$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b661471-59dd-30f6-bd4f-25cc8427e2f9.roa File: 8b661471-59dd-30f6-bd4f-25cc8427e2f9.roa (raw, json) Hash identifier: S0wI0l5KKtXnPpsfLxIelcbphYHLOf7MyJl3oEnB11Y= Subject key identifier: 7A:20:B8:40:F3:EF:15:89:B0:40:79:8B:F1:DF:B8:A2:93:31:29:34 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABEEA515CEB683297954E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b661471-59dd-30f6-bd4f-25cc8427e2f9.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.41.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:ea:51:5c:eb:68:32:97:95:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=898ff381-4b4a-4273-a7a8-9a8b63575ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:02:16:45:47:c7:ad:39:83:77:96:73:ea:52: 01:7f:32:fb:8a:dc:d1:9b:24:f8:ed:00:11:3c:02: ef:40:17:7c:b2:c6:9b:10:22:ce:fe:65:9a:ff:6c: 27:ee:81:a8:f9:ad:c4:6d:d3:f0:6e:b6:d2:32:98: d4:22:b3:85:00:17:6c:3a:89:6b:aa:03:1a:d0:2c: df:c4:fc:a4:96:a0:31:69:e5:3d:34:dd:29:5b:0e: 0c:42:2a:70:f6:36:13:5f:c6:ef:8d:42:4e:ad:c3: 9f:6f:4a:dc:6c:c6:e0:f5:8f:fe:a0:64:ea:0d:0c: 2d:d2:08:0b:37:45:91:8c:11:a9:eb:32:ff:df:7c: 21:53:ac:b2:8a:d0:1f:55:9a:c1:98:b8:e3:bc:47: ff:7d:22:82:49:38:f7:b5:fb:38:2a:30:af:7f:95: 94:34:6e:34:9f:a1:57:a8:da:7c:45:53:85:8d:a0: d5:27:0c:81:2b:5d:59:90:b9:52:4c:ed:0c:9f:ec: 83:52:7a:5f:27:77:1e:79:f7:6f:91:50:58:e1:49: 40:11:93:cd:a2:35:36:a4:f9:a4:d9:04:c6:b6:cc: b9:b6:bb:10:fa:dc:f4:e6:6e:c3:00:c3:ec:d5:dc: 62:a5:17:34:36:53:b5:7c:14:50:b6:f4:10:0b:b8: de:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:20:B8:40:F3:EF:15:89:B0:40:79:8B:F1:DF:B8:A2:93:31:29:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b661471-59dd-30f6-bd4f-25cc8427e2f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:6f:c6:42:02:ac:57:f1:ac:37:8e:d2:1b:ab:45:51:16:45: 59:4b:96:4e:df:28:7e:8c:de:69:79:32:a6:2a:cb:ff:c3:5a: d5:68:82:5b:7a:03:ff:83:f3:0d:e3:28:5e:e2:b3:68:f5:88: d2:79:2b:95:b6:1d:05:9b:77:f0:db:1c:2c:a8:2d:dd:b4:4f: 1c:b7:bf:65:26:2b:b6:bd:70:0a:c9:b9:d0:b3:78:f1:90:7f: 97:d6:cb:2b:cd:d3:c6:81:2d:19:84:09:02:91:53:af:84:80: 0e:35:36:0f:6a:94:f2:ac:22:82:fc:55:fb:a3:f3:a5:de:a9: a1:19:1c:00:5a:a0:ba:b9:35:81:3d:20:9d:7d:51:c9:a5:b1: 38:5e:1b:5e:35:f4:39:6b:8d:f6:47:58:c2:fc:37:25:ce:b7: 25:4b:ea:92:de:51:f5:56:c0:24:2a:f5:df:c1:75:cb:53:1a: ca:21:93:a2:27:26:5e:2e:52:af:42:0e:9e:48:3c:51:99:1d: a9:fa:2d:27:37:37:65:cf:a2:42:03:07:c5:48:d6:d2:cb:27: 2e:2c:da:7f:f0:22:11:7d:06:33:32:f9:5b:3e:af:26:b4:47: ae:ab:e5:79:0d:01:fa:02:73:22:11:2e:2b:17:0f:d8:ce:80: 1f:75:9d:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavupRXOtoMpeVTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ODk4ZmYzODEtNGI0YS00MjczLWE3YTgtOWE4YjYzNTc1ZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQIWRUfHrTmDd5Zz6lIBfzL7itzRmyT47QAR PALvQBd8ssabECLO/mWa/2wn7oGo+a3EbdPwbrbSMpjUIrOFABdsOolrqgMa0Czf xPyklqAxaeU9NN0pWw4MQipw9jYTX8bvjUJOrcOfb0rcbMbg9Y/+oGTqDQwt0ggL N0WRjBGp6zL/33whU6yyitAfVZrBmLjjvEf/fSKCSTj3tfs4KjCvf5WUNG40n6FX qNp8RVOFjaDVJwyBK11ZkLlSTO0Mn+yDUnpfJ3ceefdvkVBY4UlAEZPNojU2pPmk 2QTGtsy5trsQ+tz05m7DAMPs1dxipRc0NlO1fBRQtvQQC7jewQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoguEDz7xWJsEB5i/HfuKKTMSk0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGI2NjE0NzEtNTlkZC0z MGY2LWJkNGYtMjVjYzg0MjdlMmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFykUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdvxkICrFfxrDeO0hurRVEWRVlLlk7fKH6M3ml5MqYqy//DWtVoglt6 A/+D8w3jKF7is2j1iNJ5K5W2HQWbd/DbHCyoLd20Txy3v2UmK7a9cArJudCzePGQ f5fWyyvN08aBLRmECQKRU6+EgA41Ng9qlPKsIoL8Vfuj86XeqaEZHABaoLq5NYE9 IJ19UcmlsTheG1419DlrjfZHWML8NyXOtyVL6pLeUfVWwCQq9d/BdctTGsohk6In Jl4uUq9CDp5IPFGZHan6LSc3N2XPokIDB8VI1tLLJy4s2n/wIhF9BjMy+Vs+rya0 R66r5XkNAfoCcyIRLisXD9jOgB91naU= -----END CERTIFICATE-----Generated at Sun Apr 27 17:44:06 2025 by rpki-client