$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68d57722-9ac4-3ae9-9d33-8b8a2662f7ee.roa File: 68d57722-9ac4-3ae9-9d33-8b8a2662f7ee.roa (raw, json) Hash identifier: efqWNzPpeY+EXwoKmmn2sTtbgmWg/ktPghRNahuAh/4= Subject key identifier: 68:7F:D3:0E:BD:E9:F1:23:E4:5F:8A:9E:4B:B0:C1:72:B9:47:3B:8A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABEDA288BAF82EC6E75D280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68d57722-9ac4-3ae9-9d33-8b8a2662f7ee.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.39.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:da:28:8b:af:82:ec:6e:75:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=22ef5825-415d-4230-aa74-1076e9701eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2d:c9:03:3f:ee:7a:93:d4:1b:62:85:ad:7a: 53:3b:47:69:71:69:e1:df:bf:bc:62:56:59:f2:cb: ca:ec:9f:5d:56:fc:4e:08:20:b5:96:9b:13:b1:98: c1:20:28:45:cc:62:16:a9:8e:ce:a1:20:ba:d4:ba: 54:cd:82:9a:c7:63:55:b9:da:bb:a7:33:75:b7:7e: 2c:0c:67:81:b8:5b:f2:48:0e:bd:c1:7d:8e:a3:76: 50:d9:e9:4f:67:bb:9f:94:06:d0:d6:d4:33:6d:33: 0b:21:0c:b0:01:fb:bd:7f:04:4c:92:9a:d7:d8:bb: d5:46:da:dd:31:60:7d:f3:22:86:04:d2:50:88:8d: d9:eb:41:e3:5c:34:7f:8a:98:c6:e8:5b:b5:4f:83: 58:94:fe:d6:42:26:3b:f6:1d:00:35:43:87:e9:e7: 6a:cf:82:81:08:86:71:08:3a:06:0f:a4:fb:52:c1: cb:ce:83:5d:eb:e2:ed:07:eb:3e:a0:97:ce:bd:4e: be:80:f3:5c:8c:8d:27:1f:ad:05:bb:95:fa:0d:ba: b3:65:3a:b2:0c:55:bf:45:85:9b:bb:6b:2a:2f:a4: 47:63:33:80:bc:c4:b8:1f:1c:ca:f2:05:7e:1e:5a: 18:07:3f:ad:f6:df:9f:c9:37:df:17:b7:ab:6c:bb: 8f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7F:D3:0E:BD:E9:F1:23:E4:5F:8A:9E:4B:B0:C1:72:B9:47:3B:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68d57722-9ac4-3ae9-9d33-8b8a2662f7ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a7:80:44:4b:eb:56:e1:06:f1:ec:16:b8:a2:00:f5:54:1e: 9a:e4:30:43:94:f5:5f:40:a7:3f:34:f4:a4:a2:94:fa:1b:72: 45:e4:ef:b4:27:e1:4f:4b:bf:b1:42:21:f0:6d:a4:ee:a8:64: 84:3c:b0:e4:1f:b2:14:a8:39:b6:60:6b:66:0d:35:0d:f0:60: 76:d0:a4:f5:bc:2f:a1:2e:2c:4e:f2:86:6b:19:91:ac:f3:58: a2:e4:b5:14:f4:50:80:e6:7f:72:92:ee:36:ad:0f:f6:fe:81: 8a:d2:4e:a8:19:5d:39:ba:27:f3:61:b3:e2:17:e6:02:4b:c5: 41:bb:87:b4:16:b0:fc:d6:28:62:0c:69:b0:58:2f:51:8c:fc: 1f:ef:82:7a:4e:26:34:91:85:ee:70:b6:26:09:b6:71:d8:04: 66:b1:91:d3:75:14:a8:41:84:c3:82:c9:4f:4f:40:4f:c4:22: a5:12:38:e4:b2:59:52:95:6a:d8:31:d2:14:88:79:d7:58:9b: 70:53:8d:66:1c:95:a6:13:e2:de:4b:74:05:66:3c:df:96:ff: d4:d2:2d:c7:c4:be:2e:8a:16:6e:d7:8e:67:7f:a4:e5:de:fb: d6:74:07:72:8d:a6:ec:3b:95:c4:f8:e0:3f:50:a7:dc:b7:1a: ad:d6:d7:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavtooi6+C7G510oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk MjJlZjU4MjUtNDE1ZC00MjMwLWFhNzQtMTA3NmU5NzAxZWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi3JAz/uepPUG2KFrXpTO0dpcWnh37+8YlZZ 8svK7J9dVvxOCCC1lpsTsZjBIChFzGIWqY7OoSC61LpUzYKax2NVudq7pzN1t34s DGeBuFvySA69wX2Oo3ZQ2elPZ7uflAbQ1tQzbTMLIQywAfu9fwRMkprX2LvVRtrd MWB98yKGBNJQiI3Z60HjXDR/ipjG6Fu1T4NYlP7WQiY79h0ANUOH6edqz4KBCIZx CDoGD6T7UsHLzoNd6+LtB+s+oJfOvU6+gPNcjI0nH60Fu5X6DbqzZTqyDFW/RYWb u2sqL6RHYzOAvMS4HxzK8gV+HloYBz+t9t+fyTffF7erbLuPUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGh/0w696fEj5F+KnkuwwXK5RzuKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjhkNTc3MjItOWFjNC0z YWU5LTlkMzMtOGI4YTI2NjJmN2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyczMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADungERL61bhBvHsFriiAPVUHprkMEOU9V9Apz809KSilPobckXk77Qn 4U9Lv7FCIfBtpO6oZIQ8sOQfshSoObZga2YNNQ3wYHbQpPW8L6EuLE7yhmsZkazz WKLktRT0UIDmf3KS7jatD/b+gYrSTqgZXTm6J/Nhs+IX5gJLxUG7h7QWsPzWKGIM abBYL1GM/B/vgnpOJjSRhe5wtiYJtnHYBGaxkdN1FKhBhMOCyU9PQE/EIqUSOOSy WVKVatgx0hSIeddYm3BTjWYclaYT4t5LdAVmPN+W/9TSLcfEvi6KFm7Xjmd/pOXe +9Z0B3KNpuw7lcT44D9Qp9y3Gq3W13Q= -----END CERTIFICATE-----Generated at Sat Apr 26 15:59:58 2025 by rpki-client