$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c85a6a8-4a8f-3a58-bb53-c49f749a9eb3.roa File: 3c85a6a8-4a8f-3a58-bb53-c49f749a9eb3.roa (raw, json) Hash identifier: FkzG8K96RUfXHYuA85lDwCbaceGOhy9MBZAPMD4AkVc= Subject key identifier: 09:56:AD:99:74:37:7F:DB:E1:2C:32:4D:01:FD:41:43:AD:D8:F1:C0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849244E9133B0DBD2E55B941B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c85a6a8-4a8f-3a58-bb53-c49f749a9eb3.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.15.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:91:33:b0:db:d2:e5:5b:94:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=ae9da989-1209-40b0-a12f-3a274aae2dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:83:3b:f5:78:f1:9a:62:d1:a4:c9:1f:10:8c: e8:6c:3c:ae:ac:2c:15:02:e4:3c:fc:8f:c5:d3:06: f0:58:b1:ec:fe:f9:b0:e3:d3:8d:26:9f:da:e1:d2: 65:5d:f0:f6:e2:ee:75:8f:af:e3:91:77:32:4e:84: 2c:83:4f:36:b6:25:9a:34:47:7c:41:34:30:63:f4: 2a:91:53:c1:f9:90:08:03:eb:e6:a0:15:b4:eb:2b: 42:a5:4c:f6:d9:f6:7d:b2:ef:60:33:b8:c2:fb:70: 5e:28:2e:c1:11:9a:84:20:12:1e:c1:0f:37:aa:e7: d0:b8:c8:6f:e3:93:f6:5e:88:8d:41:29:9b:e7:c4: 4b:2c:31:1d:ee:04:3b:45:bb:3c:af:9f:8e:bf:11: de:16:5a:40:b3:bb:9c:48:02:64:0e:85:e0:87:2e: 9a:86:8f:e1:72:4f:3f:70:30:bf:d5:16:79:88:40: a8:72:91:04:e5:1b:04:42:4a:5b:1d:68:1a:dc:cd: cd:56:85:00:64:21:6e:4e:64:44:cd:be:78:9b:b7: 5e:40:5f:06:3c:fd:8f:48:46:4b:7c:b8:86:ee:49: ac:35:1f:76:8c:72:c0:31:3c:a6:51:14:9f:06:61: 79:12:fb:60:17:6e:fe:a7:db:e1:2f:21:f5:54:b0: f4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:56:AD:99:74:37:7F:DB:E1:2C:32:4D:01:FD:41:43:AD:D8:F1:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c85a6a8-4a8f-3a58-bb53-c49f749a9eb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.15.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:c4:2b:c3:76:21:0e:56:a8:a2:df:a1:b0:f4:5d:2f:0a:b9: b5:ed:88:56:97:ad:8d:d3:a8:43:7e:57:5d:95:66:6d:01:15: 44:ae:ed:cc:16:4c:06:db:15:62:20:c3:15:9d:0f:f8:7f:8e: 49:a0:0c:ec:f4:f5:97:e5:62:44:b1:68:37:8b:03:e4:26:f3: 6f:c0:e9:46:16:7a:4c:c5:ca:5b:0f:1f:e4:d7:d9:29:33:02: 80:e8:9d:39:e1:a6:e1:92:d6:c8:5d:b1:b7:a3:aa:7e:e5:ac: 84:a5:39:75:fb:88:f9:e2:fb:c2:e1:29:09:d3:60:15:20:c6: 94:ff:fb:27:13:5e:72:df:ad:72:a7:b0:89:80:4d:95:e5:b9: f6:28:a5:ed:04:91:12:d2:48:02:97:dd:34:d2:77:04:1b:14: de:84:e5:4d:98:ba:71:a1:41:ba:06:3f:7d:a2:59:bb:bb:c7: b2:89:44:81:f6:46:06:3b:42:39:36:0b:21:07:31:d8:80:76: 29:6f:bf:c0:37:70:6a:0b:e0:e0:35:26:15:40:8c:c9:f2:a8: d5:76:a9:b9:d2:dc:94:11:ee:61:ec:c1:02:a7:6e:14:90:4a: 72:37:8c:bf:b6:60:8a:ed:d2:1f:a6:d5:00:a6:9f:04:86:e9: 04:b8:fa:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTpEzsNvS5VuUGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk YWU5ZGE5ODktMTIwOS00MGIwLWExMmYtM2EyNzRhYWUyZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYM79XjxmmLRpMkfEIzobDyurCwVAuQ8/I/F 0wbwWLHs/vmw49ONJp/a4dJlXfD24u51j6/jkXcyToQsg082tiWaNEd8QTQwY/Qq kVPB+ZAIA+vmoBW06ytCpUz22fZ9su9gM7jC+3BeKC7BEZqEIBIewQ83qufQuMhv 45P2XoiNQSmb58RLLDEd7gQ7Rbs8r5+OvxHeFlpAs7ucSAJkDoXghy6aho/hck8/ cDC/1RZ5iECocpEE5RsEQkpbHWga3M3NVoUAZCFuTmREzb54m7deQF8GPP2PSEZL fLiG7kmsNR92jHLAMTymURSfBmF5EvtgF27+p9vhLyH1VLD0NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlWrZl0N3/b4SwyTQH9QUOt2PHAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2M4NWE2YTgtNGE4Zi0z YTU4LWJiNTMtYzQ5Zjc0OWE5ZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFw/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/EK8N2IQ5WqKLfobD0XS8KubXtiFaXrY3TqEN+V12VZm0BFUSu7cwW TAbbFWIgwxWdD/h/jkmgDOz09ZflYkSxaDeLA+Qm82/A6UYWekzFylsPH+TX2Skz AoDonTnhpuGS1shdsbejqn7lrISlOXX7iPni+8LhKQnTYBUgxpT/+ycTXnLfrXKn sImATZXlufYope0EkRLSSAKX3TTSdwQbFN6E5U2YunGhQboGP32iWbu7x7KJRIH2 RgY7Qjk2CyEHMdiAdilvv8A3cGoL4OA1JhVAjMnyqNV2qbnS3JQR7mHswQKnbhSQ SnI3jL+2YIrt0h+m1QCmnwSG6QS4+iI= -----END CERTIFICATE-----Generated at Sat Apr 26 15:54:30 2025 by rpki-client