$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f386e46-5f55-3aef-853f-c40aca2da2f6.roa File: 7f386e46-5f55-3aef-853f-c40aca2da2f6.roa (raw, json) Hash identifier: 469i1aag2dJIGFpJP8uRuloOMZbP9WEyL1H7Afj+7uU= Subject key identifier: 0B:80:EE:05:89:FF:82:0A:11:65:4E:A1:5E:33:A0:20:5E:49:8C:50 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495C247C547144E085D17A3D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f386e46-5f55-3aef-853f-c40aca2da2f6.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 16625 IP address blocks: 23.44.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:7c:54:71:44:e0:85:d1:7a:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=50f1cf3f-c135-44c5-bad4-7de55a4f61b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:29:cb:d9:e9:2e:c8:e2:78:1f:43:d7:b2:d2: 10:ae:d0:27:06:af:20:4c:d1:ee:f7:c8:b4:76:2d: cb:14:c0:22:2b:3a:33:be:03:33:bd:b9:66:3e:71: 1f:71:0d:a8:22:85:d8:c0:ba:36:f5:c7:a4:c4:2a: 86:42:69:9e:3f:e7:dc:34:7e:4f:d6:74:6e:88:f5: e4:4c:54:bc:57:f9:e9:c1:d2:89:32:97:d4:05:25: 5e:dc:35:a5:45:9d:71:ea:f0:c2:71:2b:fb:83:03: 11:51:18:4e:ca:31:bb:14:8d:10:90:f1:7f:3b:c8: 7b:48:50:f9:09:60:ff:89:2d:da:b7:8c:cb:c3:a1: e8:34:4e:2f:30:a0:3a:08:cc:cf:1c:5e:e0:e8:16: b9:85:8c:08:4c:59:df:e9:b4:d2:66:cf:56:3d:32: 8a:c1:e6:88:03:5a:5b:72:07:da:e1:da:e3:7f:49: e1:c8:5f:28:84:f0:4f:06:ce:7d:cb:1d:5d:4a:f3: 24:72:a4:8c:a6:c7:3d:6e:44:56:f6:2c:61:d2:9d: 12:2e:c7:cd:1f:2c:8c:d2:cf:41:ec:1b:ae:ea:ca: e5:41:59:19:00:01:f3:69:6c:5c:e6:c1:79:4d:e5: 6a:46:b2:9b:06:74:58:1f:b5:ab:43:2a:54:ee:11: cd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:80:EE:05:89:FF:82:0A:11:65:4E:A1:5E:33:A0:20:5E:49:8C:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f386e46-5f55-3aef-853f-c40aca2da2f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:a9:ea:76:81:25:58:92:29:fe:da:63:0c:85:14:bd:52:48: 20:6c:d2:da:f9:65:44:cd:72:50:7d:75:3c:86:dc:81:a0:5f: d1:27:63:5f:bd:b3:54:04:ec:80:ec:55:84:16:59:c2:af:0a: 5a:2a:47:bd:7b:48:4d:ba:b1:22:11:60:d2:18:54:bc:d5:f3: 8b:a4:69:d3:b8:94:ac:1a:b6:1b:73:a5:64:e8:bd:03:22:ee: a8:46:cd:ca:a6:d9:07:18:18:68:a6:b8:61:fe:b4:7f:fc:c4: b8:22:fa:8d:6c:d3:eb:0a:f9:cb:d8:b4:f8:09:e7:fc:56:1f: 9a:ce:cd:49:2d:72:8f:94:46:da:1e:8c:a7:76:30:d4:1b:4e: 46:69:55:74:c6:3d:2a:5c:02:04:30:4d:1b:23:06:d6:21:48: 11:bc:29:59:a6:1c:29:9f:2b:16:a6:9c:46:af:02:60:8e:64: 92:42:61:50:c4:fb:80:d7:82:dd:04:e2:e8:cf:cb:9a:46:45: cf:d6:d7:4f:61:d9:bd:ba:b1:42:1c:83:ae:d7:05:51:ab:d9: dd:77:91:5a:3d:87:81:1b:f8:97:14:63:96:0c:f8:55:41:ef: 90:3a:cd:19:72:ca:4a:8d:02:46:29:e0:d1:a7:91:ce:f9:7e: 36:27:bc:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJHxUcUTghdF6PQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk NTBmMWNmM2YtYzEzNS00NGM1LWJhZDQtN2RlNTVhNGY2MWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSnL2ekuyOJ4H0PXstIQrtAnBq8gTNHu98i0 di3LFMAiKzozvgMzvblmPnEfcQ2oIoXYwLo29cekxCqGQmmeP+fcNH5P1nRuiPXk TFS8V/npwdKJMpfUBSVe3DWlRZ1x6vDCcSv7gwMRURhOyjG7FI0QkPF/O8h7SFD5 CWD/iS3at4zLw6HoNE4vMKA6CMzPHF7g6Ba5hYwITFnf6bTSZs9WPTKKweaIA1pb cgfa4drjf0nhyF8ohPBPBs59yx1dSvMkcqSMpsc9bkRW9ixh0p0SLsfNHyyM0s9B 7Buu6srlQVkZAAHzaWxc5sF5TeVqRrKbBnRYH7WrQypU7hHNbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuA7gWJ/4IKEWVOoV4zoCBeSYxQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2YzODZlNDYtNWY1NS0z YWVmLTg1M2YtYzQwYWNhMmRhMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOp6naBJViSKf7aYwyFFL1SSCBs0tr5ZUTNclB9dTyG3IGgX9EnY1+9 s1QE7IDsVYQWWcKvCloqR717SE26sSIRYNIYVLzV84ukadO4lKwathtzpWTovQMi 7qhGzcqm2QcYGGimuGH+tH/8xLgi+o1s0+sK+cvYtPgJ5/xWH5rOzUktco+URtoe jKd2MNQbTkZpVXTGPSpcAgQwTRsjBtYhSBG8KVmmHCmfKxamnEavAmCOZJJCYVDE +4DXgt0E4ujPy5pGRc/W109h2b26sUIcg67XBVGr2d13kVo9h4Eb+JcUY5YM+FVB 75A6zRlyykqNAkYp4NGnkc75fjYnvDo= -----END CERTIFICATE-----Generated at Sun Apr 27 03:12:03 2025 by rpki-client