$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54810562-42a6-3ffa-ad60-f3db583d0709.roa File: 54810562-42a6-3ffa-ad60-f3db583d0709.roa (raw, json) Hash identifier: XcNBEiYX6ypzldpF3utOKJsd57X43PcCSxMfeYO38ac= Subject key identifier: 43:13:66:39:FE:0B:11:6A:8B:C9:7A:1B:3D:58:A1:76:61:E5:E4:73 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABEDCCB7876BA203BAE5000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54810562-42a6-3ffa-ad60-f3db583d0709.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.40.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:dc:cb:78:76:ba:20:3b:ae:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=2060f12b-6682-4f1c-a9f2-9e10b15a0268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:46:31:87:68:be:04:7f:4f:09:1c:80:11:07: d8:14:db:bd:2e:6c:ad:35:c9:0d:d6:d7:d8:e6:ad: e7:d2:bc:df:7b:9e:fa:be:ef:9f:20:29:a8:35:bf: 1b:04:ee:ff:91:4d:3c:ab:1d:3a:4d:52:3b:e7:e6: 28:59:cc:3f:f4:4a:cc:cb:15:00:02:6d:fe:cb:7e: b3:9c:3e:d7:46:46:9d:74:bd:53:c4:30:62:65:3d: e7:28:06:f7:7e:e1:96:71:5f:a3:32:88:4b:d3:6b: 9d:5a:41:9a:06:ce:fb:ce:8f:fb:17:d8:14:08:45: 9f:52:cc:90:f2:6f:05:fa:33:ee:2b:b1:3d:7b:9e: 4a:98:18:f9:49:88:ea:ce:3a:68:76:3f:1c:29:28: d0:98:e6:62:8c:62:c1:2c:2c:07:43:2b:40:8e:b7: d5:ff:83:70:12:4d:fc:1d:1d:36:b6:3a:93:2f:aa: ee:7a:e6:10:45:4f:67:65:92:b6:fc:07:7d:89:08: f6:b7:4a:bd:99:67:4a:ff:d5:f2:d3:a6:c1:ea:15: 46:0f:64:24:95:a2:1c:16:2f:8b:b0:85:01:e3:57: b8:93:39:a2:0d:84:6e:29:31:72:ec:16:fe:00:49: e1:f3:84:77:24:d0:11:20:61:18:63:2f:54:01:55: e0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:13:66:39:FE:0B:11:6A:8B:C9:7A:1B:3D:58:A1:76:61:E5:E4:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54810562-42a6-3ffa-ad60-f3db583d0709.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:95:f8:dd:a5:e0:ef:3a:b3:5b:0e:2e:e8:61:d3:ea:f8:25: a8:24:43:7f:c5:55:8b:1a:8d:83:1b:fd:ae:bc:cc:8b:11:30: 91:7e:ff:e8:1d:c9:b9:e5:88:e2:b8:87:1a:50:40:72:39:8b: e3:1e:51:42:a6:3c:cf:be:39:d2:77:31:31:08:d0:a9:99:d8: ac:b8:6c:4b:be:4d:e6:37:5f:69:62:db:51:65:fb:78:b6:39: b6:18:50:2c:4f:e1:ce:a7:2e:4a:24:8e:4a:11:49:ac:66:53: ed:5f:c7:25:40:a2:a9:f0:7b:c2:37:0b:f8:be:85:b0:ec:9e: 42:4a:ae:33:c4:15:55:33:7b:8e:d7:1b:99:aa:a7:4c:95:43: 28:b8:5f:c6:d5:4e:e0:6a:f6:b8:67:b7:db:b2:62:02:ae:86: c4:7a:62:ae:50:6a:18:2a:04:34:69:51:43:07:0a:15:8a:1a: 08:3c:d0:36:71:cc:82:67:c3:b5:61:da:a9:20:8b:60:a7:fe: ae:7f:a9:7a:c3:67:9e:4e:d2:78:47:69:9d:f5:2a:1e:20:d1: d6:ba:a2:d2:69:14:d4:63:a3:51:e1:10:93:86:e1:a1:d2:ef: 8f:cc:eb:ff:9f:6e:2d:2c:69:46:b1:40:ab:32:22:64:8f:cb: 3c:67:9b:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavtzLeHa6IDuuUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk MjA2MGYxMmItNjY4Mi00ZjFjLWE5ZjItOWUxMGIxNWEwMjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEYxh2i+BH9PCRyAEQfYFNu9LmytNckN1tfY 5q3n0rzfe576vu+fICmoNb8bBO7/kU08qx06TVI75+YoWcw/9ErMyxUAAm3+y36z nD7XRkaddL1TxDBiZT3nKAb3fuGWcV+jMohL02udWkGaBs77zo/7F9gUCEWfUsyQ 8m8F+jPuK7E9e55KmBj5SYjqzjpodj8cKSjQmOZijGLBLCwHQytAjrfV/4NwEk38 HR02tjqTL6rueuYQRU9nZZK2/Ad9iQj2t0q9mWdK/9Xy06bB6hVGD2QklaIcFi+L sIUB41e4kzmiDYRuKTFy7Bb+AEnh84R3JNARIGEYYy9UAVXgvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMTZjn+CxFqi8l6Gz1YoXZh5eRzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTQ4MTA1NjItNDJhNi0z ZmZhLWFkNjAtZjNkYjU4M2QwNzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyjHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqV+N2l4O86s1sOLuhh0+r4JagkQ3/FVYsajYMb/a68zIsRMJF+/+gd ybnliOK4hxpQQHI5i+MeUUKmPM++OdJ3MTEI0KmZ2Ky4bEu+TeY3X2li21Fl+3i2 ObYYUCxP4c6nLkokjkoRSaxmU+1fxyVAoqnwe8I3C/i+hbDsnkJKrjPEFVUze47X G5mqp0yVQyi4X8bVTuBq9rhnt9uyYgKuhsR6Yq5QahgqBDRpUUMHChWKGgg80DZx zIJnw7Vh2qkgi2Cn/q5/qXrDZ55O0nhHaZ31Kh4g0da6otJpFNRjo1HhEJOG4aHS 74/M6/+fbi0saUaxQKsyImSPyzxnmwY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:10:49 2025 by rpki-client