$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/abb243ee-ea22-3c57-9122-17d8552613eb.roa File: abb243ee-ea22-3c57-9122-17d8552613eb.roa (raw, json) Hash identifier: i4XJkoEuc2FzqwnbeQi2QxaM1aw5dDtaLxnw4Ocd6oo= Subject key identifier: F9:B8:48:F9:BC:C7:5A:DD:37:39:0A:88:AB:C5:66:E5:5D:D3:E1:C5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496CE467050086510E5F7057C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/abb243ee-ea22-3c57-9122-17d8552613eb.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 16625 IP address blocks: 23.58.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:67:05:00:86:51:0e:5f:70:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=0d590a7c-76f4-44a1-9c1d-15d5a0697640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:99:7a:2d:3c:88:6b:ae:ac:27:db:76:81:a4: 49:01:87:73:5d:57:e8:d2:53:59:f4:9e:89:82:66: f2:b3:a9:b5:1a:e6:cf:1d:b1:f7:da:83:bd:33:3e: 76:c3:3e:f3:5b:09:8e:38:23:8d:14:8f:6b:21:76: 0b:b7:bf:e3:6e:2f:63:48:18:53:f4:4b:17:ef:81: be:77:15:a0:d7:f1:0c:44:6f:ee:a2:af:d0:ff:8e: ce:61:9b:e4:33:02:08:67:fc:0d:26:ab:25:6f:81: 26:d9:cb:a0:1d:e5:54:ec:45:3f:74:42:6e:09:0b: dd:e1:5f:8e:08:f5:0c:bc:66:5b:db:0a:74:00:53: 91:ed:24:46:d0:94:2d:d1:11:73:6a:69:33:33:87: fe:ff:0b:7e:83:7d:8c:05:8b:70:ff:e9:78:78:1b: 29:08:68:16:40:74:c4:5a:b1:da:32:0f:31:f9:3c: 5c:76:df:6d:4c:93:7c:e8:c0:0a:68:28:58:dd:62: a6:4d:66:57:e2:31:57:7e:ff:4c:c0:f3:98:e0:9e: 98:7d:11:f2:37:30:ec:e4:99:0e:3b:be:5c:e9:4c: a3:a0:40:9f:b3:30:7d:33:77:e1:06:6f:43:a6:09: 5f:80:fe:67:dc:3b:48:23:49:a6:56:63:1f:9b:46: 70:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B8:48:F9:BC:C7:5A:DD:37:39:0A:88:AB:C5:66:E5:5D:D3:E1:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/abb243ee-ea22-3c57-9122-17d8552613eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:22:56:73:66:c8:e4:e9:ac:c3:f2:3e:3a:f9:94:c1:e5:87: 17:17:69:54:29:d7:88:a3:56:35:52:9d:7f:e0:39:cb:27:03: 04:77:a7:8b:43:1a:3c:8d:b0:6d:3f:7b:a8:53:9a:0c:f3:c2: 36:5d:d8:32:a6:a3:c0:58:6a:22:d7:29:d7:22:4a:4f:16:e7: 1d:ea:35:ef:7f:e5:ac:b4:2a:b4:ec:b5:52:a1:0e:e1:08:76: 85:86:3e:ae:ca:a2:c9:44:a0:17:43:0c:3b:8d:f0:26:ba:12: 8d:52:e4:a0:c4:06:68:da:36:b2:df:43:9b:b2:62:26:40:a8: e2:b1:a1:39:88:94:3f:e8:b1:1d:da:9b:7a:25:79:87:0d:00: c2:7d:68:ab:8a:0a:a0:e3:45:8e:6b:41:f7:46:a2:a8:a6:f2: 3b:02:0e:d2:38:a5:3b:3f:15:84:e7:14:3b:85:85:3b:7a:5e: 1c:a8:ca:2f:03:c3:74:4b:e4:ec:1a:bf:98:b0:5c:62:4a:35: aa:29:48:54:8a:fd:53:70:be:93:3a:de:ef:05:8b:77:9c:21: c7:e2:39:5a:e0:87:e5:10:e5:00:62:e3:13:08:cc:ff:d0:4b: f7:23:5f:b2:32:4b:cd:6e:e1:c2:b3:d8:26:df:a6:57:04:e0: fb:e3:90:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5GcFAIZRDl9wV8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk MGQ1OTBhN2MtNzZmNC00NGExLTljMWQtMTVkNWEwNjk3NjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypl6LTyIa66sJ9t2gaRJAYdzXVfo0lNZ9J6J gmbys6m1GubPHbH32oO9Mz52wz7zWwmOOCONFI9rIXYLt7/jbi9jSBhT9EsX74G+ dxWg1/EMRG/uoq/Q/47OYZvkMwIIZ/wNJqslb4Em2cugHeVU7EU/dEJuCQvd4V+O CPUMvGZb2wp0AFOR7SRG0JQt0RFzamkzM4f+/wt+g32MBYtw/+l4eBspCGgWQHTE WrHaMg8x+Txcdt9tTJN86MAKaChY3WKmTWZX4jFXfv9MwPOY4J6YfRHyNzDs5JkO O75c6UyjoECfszB9M3fhBm9DpglfgP5n3DtII0mmVmMfm0ZwCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPm4SPm8x1rdNzkKiKvFZuVd0+HFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWJiMjQzZWUtZWEyMi0z YzU3LTkxMjItMTdkODU1MjYxM2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQiVnNmyOTprMPyPjr5lMHlhxcXaVQp14ijVjVSnX/gOcsnAwR3p4tD GjyNsG0/e6hTmgzzwjZd2DKmo8BYaiLXKdciSk8W5x3qNe9/5ay0KrTstVKhDuEI doWGPq7KoslEoBdDDDuN8Ca6Eo1S5KDEBmjaNrLfQ5uyYiZAqOKxoTmIlD/osR3a m3oleYcNAMJ9aKuKCqDjRY5rQfdGoqim8jsCDtI4pTs/FYTnFDuFhTt6Xhyoyi8D w3RL5Owav5iwXGJKNaopSFSK/VNwvpM63u8Fi3ecIcfiOVrgh+UQ5QBi4xMIzP/Q S/cjX7IyS81u4cKz2CbfplcE4PvjkC0= -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:44 2025 by rpki-client