$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1ae068c-b2bb-3e50-9a66-b03a81564113.roa File: d1ae068c-b2bb-3e50-9a66-b03a81564113.roa (raw, json) Hash identifier: bH2Ah85CVvEfXjczm4gYX8LcHRfcZlvSns4lUam+7VQ= Subject key identifier: D4:CE:93:5B:AC:B7:33:E0:48:A2:F4:56:31:28:B6:25:F7:6F:0D:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495EEEF8CB3AC60AB8A2E77C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1ae068c-b2bb-3e50-9a66-b03a81564113.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.48.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:f8:cb:3a:c6:0a:b8:a2:e7:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=f68ce17e-292b-4f61-8c49-0a9d01d92742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fd:80:a7:ab:fb:38:82:93:c5:69:58:fe:db: 7d:46:1e:c0:d3:25:88:10:e4:d5:2a:f8:08:02:83: 52:af:dc:d3:90:5e:73:01:ee:1b:f3:a2:94:b3:79: c0:cd:5e:33:06:2d:7c:66:11:b0:eb:62:c7:ae:e5: 5c:d6:92:c0:61:87:8f:27:88:d8:08:01:c4:84:24: 7c:0f:3b:6d:5d:54:65:ff:77:f6:8a:7c:f8:68:7f: a4:1c:00:ea:d0:05:f2:63:53:39:70:4b:56:a0:8c: d4:28:3a:7b:82:65:7d:fd:5e:73:d7:a0:33:df:8e: 12:8b:69:ad:ab:41:85:fa:9a:c4:8f:70:55:6d:55: d5:66:11:59:b3:1a:67:c4:23:45:0b:f7:1e:82:3d: 0b:1a:6a:c7:88:45:aa:58:22:a0:64:36:2d:43:93: bf:41:0e:99:44:2d:cb:8b:ca:38:1f:5b:9e:27:2f: 20:af:d8:68:32:2f:be:25:15:c9:df:32:12:77:c9: 1e:da:c7:96:df:29:d4:fb:43:c1:2b:b9:65:c1:a1: 9d:90:c3:f0:e0:2f:52:d6:e7:49:9a:ef:6e:93:e7: a0:47:fa:ee:8f:37:6e:ba:f2:a3:ec:a6:c9:2c:e3: d4:ac:ce:0e:61:e2:4a:02:b0:9c:e2:5a:8a:e6:03: da:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CE:93:5B:AC:B7:33:E0:48:A2:F4:56:31:28:B6:25:F7:6F:0D:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1ae068c-b2bb-3e50-9a66-b03a81564113.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:0b:86:67:4c:ba:1b:0a:19:e2:cc:a5:84:21:9c:98:8d:68: 58:74:9e:d3:78:f5:82:5f:88:02:e9:41:54:b3:d6:f6:7d:b2: 29:63:1b:2b:49:ae:18:8d:75:1d:bc:d7:46:56:f5:5e:1c:ca: 7e:75:c6:0f:94:5f:d4:9d:2d:71:38:37:3b:42:e8:0a:9c:b1: 7e:75:ad:9a:51:1d:b0:79:ae:39:d1:ce:fe:2b:21:1e:17:3b: b5:8e:f4:a5:7c:ee:4a:66:5b:f2:3a:1f:fb:e1:9f:f4:b4:e2: a0:6f:66:da:ae:a4:e3:63:e7:47:58:61:19:1c:49:50:a5:b9: 24:42:d7:02:fc:fe:44:3c:c2:ea:48:9c:f1:39:e1:ca:e9:af: 05:7c:9b:29:f4:f9:d1:10:17:da:80:73:c9:f2:a5:ec:e2:43: d5:c4:15:dc:9f:ea:c2:c4:12:19:4d:e8:0f:75:13:6c:be:58: 09:f9:c1:65:f0:c7:7a:1d:38:41:33:48:06:92:2c:b7:87:b2: 3c:29:5b:96:9d:79:55:1e:44:38:68:dd:50:b2:73:84:b2:06: c0:03:e7:a1:88:51:0f:95:d2:82:1f:55:76:cc:55:af:d0:dd: 44:3a:e6:25:bd:e4:39:c2:9f:20:84:fc:7c:e3:fc:16:5a:1a: 74:cb:c9:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7vjLOsYKuKLnfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk ZjY4Y2UxN2UtMjkyYi00ZjYxLThjNDktMGE5ZDAxZDkyNzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv2Ap6v7OIKTxWlY/tt9Rh7A0yWIEOTVKvgI AoNSr9zTkF5zAe4b86KUs3nAzV4zBi18ZhGw62LHruVc1pLAYYePJ4jYCAHEhCR8 DzttXVRl/3f2inz4aH+kHADq0AXyY1M5cEtWoIzUKDp7gmV9/V5z16Az344Si2mt q0GF+prEj3BVbVXVZhFZsxpnxCNFC/cegj0LGmrHiEWqWCKgZDYtQ5O/QQ6ZRC3L i8o4H1ueJy8gr9hoMi++JRXJ3zISd8ke2seW3ynU+0PBK7llwaGdkMPw4C9S1udJ mu9uk+egR/rujzduuvKj7KbJLOPUrM4OYeJKArCc4lqK5gPajQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTOk1ustzPgSKL0VjEotiX3bw37MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDFhZTA2OGMtYjJiYi0z ZTUwLTlhNjYtYjAzYTgxNTY0MTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzD6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIULhmdMuhsKGeLMpYQhnJiNaFh0ntN49YJfiALpQVSz1vZ9siljGytJ rhiNdR2810ZW9V4cyn51xg+UX9SdLXE4NztC6AqcsX51rZpRHbB5rjnRzv4rIR4X O7WO9KV87kpmW/I6H/vhn/S04qBvZtqupONj50dYYRkcSVCluSRC1wL8/kQ8wupI nPE54crprwV8myn0+dEQF9qAc8nypeziQ9XEFdyf6sLEEhlN6A91E2y+WAn5wWXw x3odOEEzSAaSLLeHsjwpW5adeVUeRDho3VCyc4SyBsAD56GIUQ+V0oIfVXbMVa/Q 3UQ65iW95DnCnyCE/Hzj/BZaGnTLybE= -----END CERTIFICATE-----Generated at Sat Apr 26 18:40:36 2025 by rpki-client