$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a31c4ce-a2de-3f07-b15a-7d4f61a4ca10.roa File: 3a31c4ce-a2de-3f07-b15a-7d4f61a4ca10.roa (raw, json) Hash identifier: DtQmYMJRXkWGf33XAi2MrzyZyWmtJT7NVhngzOydzws= Subject key identifier: 47:E9:CD:02:7E:C1:B1:EA:D3:9D:25:EA:C2:CB:27:2A:62:CB:DB:A7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496CE46F99168AE3DC97C5C100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a31c4ce-a2de-3f07-b15a-7d4f61a4ca10.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.54.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:6f:99:16:8a:e3:dc:97:c5:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=1f0335d7-eca5-493f-839b-04374894e5f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e8:26:49:ee:de:7e:c8:49:40:96:8d:08:6e: c3:51:3f:20:7d:0b:33:92:37:ec:32:5d:e4:20:ea: 6e:6f:3f:af:52:8a:2f:a1:53:f9:01:13:9d:13:68: 88:64:d4:9d:06:10:00:65:94:48:40:d6:97:a2:1c: 4d:6a:1a:48:0a:9a:73:af:0c:ea:68:9e:54:67:5d: 66:36:09:5b:74:e9:eb:2a:49:a7:be:91:ab:c5:a5: 21:93:08:99:d4:14:84:bd:c1:51:f4:93:d7:42:38: a7:03:b5:ba:c7:6b:af:ce:90:40:3a:22:8b:c7:11: a5:41:32:39:75:17:87:69:8e:6f:5f:e2:70:b9:40: 56:8f:93:7b:41:a8:ac:cb:ca:17:35:16:b7:97:ba: f3:21:c1:42:6e:e6:3a:76:2c:ae:a0:7a:b3:a3:fa: 60:56:32:09:17:ce:1b:49:c5:82:0b:b9:87:e6:70: 77:ab:c8:e8:8d:7d:b0:3f:67:8e:25:9b:f7:2a:ea: d2:41:20:74:b4:c3:bd:13:1b:02:c0:41:d7:8b:f0: 54:86:4b:9e:cb:03:d5:9f:72:8f:f8:4a:93:e8:6b: 66:47:e0:23:81:94:6f:3a:25:e1:cd:1c:71:af:84: b3:48:25:40:78:9f:a7:98:6e:59:be:9a:06:62:f8: 96:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E9:CD:02:7E:C1:B1:EA:D3:9D:25:EA:C2:CB:27:2A:62:CB:DB:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a31c4ce-a2de-3f07-b15a-7d4f61a4ca10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.54.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:00:33:ac:89:83:f5:b9:85:33:f9:d4:ff:65:ef:3c:6d:e5: 66:99:b8:43:42:c5:5c:ff:da:d7:6e:14:3d:da:6d:1e:bd:62: 52:42:0e:ff:17:36:de:be:d5:1c:34:84:48:e0:c4:09:5d:9a: 8c:fb:5b:ad:ba:c6:f2:fe:26:3a:8d:42:fa:b7:08:ff:c9:3e: b7:9a:82:3e:cf:cb:5d:f6:59:76:14:ea:7b:d2:6a:86:fb:17: 2c:fe:04:1a:a3:26:cf:ae:dd:97:b6:f5:70:ca:b9:b1:65:63: 12:43:08:6e:0a:05:56:53:3c:5d:ea:73:73:51:85:9f:f7:b6: 1b:69:4b:ec:84:7e:79:fd:11:59:36:99:23:66:a5:1e:0f:d8: bd:8b:ee:a8:e4:b4:f7:23:73:0c:90:c8:3d:bb:31:97:47:b5: 97:9a:58:0d:f1:8b:5f:6f:ce:d1:b6:1a:f3:55:5f:ab:33:8b: 01:87:3e:ea:05:e3:ec:b1:28:16:19:c5:86:a4:d0:73:a9:29: 3f:97:7a:bc:fb:5b:d8:24:4b:95:da:e4:7f:77:3a:81:31:4e: 11:1a:52:ae:3d:d7:00:fd:a8:0a:57:58:3e:5d:92:f3:c1:b3: 0b:4f:8c:e0:84:f6:f5:a9:63:48:2b:dc:f6:d8:86:31:17:9d: e9:1d:6a:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5G+ZForj3JfFwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk MWYwMzM1ZDctZWNhNS00OTNmLTgzOWItMDQzNzQ4OTRlNWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjegmSe7efshJQJaNCG7DUT8gfQszkjfsMl3k IOpubz+vUoovoVP5AROdE2iIZNSdBhAAZZRIQNaXohxNahpICppzrwzqaJ5UZ11m NglbdOnrKkmnvpGrxaUhkwiZ1BSEvcFR9JPXQjinA7W6x2uvzpBAOiKLxxGlQTI5 dReHaY5vX+JwuUBWj5N7Qaisy8oXNRa3l7rzIcFCbuY6diyuoHqzo/pgVjIJF84b ScWCC7mH5nB3q8jojX2wP2eOJZv3KurSQSB0tMO9ExsCwEHXi/BUhkueywPVn3KP +EqT6GtmR+AjgZRvOiXhzRxxr4SzSCVAeJ+nmG5ZvpoGYviWfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfpzQJ+wbHq050l6sLLJypiy9unMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2EzMWM0Y2UtYTJkZS0z ZjA3LWIxNWEtN2Q0ZjYxYTRjYTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzZMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEAM6yJg/W5hTP51P9l7zxt5WaZuENCxVz/2tduFD3abR69YlJCDv8X Nt6+1Rw0hEjgxAldmoz7W626xvL+JjqNQvq3CP/JPreagj7Py132WXYU6nvSaob7 Fyz+BBqjJs+u3Ze29XDKubFlYxJDCG4KBVZTPF3qc3NRhZ/3thtpS+yEfnn9EVk2 mSNmpR4P2L2L7qjktPcjcwyQyD27MZdHtZeaWA3xi19vztG2GvNVX6sziwGHPuoF 4+yxKBYZxYak0HOpKT+Xerz7W9gkS5Xa5H93OoExThEaUq491wD9qApXWD5dkvPB swtPjOCE9vWpY0gr3PbYhjEXnekdao8= -----END CERTIFICATE-----Generated at Sat Apr 26 17:40:06 2025 by rpki-client