$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60904298-0dba-3a79-a730-790a142b5530.roa File: 60904298-0dba-3a79-a730-790a142b5530.roa (raw, json) Hash identifier: 4LIpa0PArIZuE0F0oaLAKZN6kO4XAzU29b8AN7/6jJs= Subject key identifier: 44:4F:EF:B3:4E:54:08:66:C0:40:95:7A:68:10:27:04:F5:C5:88:43 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EBA185FE9E69A765CA9C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60904298-0dba-3a79-a730-790a142b5530.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.35.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:ba:18:5f:e9:e6:9a:76:5c:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=5ebac4d4-75b9-428d-80d1-122a40154d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bf:9c:2a:89:13:08:54:f7:5b:de:c4:ef:81: a9:b4:83:42:4f:1a:db:76:06:6b:2b:43:3a:b2:7e: ce:1b:f9:95:5b:44:1f:9e:cc:10:b0:2d:c0:50:1a: 12:04:a3:86:43:9f:f1:33:c6:9f:06:5f:a5:89:80: 7a:29:70:e3:f2:82:9f:19:82:77:17:5d:a8:36:ba: 45:74:5c:a0:1c:eb:48:d3:ac:e1:fb:1b:37:85:e3: d1:89:ea:55:aa:18:ce:f6:46:74:1b:68:55:55:04: d0:23:69:cf:35:95:04:2c:1a:fb:53:f2:e1:15:2d: 40:08:6c:a9:0a:77:a5:c9:90:7d:04:92:ce:28:06: 34:94:be:10:09:06:de:0c:64:6d:56:be:ad:00:eb: 30:69:f9:cc:8f:c6:56:e7:23:6e:fb:70:3f:19:d0: 94:11:29:85:df:42:80:7f:af:96:50:50:de:19:b0: d0:80:eb:27:a0:30:eb:40:6f:c0:2a:de:54:06:74: 60:49:0d:f0:0a:51:5b:a1:fa:83:dc:3c:f9:36:25: df:59:84:74:01:f0:eb:9a:9d:07:3a:ea:82:62:1c: 94:a3:7d:5b:21:9b:4f:60:98:9c:9c:92:a3:c4:92: 95:1d:71:41:ed:d5:ca:cd:05:c5:ae:f0:19:db:38: 49:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4F:EF:B3:4E:54:08:66:C0:40:95:7A:68:10:27:04:F5:C5:88:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60904298-0dba-3a79-a730-790a142b5530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:1e:cc:60:14:f8:10:cf:8b:89:d2:9d:b8:b9:ea:97:79:ab: 1e:4d:b7:be:fa:3e:79:24:b9:99:1e:25:16:3d:1e:63:cc:64: a0:f6:4e:5d:a9:fb:e1:e6:df:62:41:b7:b6:45:71:1b:19:56: b3:75:2a:25:ef:d3:31:d1:61:e8:da:55:07:7d:a6:71:2a:3a: cf:b4:1b:5f:f8:6f:3a:84:b4:ef:31:53:a3:2a:be:8a:30:ba: e6:4b:02:b1:b8:d3:6d:46:ea:fd:04:bf:97:6c:e3:2c:0e:4b: 11:97:ef:9d:0e:fd:1f:d3:24:05:8c:ac:ed:e0:c4:8c:0a:91: 09:77:12:d5:dc:9b:4b:46:b6:3f:1d:cb:7a:1a:ec:4c:f3:ea: 2b:1b:e4:cf:5e:69:07:e2:76:0f:e8:d0:e1:3d:26:de:f9:e3: 41:56:56:06:36:41:cf:e6:8c:25:6d:d8:75:e6:ab:97:32:f0: f0:8a:b9:98:b5:79:71:63:e7:f5:36:05:63:56:f3:7a:28:84: f0:8d:9a:4a:48:e6:49:6e:8c:d0:25:9c:02:a0:ba:a5:66:0d: ff:7e:36:88:97:46:60:2e:2e:5a:27:80:d4:cd:29:33:d1:b6: ab:23:21:67:67:62:21:b5:dd:a4:a3:ae:b7:ab:62:44:78:1f: 8d:a6:99:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLroYX+nmmnZcqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk NWViYWM0ZDQtNzViOS00MjhkLTgwZDEtMTIyYTQwMTU0ZDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb+cKokTCFT3W97E74GptINCTxrbdgZrK0M6 sn7OG/mVW0QfnswQsC3AUBoSBKOGQ5/xM8afBl+liYB6KXDj8oKfGYJ3F12oNrpF dFygHOtI06zh+xs3hePRiepVqhjO9kZ0G2hVVQTQI2nPNZUELBr7U/LhFS1ACGyp CnelyZB9BJLOKAY0lL4QCQbeDGRtVr6tAOswafnMj8ZW5yNu+3A/GdCUESmF30KA f6+WUFDeGbDQgOsnoDDrQG/AKt5UBnRgSQ3wClFbofqD3Dz5NiXfWYR0AfDrmp0H OuqCYhyUo31bIZtPYJicnJKjxJKVHXFB7dXKzQXFrvAZ2zhJmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERP77NOVAhmwECVemgQJwT1xYhDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjA5MDQyOTgtMGRiYS0z YTc5LWE3MzAtNzkwYTE0MmI1NTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUezGAU+BDPi4nSnbi56pd5qx5Nt776PnkkuZkeJRY9HmPMZKD2Tl2p ++Hm32JBt7ZFcRsZVrN1KiXv0zHRYejaVQd9pnEqOs+0G1/4bzqEtO8xU6Mqvoow uuZLArG4021G6v0Ev5ds4ywOSxGX750O/R/TJAWMrO3gxIwKkQl3EtXcm0tGtj8d y3oa7Ezz6isb5M9eaQfidg/o0OE9Jt7540FWVgY2Qc/mjCVt2HXmq5cy8PCKuZi1 eXFj5/U2BWNW83oohPCNmkpI5klujNAlnAKguqVmDf9+NoiXRmAuLlongNTNKTPR tqsjIWdnYiG13aSjrrerYkR4H42mmcU= -----END CERTIFICATE-----Generated at Mon Apr 28 02:10:12 2025 by rpki-client