$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ce78630-0544-3850-9a9f-05c944c5b877.roa File: 3ce78630-0544-3850-9a9f-05c944c5b877.roa (raw, json) Hash identifier: 7kfmpR+A4lrfVOVcFaaWQ3jmf34wZnJuw46yj6RDVxY= Subject key identifier: CE:9C:25:8E:03:EC:C9:74:64:F7:2D:DD:01:D5:B3:EB:A5:99:88:93 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABED97410A934BF1D7EDB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ce78630-0544-3850-9a9f-05c944c5b877.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.38.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:d9:74:10:a9:34:bf:1d:7e:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=75932b17-c240-4b85-9205-efac03d61896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b6:e9:da:f5:cf:d1:13:1d:ef:7e:e2:53:b6: 17:77:b4:e5:ee:93:f8:59:72:aa:ce:da:2a:8d:88: 7f:74:0b:a8:80:4b:30:2d:a4:e3:22:dd:8a:7b:b2: 99:dd:e8:55:5b:8a:eb:7e:12:c7:b7:ad:ee:3a:98: 27:cb:1a:78:2e:86:e4:33:34:45:5c:87:d4:77:13: d4:53:5e:d0:37:74:62:42:9c:64:b0:13:c5:0b:8a: 0a:dd:06:d8:c9:19:b5:c4:73:ba:03:26:99:75:6a: a4:cb:38:11:a2:1c:e8:8b:9c:ca:6c:42:38:e4:4b: 94:f2:b3:45:8c:80:13:00:2a:d3:2f:6d:c3:dd:46: 41:f0:be:db:54:17:d3:c3:cd:71:61:dd:77:63:12: 19:e4:52:a0:17:e8:2b:de:4c:fa:2f:0f:be:97:2c: b5:ba:34:dd:f4:df:cb:da:f0:21:f6:49:35:c2:a6: 4c:a3:91:77:da:f4:80:ac:3d:e8:32:5e:91:98:6a: 5c:15:5d:2c:3c:74:e5:bc:a1:e6:5a:cc:63:ae:af: 58:9b:98:b1:2e:d1:4f:7a:9a:ee:d8:df:c7:d2:ed: ed:d8:7e:ab:0a:e2:43:b7:71:5a:b5:d5:6c:bc:c7: 34:2c:18:ed:b1:20:98:d2:b8:d2:11:bb:e5:ff:2e: 6a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9C:25:8E:03:EC:C9:74:64:F7:2D:DD:01:D5:B3:EB:A5:99:88:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ce78630-0544-3850-9a9f-05c944c5b877.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:9a:66:55:f3:da:6c:0b:5b:7c:26:96:30:3b:d2:dc:33:30: 06:39:54:9b:e0:ed:fd:48:b2:28:2c:8c:ba:e7:13:45:3a:dc: 31:bb:0b:11:c0:2b:65:96:83:e9:4b:35:4c:1d:76:fc:7c:fd: 2a:de:87:b3:16:42:ec:a0:d0:31:dc:36:47:27:f1:41:2a:64: fe:18:41:e8:01:64:76:d8:f4:1b:47:46:b8:99:e2:a7:48:5f: 51:f4:9a:e4:4d:33:e7:98:86:f8:c6:1a:8b:0e:1a:23:2c:a9: ab:b7:93:34:e3:b9:a3:51:c2:de:96:66:5b:67:4c:70:71:23: 54:f1:4a:a0:04:80:99:ef:bb:e8:da:c0:e3:3f:4b:c2:c2:69: 93:34:b0:7a:3b:98:9c:d9:62:8a:c3:53:bc:88:41:9a:70:44: 4f:fb:fb:54:30:16:4a:be:11:11:53:a5:33:4e:46:39:c5:b8: 5e:37:d4:46:dc:9f:ae:97:67:d9:9e:75:32:27:61:42:b8:01: b0:98:1a:a3:3a:85:e1:a0:44:3e:f9:57:1e:33:dd:73:40:b8: 92:6b:22:72:76:ec:e3:8f:68:13:88:cf:aa:e7:88:75:56:c6: e3:21:e5:01:7b:1f:ef:34:e5:42:e6:13:e5:89:22:80:f5:5c: 4b:d9:74:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavtl0EKk0vx1+2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NzU5MzJiMTctYzI0MC00Yjg1LTkyMDUtZWZhYzAzZDYxODk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rbp2vXP0RMd737iU7YXd7Tl7pP4WXKqztoq jYh/dAuogEswLaTjIt2Ke7KZ3ehVW4rrfhLHt63uOpgnyxp4LobkMzRFXIfUdxPU U17QN3RiQpxksBPFC4oK3QbYyRm1xHO6AyaZdWqkyzgRohzoi5zKbEI45EuU8rNF jIATACrTL23D3UZB8L7bVBfTw81xYd13YxIZ5FKgF+gr3kz6Lw++lyy1ujTd9N/L 2vAh9kk1wqZMo5F32vSArD3oMl6RmGpcFV0sPHTlvKHmWsxjrq9Ym5ixLtFPepru 2N/H0u3t2H6rCuJDt3FatdVsvMc0LBjtsSCY0rjSEbvl/y5qfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6cJY4D7Ml0ZPct3QHVs+ulmYiTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2NlNzg2MzAtMDU0NC0z ODUwLTlhOWYtMDVjOTQ0YzViODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyanMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqaZlXz2mwLW3wmljA70twzMAY5VJvg7f1IsigsjLrnE0U63DG7CxHA K2WWg+lLNUwddvx8/Sreh7MWQuyg0DHcNkcn8UEqZP4YQegBZHbY9BtHRriZ4qdI X1H0muRNM+eYhvjGGosOGiMsqau3kzTjuaNRwt6WZltnTHBxI1TxSqAEgJnvu+ja wOM/S8LCaZM0sHo7mJzZYorDU7yIQZpwRE/7+1QwFkq+ERFTpTNORjnFuF431Ebc n66XZ9medTInYUK4AbCYGqM6heGgRD75Vx4z3XNAuJJrInJ27OOPaBOIz6rniHVW xuMh5QF7H+805ULmE+WJIoD1XEvZdGo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:31:10 2025 by rpki-client