$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/881f9918-5dce-386c-8e25-94d7450b1614.roa File: 881f9918-5dce-386c-8e25-94d7450b1614.roa (raw, json) Hash identifier: rN05RwRkp9Iw0RPFxR25Vo3GftsuFdwdLACp9eLtosw= Subject key identifier: 3A:A9:44:74:0C:A7:B8:A5:14:4C:24:7F:4B:02:03:8E:B1:B5:C9:36 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495EEEF438405D2BB0B447C678 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/881f9918-5dce-386c-8e25-94d7450b1614.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 24319 IP address blocks: 23.47.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:f4:38:40:5d:2b:b0:b4:47:c6:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=e9b7947d-9737-49ab-aa9c-1cf7437e05c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7e:ef:f0:c6:12:22:2c:0c:51:3e:99:a2:3c: 0a:3c:3b:67:18:6e:91:f1:75:8f:e5:a1:2a:33:45: 48:83:08:4c:10:ee:52:fa:6e:6f:0b:1a:1b:91:52: 31:98:55:10:91:9f:cc:84:b9:f0:53:52:55:cd:88: 94:58:ed:df:d3:70:b2:70:24:6b:a8:2b:e5:5e:f5: e3:2a:87:0a:6e:e1:70:de:47:84:38:12:58:8a:10: 79:3b:5a:f3:f1:0a:e4:f9:c6:46:2b:86:82:6a:5a: 85:40:38:a2:0d:3d:2a:94:61:28:f3:fd:dd:d2:b9: 9b:53:0c:c1:df:5d:67:49:95:d8:6f:45:72:44:5f: 5b:ea:52:dc:2e:c7:9c:c9:6e:0a:1f:7b:d7:7b:8d: a6:3c:cb:2a:8e:25:e6:82:48:df:71:12:28:ad:de: 5c:42:a8:4e:ff:ba:c1:f3:38:c9:40:fb:4b:f1:1c: 31:43:0d:79:34:e6:f7:4f:7d:49:04:8c:69:0a:1a: a6:b5:55:04:f3:42:88:43:f6:45:4d:15:fa:14:c0: 78:c6:37:74:91:06:4e:dd:32:83:97:02:7e:be:f8: 26:b8:6d:f0:76:22:d9:df:46:a3:61:32:6a:54:ad: 84:17:41:f4:e1:90:b7:4f:29:60:9f:17:19:39:1b: be:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A9:44:74:0C:A7:B8:A5:14:4C:24:7F:4B:02:03:8E:B1:B5:C9:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/881f9918-5dce-386c-8e25-94d7450b1614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.47.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a5:9c:a6:ec:fd:6f:18:1a:0e:74:79:48:93:24:f4:6f:72: 3e:f3:ec:7f:85:16:35:c8:32:43:2a:8b:fd:72:ec:5d:a4:6c: 98:47:0a:d5:db:73:de:a2:4c:df:4b:a6:7d:4a:a5:d6:9e:e9: 71:7d:62:b8:7a:0d:1b:bb:55:94:0a:fc:fa:e4:3d:de:31:f0: 13:92:0c:9c:1f:cf:39:89:66:4e:75:23:83:50:8a:81:ea:cc: 19:8b:76:75:2e:40:7a:6d:31:36:45:aa:ae:9f:3f:98:2d:09: 71:0b:c7:ab:14:50:f8:23:66:53:dd:89:9f:1a:f2:2b:9d:1f: ed:41:a0:fb:d1:8e:7e:3e:eb:d6:c3:f4:03:69:93:48:ed:14: 00:27:7d:3b:4b:12:50:19:63:21:4a:03:2a:45:e5:72:59:be: fa:e5:d8:a5:69:05:0e:b5:e3:e8:da:ec:fc:2e:db:49:36:63: 59:37:8e:30:25:7f:6f:74:4a:0f:40:b7:ea:33:42:05:16:3d: 71:c1:a0:ca:0f:7a:e2:44:e7:ac:91:68:4f:87:89:9f:9a:e4: 02:5c:5c:e0:27:6c:2f:30:d4:eb:6d:33:7a:5a:57:38:c2:30: b5:1e:9d:8d:5a:28:3a:c4:88:82:68:37:bc:b2:45:18:c7:d0: 87:8f:9f:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7vQ4QF0rsLRHxngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk ZTliNzk0N2QtOTczNy00OWFiLWFhOWMtMWNmNzQzN2UwNWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH7v8MYSIiwMUT6ZojwKPDtnGG6R8XWP5aEq M0VIgwhMEO5S+m5vCxobkVIxmFUQkZ/MhLnwU1JVzYiUWO3f03CycCRrqCvlXvXj KocKbuFw3keEOBJYihB5O1rz8Qrk+cZGK4aCalqFQDiiDT0qlGEo8/3d0rmbUwzB 311nSZXYb0VyRF9b6lLcLsecyW4KH3vXe42mPMsqjiXmgkjfcRIord5cQqhO/7rB 8zjJQPtL8RwxQw15NOb3T31JBIxpChqmtVUE80KIQ/ZFTRX6FMB4xjd0kQZO3TKD lwJ+vvgmuG3wdiLZ30ajYTJqVK2EF0H04ZC3TylgnxcZORu+NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqpRHQMp7ilFEwkf0sCA46xtck2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODgxZjk5MTgtNWRjZS0z ODZjLThlMjUtOTRkNzQ1MGIxNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy9/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFilnKbs/W8YGg50eUiTJPRvcj7z7H+FFjXIMkMqi/1y7F2kbJhHCtXb c96iTN9Lpn1Kpdae6XF9Yrh6DRu7VZQK/PrkPd4x8BOSDJwfzzmJZk51I4NQioHq zBmLdnUuQHptMTZFqq6fP5gtCXELx6sUUPgjZlPdiZ8a8iudH+1BoPvRjn4+69bD 9ANpk0jtFAAnfTtLElAZYyFKAypF5XJZvvrl2KVpBQ614+ja7Pwu20k2Y1k3jjAl f290Sg9At+ozQgUWPXHBoMoPeuJE56yRaE+HiZ+a5AJcXOAnbC8w1OttM3paVzjC MLUenY1aKDrEiIJoN7yyRRjH0IePn0o= -----END CERTIFICATE-----Generated at Sun Apr 27 01:04:02 2025 by rpki-client