds/h9lWLlEqiQUzc81CK7yO8oIW+0rXndfmjFpR53Ir cG/SONz5TmcmDP1q20l9bSyaY8Os2lc+bBH4IdYCarDroE4DJOCrCWVqtQeVV9ZD xiQLSexnCAJpNAlVoi6Xo3WywJ2sV9o= -----END CERTIFICATE-----Generated at Mon Apr 28 01:01:19 2025 by rpki-client