$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2f64399-183a-3ce1-8f6d-55aa64d82c6c.roa File: d2f64399-183a-3ce1-8f6d-55aa64d82c6c.roa (raw, json) Hash identifier: aHEaDiyOHKRgxYLwaAvyg7Gud+tB2NrMfYz/jnqNisc= Subject key identifier: 70:12:7E:5D:C5:A1:21:EF:9B:DD:99:7F:09:6C:DE:85:4E:3A:75:CA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494CC955FCF9A493105068F580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2f64399-183a-3ce1-8f6d-55aa64d82c6c.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 20940 IP address blocks: 23.32.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:55:fc:f9:a4:93:10:50:68:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=8612410c-98c8-4887-acb1-a47d67413cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:83:13:9e:19:21:94:b6:91:c0:29:7e:8e:a7: 97:77:ff:34:2f:45:70:16:7a:39:75:43:8a:cb:b5: 83:3e:91:e5:79:65:14:d0:fe:29:17:fe:52:2a:c1: 5c:fd:78:76:6c:94:a5:2b:56:2a:ee:89:d3:57:98: 51:ac:e6:5f:fb:be:50:48:b3:7c:bf:34:76:85:35: 9d:e7:f0:6a:9e:dd:3a:20:96:fc:ac:ed:bd:80:a5: 2e:af:8d:a6:25:f6:26:c0:68:b1:f9:4a:3b:44:d3: 4c:4e:84:f5:e2:bf:bd:c1:e1:38:70:af:f7:1b:63: 04:a6:77:ff:a3:94:a0:f6:21:9b:68:48:90:05:0d: 8a:f3:6e:00:f6:01:e6:c5:a0:a8:e7:db:b4:42:0b: f4:39:f1:f5:19:3e:f3:6c:7d:94:d8:70:1f:f9:9f: ef:af:4d:7e:c2:0c:8c:4e:81:dd:51:39:4e:7d:51: fa:9e:86:a3:cf:5e:6f:66:b2:b1:df:59:82:1c:dc: 46:85:49:a0:ba:76:8e:bd:63:1e:59:11:0a:28:b8: 85:b0:f4:85:58:42:3a:93:60:32:c0:12:62:6e:99: fc:f7:0f:54:8d:47:6d:bb:16:e7:e2:f5:c2:b9:9f: a8:f7:52:07:31:2b:e0:a9:4e:2f:56:41:17:58:05: 82:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:12:7E:5D:C5:A1:21:EF:9B:DD:99:7F:09:6C:DE:85:4E:3A:75:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2f64399-183a-3ce1-8f6d-55aa64d82c6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:9a:91:d5:55:ca:4e:5c:ae:ea:63:40:10:14:f6:1f:0d:e0: b1:36:a4:0b:ca:60:8c:69:5c:5e:87:5d:39:44:77:1b:b2:45: 2e:7f:a4:6f:32:74:4e:d0:ad:e7:ae:b3:eb:e9:0d:14:1d:92: 08:41:b0:3f:dd:72:75:cc:ea:e4:d1:67:f7:8d:46:a5:e3:83: 7e:1a:c9:48:40:f8:3b:26:81:69:8f:f2:cc:05:a2:e1:4f:51: 28:30:11:4c:b8:d8:ab:4e:44:28:67:0d:71:27:32:f2:c6:09: f8:79:ba:15:fd:4f:93:db:47:0d:75:3f:c3:2b:90:0a:b2:33: ae:ea:da:a3:49:54:65:75:21:71:71:0a:00:56:5a:98:1e:68: 5d:52:d0:63:7e:fc:c9:9d:70:1a:25:6c:66:3f:8f:29:76:d8: 35:c8:bd:c1:97:fa:0e:0e:52:b0:b9:6d:b1:7f:32:45:e2:09: e0:1d:6a:e6:eb:ae:fb:e1:eb:7c:cc:37:b9:8c:c3:f2:4f:7d: cc:b8:de:ec:93:6a:ca:f0:00:db:64:d9:b6:ee:22:4b:ff:6d: 55:2a:09:16:d4:50:16:e6:ab:84:5a:12:da:cc:d7:de:1d:7c: 8e:5e:e5:41:fc:17:60:6b:af:8c:45:cc:32:9d:35:b3:80:88: 6a:16:1b:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVX8+aSTEFBo9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ODYxMjQxMGMtOThjOC00ODg3LWFjYjEtYTQ3ZDY3NDEzY2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIMTnhkhlLaRwCl+jqeXd/80L0VwFno5dUOK y7WDPpHleWUU0P4pF/5SKsFc/Xh2bJSlK1Yq7onTV5hRrOZf+75QSLN8vzR2hTWd 5/Bqnt06IJb8rO29gKUur42mJfYmwGix+Uo7RNNMToT14r+9weE4cK/3G2MEpnf/ o5Sg9iGbaEiQBQ2K824A9gHmxaCo59u0Qgv0OfH1GT7zbH2U2HAf+Z/vr01+wgyM ToHdUTlOfVH6noajz15vZrKx31mCHNxGhUmgunaOvWMeWREKKLiFsPSFWEI6k2Ay wBJibpn89w9UjUdtuxbn4vXCuZ+o91IHMSvgqU4vVkEXWAWCnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHASfl3FoSHvm92Zfwls3oVOOnXKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDJmNjQzOTktMTgzYS0z Y2UxLThmNmQtNTVhYTY0ZDgyYzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyAeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmakdVVyk5crupjQBAU9h8N4LE2pAvKYIxpXF6HXTlEdxuyRS5/pG8y dE7Qreeus+vpDRQdkghBsD/dcnXM6uTRZ/eNRqXjg34ayUhA+DsmgWmP8swFouFP USgwEUy42KtORChnDXEnMvLGCfh5uhX9T5PbRw11P8MrkAqyM67q2qNJVGV1IXFx CgBWWpgeaF1S0GN+/MmdcBolbGY/jyl22DXIvcGX+g4OUrC5bbF/MkXiCeAdaubr rvvh63zMN7mMw/JPfcy43uyTasrwANtk2bbuIkv/bVUqCRbUUBbmq4RaEtrM194d fI5e5UH8F2Brr4xFzDKdNbOAiGoWG8U= -----END CERTIFICATE-----Generated at Sat Apr 26 18:38:57 2025 by rpki-client