$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/582e2851-8d62-3377-8e5b-75324a13d240.roa File: 582e2851-8d62-3377-8e5b-75324a13d240.roa (raw, json) Hash identifier: eeRRKv9eMRgLaFQxRfy/tBIc1MErqy+IqkwjF1OUQkE= Subject key identifier: 46:BC:29:EF:0D:98:85:90:40:CF:B8:74:56:A5:7E:40:4B:A3:F9:99 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496CE4795B1655878235C55680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/582e2851-8d62-3377-8e5b-75324a13d240.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 9498 IP address blocks: 23.60.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:79:5b:16:55:87:82:35:c5:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=4288ba4d-b505-4f68-8a56-e56bcd3d4de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d7:f4:af:83:4f:14:0e:53:14:da:91:14:b7: e4:44:0b:51:6e:d7:4f:bf:74:0d:88:ef:50:26:5e: 8d:65:28:b5:f9:04:16:3b:c6:d8:cc:c2:be:0e:68: 0b:ac:b2:33:5b:81:60:e9:2e:f5:4c:fa:34:81:f4: 29:2b:ca:e5:0e:a2:d3:97:b2:6f:cd:74:57:5b:6c: 88:9f:df:4d:97:79:ee:30:93:9a:ea:a0:4c:08:0b: 46:43:4b:ef:4d:3f:da:19:ae:e0:7a:d1:6b:44:c0: 85:d4:28:12:fc:d3:39:87:49:06:68:c4:f8:79:90: a8:5e:5e:91:b9:08:e8:c9:76:2a:c7:65:f5:e6:cb: 85:b1:d2:6c:46:fe:cc:0e:15:9a:1d:89:5f:b1:c7: be:49:28:1d:cc:07:bc:ce:72:18:85:1c:c5:be:3b: 24:a7:c6:83:1a:7f:82:38:d3:96:c8:f8:39:64:85: c2:5f:29:50:87:8a:d5:ad:c4:7f:e3:ca:14:27:5d: 1c:2b:27:2e:8d:b1:7e:77:74:08:d2:23:bb:11:09: db:fb:f8:8e:df:93:56:46:f7:bf:37:e7:64:bc:6e: 75:ee:58:43:3f:9e:80:ec:03:1e:fc:7c:b9:72:58: 18:96:52:14:f0:bd:70:a1:6f:62:b2:a2:65:99:d1: 36:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BC:29:EF:0D:98:85:90:40:CF:B8:74:56:A5:7E:40:4B:A3:F9:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/582e2851-8d62-3377-8e5b-75324a13d240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.60.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:a8:fb:4e:26:c0:83:2e:14:b8:d8:5d:3e:0d:ed:53:d4:58: bb:72:46:da:41:92:32:ef:20:67:6e:b7:c7:c2:77:4f:e0:4b: 3c:19:e4:94:8b:bf:09:4b:c0:66:78:6e:8d:d4:c2:f6:19:1b: 07:f6:0c:07:70:4b:df:32:eb:ad:f0:e7:08:75:3b:30:46:62: f1:5e:3b:d9:08:47:bf:4d:0d:0a:66:5b:7b:f2:bf:29:e9:db: ef:e9:72:88:5f:f6:cc:02:c0:ff:1e:0c:99:45:d2:1d:87:24: c3:a2:10:c5:38:76:18:29:55:e0:df:a7:51:cc:a6:09:5d:68: 4b:54:86:be:3b:e9:7e:70:d7:bd:64:70:4d:55:99:95:29:c7: 03:87:07:49:04:4e:cc:65:b7:49:a2:f0:f7:9d:da:d0:a1:b0: 7b:86:37:d2:c7:50:b3:21:cc:bb:87:9c:b6:91:aa:f7:b3:e8: 2c:d4:20:0e:e2:6b:ae:c0:8f:ba:7a:ee:b1:53:31:7d:b6:3d: 28:df:fd:63:1a:90:44:73:17:d4:a0:cb:88:15:ce:99:91:38: 91:5e:17:2f:36:36:dd:90:d5:4b:9e:7c:7a:b7:fe:c6:bc:54: 87:f2:ba:bd:1d:49:59:30:52:28:fd:ba:87:0a:07:af:89:9f: dc:d1:2b:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5HlbFlWHgjXFVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk NDI4OGJhNGQtYjUwNS00ZjY4LThhNTYtZTU2YmNkM2Q0ZGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidf0r4NPFA5TFNqRFLfkRAtRbtdPv3QNiO9Q Jl6NZSi1+QQWO8bYzMK+DmgLrLIzW4Fg6S71TPo0gfQpK8rlDqLTl7JvzXRXW2yI n99Nl3nuMJOa6qBMCAtGQ0vvTT/aGa7getFrRMCF1CgS/NM5h0kGaMT4eZCoXl6R uQjoyXYqx2X15suFsdJsRv7MDhWaHYlfsce+SSgdzAe8znIYhRzFvjskp8aDGn+C ONOWyPg5ZIXCXylQh4rVrcR/48oUJ10cKycujbF+d3QI0iO7EQnb+/iO35NWRve/ N+dkvG517lhDP56A7AMe/Hy5clgYllIU8L1woW9isqJlmdE2owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEa8Ke8NmIWQQM+4dFalfkBLo/mZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTgyZTI4NTEtOGQ2Mi0z Mzc3LThlNWItNzUzMjRhMTNkMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJao+04mwIMuFLjYXT4N7VPUWLtyRtpBkjLvIGdut8fCd0/gSzwZ5JSL vwlLwGZ4bo3UwvYZGwf2DAdwS98y663w5wh1OzBGYvFeO9kIR79NDQpmW3vyvynp 2+/pcohf9swCwP8eDJlF0h2HJMOiEMU4dhgpVeDfp1HMpgldaEtUhr476X5w171k cE1VmZUpxwOHB0kETsxlt0mi8Ped2tChsHuGN9LHULMhzLuHnLaRqvez6CzUIA7i a67Aj7p67rFTMX22PSjf/WMakERzF9Sgy4gVzpmROJFeFy82Nt2Q1UuefHq3/sa8 VIfyur0dSVkwUij9uocKB6+Jn9zRK1A= -----END CERTIFICATE-----Generated at Mon Apr 28 21:08:07 2025 by rpki-client