$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60d37aaa-ffd1-3546-bae8-87722eb27e81.roa File: 60d37aaa-ffd1-3546-bae8-87722eb27e81.roa (raw, json) Hash identifier: qM82u0ShUpjaDubFCxkEa+liCKPlj1D9sNQZY0Fl5T4= Subject key identifier: 32:4A:31:54:20:CA:21:22:53:BD:6E:46:19:A7:7C:CA:F2:68:63:CE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849244E8C615308B49CAF691700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60d37aaa-ffd1-3546-bae8-87722eb27e81.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.1.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:8c:61:53:08:b4:9c:af:69:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=34f5b34c-04d3-443c-b546-2dcef78a6d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:0a:0c:fd:6e:64:69:50:28:5f:2d:15:84: 69:c0:09:a3:40:d8:ea:42:7d:12:83:83:68:7a:61: bb:7f:d2:c8:2c:b7:2a:90:53:c6:6a:b8:7a:06:44: 8b:03:e4:6b:8e:c1:3c:9c:39:ab:ca:2e:a4:95:64: ef:65:03:79:e5:90:f1:6c:df:30:f2:da:46:e0:25: 74:1e:93:27:f6:db:ec:7d:07:1b:f9:28:1b:07:08: 1e:dd:1b:3e:38:62:75:43:60:a8:7a:ae:a1:b9:73: 7d:f5:14:0d:0c:d5:f5:ff:97:00:97:88:b8:a0:01: f5:ad:08:b6:d3:a0:fb:50:f8:44:c3:d0:a3:29:03: 4b:9e:00:06:44:06:fb:c4:54:a2:1f:0b:e6:06:7f: 71:52:13:07:84:6b:3a:b1:15:fe:ef:cf:e1:a6:a6: f4:11:d7:31:2a:6f:e2:25:99:c2:e5:c1:7a:4d:52: a9:85:7e:cd:77:fe:dc:3b:98:52:77:4f:e1:91:42: b8:83:93:54:2f:9a:ed:8e:8b:aa:24:f9:dc:dc:eb: 2f:8e:43:f0:8e:d3:14:71:1d:1b:bd:d2:aa:ba:8e: 1d:b0:68:2a:ce:cd:a1:b0:64:d0:25:18:db:71:71: 0d:2c:58:2a:c0:b1:4c:32:cc:b7:5c:ca:fa:78:3b: cb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4A:31:54:20:CA:21:22:53:BD:6E:46:19:A7:7C:CA:F2:68:63:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60d37aaa-ffd1-3546-bae8-87722eb27e81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:b3:31:d8:6b:3c:23:cc:99:a2:e3:aa:b2:27:e3:54:bf:c1: db:fd:20:d3:3c:0d:a4:5c:63:5a:25:4f:25:36:b9:0f:8a:90: 81:e1:1c:b8:0b:74:59:48:94:fc:1d:46:8e:0d:2e:23:40:1d: 94:a7:a4:03:2a:18:c2:18:f5:48:ac:29:cd:2c:e6:07:b3:51: 62:de:99:c2:f7:b7:74:03:b3:88:15:b1:b8:5c:1d:43:0d:73: ce:4b:07:1d:20:7e:f5:45:2e:bd:fb:37:e1:3a:36:ed:5c:12: 6e:82:9c:8a:f4:d6:6c:91:2b:7c:0a:59:18:91:a7:06:5c:f6: 4a:fd:44:3c:bb:90:e5:e2:6d:ac:37:81:d2:a6:57:14:c8:ac: dc:36:9d:22:83:71:fb:55:aa:0e:07:09:01:6d:43:a4:97:a1: 23:3d:16:32:97:5f:87:1c:e7:3c:c0:66:e9:40:6f:16:71:eb: b6:a5:bd:c7:d4:2e:4f:b4:86:84:7a:89:00:ba:c6:9b:42:36: a8:72:fe:03:a8:61:38:86:f3:7a:f4:05:8b:2c:5e:93:56:04: 37:8e:fd:95:53:72:19:3b:d3:ca:f5:7e:a0:12:0f:9e:fe:0d: 54:8d:d8:34:a3:0c:e8:80:95:1d:12:8f:28:d6:9f:28:d7:15: de:05:55:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkToxhUwi0nK9pFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MzRmNWIzNGMtMDRkMy00NDNjLWI1NDYtMmRjZWY3OGE2ZDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua8KDP1uZGlQKF8tFYRpwAmjQNjqQn0Sg4No emG7f9LILLcqkFPGarh6BkSLA+RrjsE8nDmryi6klWTvZQN55ZDxbN8w8tpG4CV0 HpMn9tvsfQcb+SgbBwge3Rs+OGJ1Q2Coeq6huXN99RQNDNX1/5cAl4i4oAH1rQi2 06D7UPhEw9CjKQNLngAGRAb7xFSiHwvmBn9xUhMHhGs6sRX+78/hpqb0EdcxKm/i JZnC5cF6TVKphX7Nd/7cO5hSd0/hkUK4g5NUL5rtjouqJPnc3OsvjkPwjtMUcR0b vdKquo4dsGgqzs2hsGTQJRjbcXENLFgqwLFMMsy3XMr6eDvLpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJKMVQgyiEiU71uRhmnfMryaGPOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjBkMzdhYWEtZmZkMS0z NTQ2LWJhZTgtODc3MjJlYjI3ZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwEsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyzMdhrPCPMmaLjqrIn41S/wdv9INM8DaRcY1olTyU2uQ+KkIHhHLgL dFlIlPwdRo4NLiNAHZSnpAMqGMIY9UisKc0s5gezUWLemcL3t3QDs4gVsbhcHUMN c85LBx0gfvVFLr37N+E6Nu1cEm6CnIr01myRK3wKWRiRpwZc9kr9RDy7kOXibaw3 gdKmVxTIrNw2nSKDcftVqg4HCQFtQ6SXoSM9FjKXX4cc5zzAZulAbxZx67alvcfU Lk+0hoR6iQC6xptCNqhy/gOoYTiG83r0BYssXpNWBDeO/ZVTchk708r1fqASD57+ DVSN2DSjDOiAlR0SjyjWnyjXFd4FVa4= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:16 2025 by rpki-client