$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0714ff5-43a8-3d15-802e-f74fa4d39d00.roa File: e0714ff5-43a8-3d15-802e-f74fa4d39d00.roa (raw, json) Hash identifier: ncqLZhQWVbW+JtwUsjZqwxlG7H3kSKjC3lASwuIkAEY= Subject key identifier: 20:59:9A:25:01:9D:65:DF:90:CA:F0:6C:D6:6E:52:83:E9:12:EB:C9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495EEEF885D958A680B10C3400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0714ff5-43a8-3d15-802e-f74fa4d39d00.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 35994 IP address blocks: 23.48.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:f8:85:d9:58:a6:80:b1:0c:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=2efed931-7f43-4e37-89e7-31352484744b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1d:f3:5d:a9:0c:84:9b:51:34:31:51:50:0f: d0:9a:f3:7b:12:06:34:85:25:ad:c6:1e:af:70:2a: fe:83:19:49:c1:20:04:4a:a9:62:ee:74:b4:0b:ec: a8:2d:34:a0:5c:a8:c1:e2:c7:a3:ff:37:42:82:2d: 02:90:46:a3:e4:4a:38:a9:1f:81:62:26:b6:16:80: 87:37:24:07:4c:57:e9:64:7b:59:4e:5e:c1:98:99: 2c:2d:0e:67:23:5b:87:37:87:91:1d:14:9a:72:8f: 21:86:cf:70:42:96:b2:af:89:b2:ed:09:17:86:3b: 97:ad:50:a2:78:28:76:5f:1d:3e:4e:f1:d3:4a:01: 11:9a:32:f7:bd:1d:4e:90:d2:0e:bb:60:05:1d:cc: e3:32:06:7e:30:9d:d2:dd:55:08:fd:fe:44:fc:25: 39:b0:a5:38:21:ed:fb:20:73:1d:72:17:f6:cb:86: 95:a3:b0:8a:fa:06:9b:37:9b:5a:fc:e5:2e:bd:ae: 7a:48:df:57:c6:d5:cc:b4:4f:85:50:63:aa:42:ea: c2:eb:76:11:d1:2b:76:d6:1e:a6:de:ad:9b:c7:37: 04:47:79:72:4b:ce:8b:d5:79:c6:41:3f:3f:a6:48: c1:87:f3:80:ee:89:1d:5a:91:95:6d:21:30:b7:74: 86:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:59:9A:25:01:9D:65:DF:90:CA:F0:6C:D6:6E:52:83:E9:12:EB:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0714ff5-43a8-3d15-802e-f74fa4d39d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:5b:3d:0b:1c:94:33:f7:c0:85:62:06:02:f4:05:11:23:6f: e7:e7:95:6f:21:7d:77:61:33:b5:98:83:46:36:d0:eb:65:a4: fe:a3:df:4f:fd:ef:c4:cc:c2:02:05:9b:c5:46:05:54:53:8d: d7:ca:1a:e0:79:22:f1:ef:5a:57:66:2a:c6:15:b1:bb:63:60: be:e1:28:5b:24:96:fa:1b:46:38:2c:98:d0:fa:75:f3:2f:41: e3:44:16:d0:e9:14:47:a4:7f:ca:a4:6b:8c:ff:1f:70:75:d1: 76:5b:46:05:2b:4b:aa:8e:ea:6f:d6:ec:e1:1f:bb:ab:ba:82: ad:a4:2d:99:0f:45:d8:90:24:e6:96:19:32:de:da:72:0b:bb: 6b:a1:a9:a2:7c:27:a3:0f:6c:bb:b7:46:f6:56:19:2b:9a:55: c5:c4:69:4d:5d:ab:73:40:cc:f5:e1:e5:67:f4:5b:04:a4:bd: 42:d1:0b:e1:30:0d:f1:3b:60:d7:0c:36:fe:02:a9:d4:e8:ec: 4c:52:1c:a2:5a:9d:ed:4c:bd:a4:bc:e8:9d:bd:fe:a5:7a:cb: fe:49:cc:55:ec:b5:08:11:73:a0:44:b4:77:0c:d9:a2:bf:e6: 24:f4:11:a3:53:f2:9f:34:0d:8a:35:25:e2:c4:f2:ed:4d:58: 44:82:ae:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7viF2VimgLEMNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk MmVmZWQ5MzEtN2Y0My00ZTM3LTg5ZTctMzEzNTI0ODQ3NDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix3zXakMhJtRNDFRUA/QmvN7EgY0hSWtxh6v cCr+gxlJwSAESqli7nS0C+yoLTSgXKjB4sej/zdCgi0CkEaj5Eo4qR+BYia2FoCH NyQHTFfpZHtZTl7BmJksLQ5nI1uHN4eRHRSaco8hhs9wQpayr4my7QkXhjuXrVCi eCh2Xx0+TvHTSgERmjL3vR1OkNIOu2AFHczjMgZ+MJ3S3VUI/f5E/CU5sKU4Ie37 IHMdchf2y4aVo7CK+gabN5ta/OUuva56SN9XxtXMtE+FUGOqQurC63YR0St21h6m 3q2bxzcER3lyS86L1XnGQT8/pkjBh/OA7okdWpGVbSEwt3SG9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBZmiUBnWXfkMrwbNZuUoPpEuvJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTA3MTRmZjUtNDNhOC0z ZDE1LTgwMmUtZjc0ZmE0ZDM5ZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzDyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlbPQsclDP3wIViBgL0BREjb+fnlW8hfXdhM7WYg0Y20OtlpP6j30/9 78TMwgIFm8VGBVRTjdfKGuB5IvHvWldmKsYVsbtjYL7hKFsklvobRjgsmND6dfMv QeNEFtDpFEekf8qka4z/H3B10XZbRgUrS6qO6m/W7OEfu6u6gq2kLZkPRdiQJOaW GTLe2nILu2uhqaJ8J6MPbLu3RvZWGSuaVcXEaU1dq3NAzPXh5Wf0WwSkvULRC+Ew DfE7YNcMNv4CqdTo7ExSHKJane1MvaS86J29/qV6y/5JzFXstQgRc6BEtHcM2aK/ 5iT0EaNT8p80DYo1JeLE8u1NWESCrp4= -----END CERTIFICATE-----Generated at Tue Apr 29 06:29:24 2025 by rpki-client