$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63951d6a-80a1-3897-8b5e-4dba1095eb3c.roa File: 63951d6a-80a1-3897-8b5e-4dba1095eb3c.roa (raw, json) Hash identifier: h4Yns5pK8M9CyN/kmx/+/W/i1XDzpzzCxS9OTho1raU= Subject key identifier: B2:C8:5F:6A:F4:1C:CF:9F:B8:93:29:D2:FA:D7:33:36:E3:BE:12:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496CE4664EDC325A0BAA3B1B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63951d6a-80a1-3897-8b5e-4dba1095eb3c.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 16625 IP address blocks: 23.57.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:66:4e:dc:32:5a:0b:aa:3b:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=ee20d892-03dd-49b9-9b5c-b4c3f48f9e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:95:5e:b9:4e:70:1f:dd:8f:be:f9:94:64:1e: 3a:d7:9e:1e:5f:a6:74:83:84:57:e6:98:bc:dd:34: 45:f1:2b:60:cc:81:9d:a0:28:ba:ea:15:7e:94:39: 69:90:46:01:d6:57:e9:1b:0d:17:85:a6:ac:fe:07: 78:36:3b:af:68:98:55:c3:03:50:d8:09:dc:b9:3b: 46:d0:51:b2:30:52:06:25:71:70:bd:c5:f2:e7:8d: 83:37:a6:fd:00:97:14:22:32:3c:26:d6:77:20:01: 5f:8e:24:45:f5:9b:73:05:cf:ce:ed:12:74:2d:ae: 8b:fd:0a:b9:82:27:a7:60:3e:9d:d5:4e:29:82:21: bf:4a:fa:c8:e3:82:67:bc:14:0b:b9:b7:46:1a:d0: f2:be:52:34:f6:4b:11:85:4e:2c:be:33:f6:4f:6c: 2e:aa:5e:37:8c:5e:10:b4:8c:39:88:31:ae:57:8b: 6b:50:39:e7:2d:26:42:a1:89:9d:17:14:2e:f4:34: 2b:79:35:5d:81:ee:08:89:e2:b0:6c:18:9a:b1:6c: 34:84:79:5a:02:1c:2e:5c:6e:b5:90:32:93:64:ce: a3:65:5d:8c:0f:1f:5d:70:54:e4:bf:37:30:a9:48: c8:0a:e7:ee:07:b3:07:cc:71:aa:f7:c6:b3:51:62: 34:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C8:5F:6A:F4:1C:CF:9F:B8:93:29:D2:FA:D7:33:36:E3:BE:12:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63951d6a-80a1-3897-8b5e-4dba1095eb3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.57.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:0c:eb:a9:df:56:9d:81:84:65:bb:c8:78:79:a5:04:9b:a0: 95:7a:37:34:99:15:c8:15:43:e9:c5:cd:82:fb:3b:69:02:3f: 8c:ed:2c:62:04:9f:1e:7e:df:73:58:91:24:34:0c:0d:c1:7f: 02:be:9e:44:26:83:81:ad:84:57:74:f7:41:2b:99:45:8a:de: 85:4a:ca:f0:26:3a:92:ab:59:ab:21:c5:9c:56:65:f2:e6:7e: 2a:2d:e6:58:82:d6:be:15:9f:d1:d2:2b:54:9c:95:4a:8b:6f: c9:a4:9c:0f:cf:1e:b8:9b:19:d5:cf:d8:56:71:73:74:21:40: 2e:d2:a3:e4:5a:62:8a:d6:3d:dd:96:5e:af:03:d1:19:fd:61: 12:6a:8b:30:0c:b8:75:57:12:5c:9b:72:ea:67:e3:5c:f0:42: 0e:bf:4e:da:6e:87:8b:f5:e0:a5:6e:e1:46:14:65:2f:6f:6e: b9:24:6d:7c:2b:e2:f5:84:7a:1a:8a:3d:da:83:e4:ee:3b:27: e8:5b:0a:a9:e3:b6:5a:d9:4a:ba:28:a1:8e:90:f4:57:c6:bf: 55:9a:a8:d6:c1:2e:da:06:c5:4c:88:0f:6a:fc:da:86:7f:3b: 11:9e:eb:4f:ac:09:77:c4:a2:e5:b1:04:70:bb:b8:22:04:fc: 31:9d:90:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5GZO3DJaC6o7GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk ZWUyMGQ4OTItMDNkZC00OWI5LTliNWMtYjRjM2Y0OGY5ZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZVeuU5wH92PvvmUZB46154eX6Z0g4RX5pi8 3TRF8StgzIGdoCi66hV+lDlpkEYB1lfpGw0Xhaas/gd4NjuvaJhVwwNQ2AncuTtG 0FGyMFIGJXFwvcXy542DN6b9AJcUIjI8JtZ3IAFfjiRF9ZtzBc/O7RJ0La6L/Qq5 gienYD6d1U4pgiG/SvrI44JnvBQLubdGGtDyvlI09ksRhU4svjP2T2wuql43jF4Q tIw5iDGuV4trUDnnLSZCoYmdFxQu9DQreTVdge4IieKwbBiasWw0hHlaAhwuXG61 kDKTZM6jZV2MDx9dcFTkvzcwqUjICufuB7MHzHGq98azUWI0zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLIX2r0HM+fuJMp0vrXMzbjvhJVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjM5NTFkNmEtODBhMS0z ODk3LThiNWUtNGRiYTEwOTVlYjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoM66nfVp2BhGW7yHh5pQSboJV6NzSZFcgVQ+nFzYL7O2kCP4ztLGIE nx5+33NYkSQ0DA3BfwK+nkQmg4GthFd090ErmUWK3oVKyvAmOpKrWashxZxWZfLm fiot5liC1r4Vn9HSK1SclUqLb8mknA/PHribGdXP2FZxc3QhQC7So+RaYorWPd2W Xq8D0Rn9YRJqizAMuHVXElybcupn41zwQg6/Ttpuh4v14KVu4UYUZS9vbrkkbXwr 4vWEehqKPdqD5O47J+hbCqnjtlrZSroooY6Q9FfGv1WaqNbBLtoGxUyID2r82oZ/ OxGe60+sCXfEouWxBHC7uCIE/DGdkDA= -----END CERTIFICATE-----Generated at Sun Apr 27 05:39:12 2025 by rpki-client