$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46f7318f-0e24-3f3c-bace-f61ad1204231.roa File: 46f7318f-0e24-3f3c-bace-f61ad1204231.roa (raw, json) Hash identifier: xKI1ARxzH3bRwSbKo/bbAyb2sNmGOVCIUDw7TSOWfXc= Subject key identifier: 3B:F6:D8:BA:DF:B8:E6:A4:34:D3:F1:A2:39:C0:0C:42:9D:07:84:6E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496E4991ECA66FC967317C9EC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46f7318f-0e24-3f3c-bace-f61ad1204231.roa Signing time: Sun 06 Apr 2025 01:00:47 +0000 ROA not before: Sun 06 Apr 2025 01:00:47 +0000 ROA not after: Sat 05 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.62.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:49:91:ec:a6:6f:c9:67:31:7c:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 6 01:00:47 2025 GMT Not After : Jul 5 01:00:47 2025 GMT Subject: CN=f0574837-aff7-44c8-8297-78715616756b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:14:d6:94:40:30:15:73:87:23:ae:5a:d3:68: c1:27:fa:ee:27:63:93:df:72:de:74:22:37:43:5b: cf:98:00:12:9a:d6:f0:2d:19:92:7d:28:1f:cc:f5: 8d:8d:6a:38:5d:50:bd:75:2a:65:d3:8f:f8:e8:1b: b3:4c:a4:e5:ad:ce:4f:75:1d:07:e5:08:12:51:eb: ab:f8:1a:0d:15:92:f3:c4:15:46:89:a0:39:52:19: 12:11:ac:41:e6:8b:f6:1d:d5:9b:51:9f:9e:1e:29: cc:35:e7:e0:98:ed:41:57:5b:75:e5:8d:d3:80:f0: 50:03:69:81:a1:22:16:74:3d:23:31:f0:d9:94:da: b3:e7:d8:e4:cf:e6:99:59:6d:c5:1f:cf:65:e8:76: 4c:eb:e9:ab:47:be:f3:23:c3:3e:51:be:d7:d6:a4: 13:fd:54:f0:4d:b5:2c:df:0b:8e:f3:46:e6:fc:8d: fe:85:6d:2b:ca:02:57:81:3b:ee:6b:3e:70:17:38: 96:53:b1:d6:da:a8:01:92:f1:22:d8:dd:82:a0:0b: eb:0a:c5:f2:a0:b0:43:a6:16:3d:f5:48:48:0d:4d: 68:01:9d:79:58:e3:26:1a:1b:ac:e4:f5:59:29:06: ca:c2:14:1c:89:d4:c5:f8:b2:aa:5a:38:5e:ec:28: 6f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F6:D8:BA:DF:B8:E6:A4:34:D3:F1:A2:39:C0:0C:42:9D:07:84:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46f7318f-0e24-3f3c-bace-f61ad1204231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.62.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:f7:2d:6c:8b:71:f3:b4:e8:6a:60:71:c7:a0:66:53:73:d1: 27:b6:2d:e3:b5:40:30:90:1c:d1:b8:12:90:68:17:ac:c8:41: 83:ee:bd:47:c7:1a:5c:7f:4b:e4:79:82:51:cb:3f:f3:a6:be: 4b:34:1f:fd:41:1f:ea:4b:a3:c5:49:69:92:18:5b:0d:b2:d3: ed:bf:e7:a8:d2:3c:7a:4e:de:44:58:8f:ad:fa:77:e2:80:bc: aa:bc:ab:e4:58:0d:6d:ae:06:27:59:f9:86:dd:e3:e0:50:a2: 9c:a7:61:45:61:e7:71:b7:16:0d:9c:1c:b5:fd:49:b8:0b:a1: a0:c3:0f:6f:12:2d:b4:3a:cf:84:54:04:8c:50:40:48:d4:01: 13:c9:68:a1:ee:f1:7c:f4:63:be:e6:67:2e:c9:ed:e9:94:aa: e2:f8:e8:ac:c0:bc:b1:a1:a6:12:30:fc:b3:96:83:05:bf:2b: 91:bb:42:4e:da:f4:f8:69:7b:6d:4e:70:e0:22:82:0f:7a:c0: 9b:40:4d:35:59:23:cc:b3:41:64:2d:c9:94:cb:18:fb:51:00: 16:13:e5:92:eb:0c:d0:32:6c:84:e1:b4:4d:3b:cf:b7:1f:87: db:e6:83:5f:f2:f1:32:6a:58:f7:9f:26:e2:f4:4b:6d:a2:e3: 4b:7c:6e:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSZHspm/JZzF8nsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk ZjA1NzQ4MzctYWZmNy00NGM4LTgyOTctNzg3MTU2MTY3NTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxTWlEAwFXOHI65a02jBJ/ruJ2OT33LedCI3 Q1vPmAASmtbwLRmSfSgfzPWNjWo4XVC9dSpl04/46BuzTKTlrc5PdR0H5QgSUeur +BoNFZLzxBVGiaA5UhkSEaxB5ov2HdWbUZ+eHinMNefgmO1BV1t15Y3TgPBQA2mB oSIWdD0jMfDZlNqz59jkz+aZWW3FH89l6HZM6+mrR77zI8M+Ub7X1qQT/VTwTbUs 3wuO80bm/I3+hW0rygJXgTvuaz5wFziWU7HW2qgBkvEi2N2CoAvrCsXyoLBDphY9 9UhIDU1oAZ15WOMmGhus5PVZKQbKwhQcidTF+LKqWjhe7ChvyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDv22LrfuOakNNPxojnADEKdB4RuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDZmNzMxOGYtMGUyNC0z ZjNjLWJhY2UtZjYxYWQxMjA0MjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz4mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACb3LWyLcfO06GpgccegZlNz0Se2LeO1QDCQHNG4EpBoF6zIQYPuvUfH Glx/S+R5glHLP/Omvks0H/1BH+pLo8VJaZIYWw2y0+2/56jSPHpO3kRYj636d+KA vKq8q+RYDW2uBidZ+Ybd4+BQopynYUVh53G3Fg2cHLX9SbgLoaDDD28SLbQ6z4RU BIxQQEjUARPJaKHu8Xz0Y77mZy7J7emUquL46KzAvLGhphIw/LOWgwW/K5G7Qk7a 9Phpe21OcOAigg96wJtATTVZI8yzQWQtyZTLGPtRABYT5ZLrDNAybIThtE07z7cf h9vmg1/y8TJqWPefJuL0S22i40t8bv8= -----END CERTIFICATE-----Generated at Sat Apr 26 17:43:42 2025 by rpki-client