$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7dc1f74d-8588-393d-a48c-67ab7bc61f0c.roa File: 7dc1f74d-8588-393d-a48c-67ab7bc61f0c.roa (raw, json) Hash identifier: 4kBeQqZ6Pk5fqM/SS+s/2h0PvRgaBSnyjzclTSp3ubo= Subject key identifier: 57:57:1B:87:4F:66:BC:86:7A:FB:34:0F:61:E2:7D:76:63:DD:37:7C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496E4991AF600FAD4A9F822E20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7dc1f74d-8588-393d-a48c-67ab7bc61f0c.roa Signing time: Sun 06 Apr 2025 01:00:47 +0000 ROA not before: Sun 06 Apr 2025 01:00:47 +0000 ROA not after: Sat 05 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.62.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:49:91:af:60:0f:ad:4a:9f:82:2e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 6 01:00:47 2025 GMT Not After : Jul 5 01:00:47 2025 GMT Subject: CN=790c283f-b804-4fd3-b6f3-7461c50d6f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b4:68:7f:9a:b8:37:13:c1:7b:51:dd:f4:7a: 7b:d4:c1:74:9e:b3:42:93:fc:c5:81:53:c8:cf:96: b6:bb:2d:28:c8:78:17:0f:3f:8e:c3:a7:c3:67:e8: 70:f4:1b:f7:88:7d:35:ec:e7:f3:68:b7:d1:3b:37: fc:5f:49:25:8e:ca:43:33:f6:9f:4b:5e:de:15:72: fa:cf:e1:bc:ae:59:fe:cf:89:d8:2f:df:6c:2d:1a: 2a:76:ef:43:d3:c0:fc:eb:e7:5d:f8:c0:20:76:c3: 4b:fb:6a:91:1c:5c:3e:51:14:c0:e5:b4:49:d6:3f: 1f:0c:52:1b:82:7c:42:48:33:5a:81:d7:5a:c7:a3: 73:14:57:7d:12:11:8b:99:e0:78:fa:b6:97:03:f3: 9d:97:dc:c7:68:ec:4d:bf:ca:07:05:5e:be:4b:29: 9a:26:58:37:21:51:69:2c:5e:f3:9a:4c:ee:be:3a: 65:b6:89:a8:c1:51:6b:28:e1:f0:d3:c0:0d:90:ec: 39:63:9d:19:eb:0a:de:af:6e:68:fa:29:50:9c:6e: 66:49:40:4b:d5:ea:64:d0:86:36:a4:9c:d8:31:77: 7d:48:40:5b:73:de:3d:9f:c9:2b:2a:30:94:ea:6b: 6b:95:7b:47:eb:f5:d3:27:41:4b:7e:2e:71:41:25: 2b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:57:1B:87:4F:66:BC:86:7A:FB:34:0F:61:E2:7D:76:63:DD:37:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7dc1f74d-8588-393d-a48c-67ab7bc61f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.62.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:32:c6:c0:9f:56:13:80:27:20:f7:bf:31:1b:cb:a9:b2:8d: 15:28:7c:7b:c3:55:05:cc:32:fd:38:e7:ae:61:b2:9a:a7:a2: cf:ab:b3:a8:b1:1f:f2:30:26:15:15:39:e6:4c:e3:40:21:9b: 79:60:ed:15:3f:08:17:d5:fc:b6:61:06:b7:01:69:aa:09:90: a0:61:14:6e:e7:04:ab:dd:a7:7d:bd:49:29:37:3f:ac:64:b5: 33:f0:19:7a:4f:c0:b5:06:48:a0:c3:fb:36:ed:93:be:ae:97: 28:dc:eb:c4:1d:55:4d:1a:7d:e2:12:c2:76:e5:81:99:92:68: 28:29:a7:1b:cb:9d:34:4c:9f:55:23:4a:70:22:71:74:8d:9d: 06:35:f1:8e:a5:6a:74:81:d1:e0:c0:57:94:43:0f:a3:8f:6c: 00:5f:8b:9a:e7:72:89:fd:35:51:44:dd:96:72:2f:5d:e4:69: 12:bf:1a:81:0c:6f:d2:de:68:1a:0e:61:9b:d9:a6:10:7e:41: 66:56:2d:e0:0c:dc:d2:93:ad:5c:70:4a:5c:ca:b3:e3:12:08: 1d:e6:db:87:45:b3:c2:65:e7:6a:ac:4f:8d:c4:06:95:c9:72: 06:4c:ac:bc:ca:9c:3e:0e:9b:90:af:a8:42:34:7b:e6:71:90: ee:86:7d:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSZGvYA+tSp+CLiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk NzkwYzI4M2YtYjgwNC00ZmQzLWI2ZjMtNzQ2MWM1MGQ2Zjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbRof5q4NxPBe1Hd9Hp71MF0nrNCk/zFgVPI z5a2uy0oyHgXDz+Ow6fDZ+hw9Bv3iH017OfzaLfROzf8X0kljspDM/afS17eFXL6 z+G8rln+z4nYL99sLRoqdu9D08D86+dd+MAgdsNL+2qRHFw+URTA5bRJ1j8fDFIb gnxCSDNagddax6NzFFd9EhGLmeB4+raXA/Odl9zHaOxNv8oHBV6+SymaJlg3IVFp LF7zmkzuvjpltomowVFrKOHw08ANkOw5Y50Z6wrer25o+ilQnG5mSUBL1epk0IY2 pJzYMXd9SEBbc949n8krKjCU6mtrlXtH6/XTJ0FLfi5xQSUrSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdXG4dPZryGevs0D2HifXZj3Td8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2RjMWY3NGQtODU4OC0z OTNkLWE0OGMtNjdhYjdiYzYxZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAyxsCfVhOAJyD3vzEby6myjRUofHvDVQXMMv04565hspqnos+rs6ix H/IwJhUVOeZM40Ahm3lg7RU/CBfV/LZhBrcBaaoJkKBhFG7nBKvdp329SSk3P6xk tTPwGXpPwLUGSKDD+zbtk76ulyjc68QdVU0afeISwnblgZmSaCgppxvLnTRMn1Uj SnAicXSNnQY18Y6lanSB0eDAV5RDD6OPbABfi5rncon9NVFE3ZZyL13kaRK/GoEM b9LeaBoOYZvZphB+QWZWLeAM3NKTrVxwSlzKs+MSCB3m24dFs8Jl52qsT43EBpXJ cgZMrLzKnD4Om5CvqEI0e+ZxkO6GfSc= -----END CERTIFICATE-----Generated at Sat Apr 26 19:54:14 2025 by rpki-client