$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e74f50c6-59c9-3bc7-9e77-b6d9031a53d3.roa File: e74f50c6-59c9-3bc7-9e77-b6d9031a53d3.roa (raw, json) Hash identifier: UelT9UCMU86Y/yHo7kveksZx8ccYMIyTXVihPb/9NA0= Subject key identifier: D5:F8:42:AF:56:39:19:AE:51:C2:5E:F8:9E:84:09:D5:9C:44:65:95 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496E498F068734B48133828980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e74f50c6-59c9-3bc7-9e77-b6d9031a53d3.roa Signing time: Sun 06 Apr 2025 01:00:47 +0000 ROA not before: Sun 06 Apr 2025 01:00:47 +0000 ROA not after: Sat 05 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.62.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:49:8f:06:87:34:b4:81:33:82:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 6 01:00:47 2025 GMT Not After : Jul 5 01:00:47 2025 GMT Subject: CN=f804017f-ab3e-49bd-b98d-ebcb8cae91bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4d:87:b3:76:c1:c5:6d:5f:d0:12:4c:12:81: 93:02:1d:07:82:b9:4d:3f:03:5d:64:e6:4e:62:ad: d9:d9:bf:e7:01:47:b7:e5:1f:e6:ee:fe:9b:21:bc: 0f:46:bd:48:a4:e9:47:2c:0e:cb:f8:c6:cb:81:80: 23:26:35:7a:01:31:c2:ca:a4:aa:85:fe:cf:fe:0a: 60:59:e9:22:36:19:43:e7:46:4f:14:0b:2e:72:06: 31:b0:13:40:74:cb:ce:36:36:be:86:4d:5c:51:da: f3:ce:b0:35:9d:7a:ac:44:3f:a7:94:da:af:73:5d: c2:d3:6b:cb:b3:5d:54:c6:0a:ec:35:17:e0:a2:3a: e6:92:dc:8f:d4:3b:46:01:a8:39:80:5b:ee:66:56: 03:ba:a2:1e:15:ab:92:45:71:ce:1a:22:0e:64:e5: a9:1a:45:19:63:1b:91:fe:b5:a0:42:f4:7f:fe:f8: 28:c7:27:68:d0:eb:01:71:5a:01:99:ef:1b:fa:bb: a5:49:6f:b7:e1:89:ff:bc:c6:84:5f:95:25:82:71: 51:4b:de:a1:c0:f8:77:2f:e6:a3:63:69:fd:ba:d6: 9c:41:e7:4e:f2:d9:04:e5:c8:f4:51:f0:b5:03:9c: 4e:22:5c:8f:80:69:d5:9a:a3:23:89:21:25:80:d5: ca:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F8:42:AF:56:39:19:AE:51:C2:5E:F8:9E:84:09:D5:9C:44:65:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e74f50c6-59c9-3bc7-9e77-b6d9031a53d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.62.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:9d:05:c9:55:22:95:ec:8d:a4:69:9b:76:60:54:8f:9d:f7: 71:7b:d1:02:fa:27:68:07:67:ed:2a:bc:8e:6f:4e:f2:2e:8d: 6b:91:86:8b:fe:ac:0d:81:89:bf:fb:59:da:4d:a8:82:d5:92: 13:2b:40:05:29:30:a6:a0:d9:69:56:18:4d:1f:9d:28:57:e6: 79:70:c4:13:9f:af:02:f1:88:1a:5c:e0:c8:81:23:79:3c:ec: 0f:b9:b8:3b:05:e8:70:a7:b5:07:6d:df:e4:be:5a:5e:f1:60: 67:61:0b:2e:a2:74:83:9a:f0:8a:75:96:59:16:e0:bb:41:10: 44:c8:34:d1:ee:ae:6c:f6:a3:fe:db:54:f8:05:f6:d8:e6:7f: 32:ed:02:c2:31:82:1d:05:0f:50:cb:b8:d9:77:2b:1a:6a:46: e9:92:3b:6f:c1:4c:55:37:c8:96:c2:36:73:ca:59:3f:09:19: fa:35:4c:2f:2b:6d:ea:f1:e0:aa:b7:23:25:dc:78:70:35:99: 8a:30:e6:4e:e8:f4:cf:17:99:23:81:bb:c5:6f:53:22:fd:9e: f4:74:16:fd:7e:38:3a:33:e8:a3:ee:3e:bc:a8:bc:0d:34:52: 53:eb:a8:65:bb:bb:af:f9:e8:d2:54:b9:ca:f4:6e:5b:03:45: e5:4b:d6:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSY8GhzS0gTOCiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk ZjgwNDAxN2YtYWIzZS00OWJkLWI5OGQtZWJjYjhjYWU5MWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU2Hs3bBxW1f0BJMEoGTAh0HgrlNPwNdZOZO Yq3Z2b/nAUe35R/m7v6bIbwPRr1IpOlHLA7L+MbLgYAjJjV6ATHCyqSqhf7P/gpg WekiNhlD50ZPFAsucgYxsBNAdMvONja+hk1cUdrzzrA1nXqsRD+nlNqvc13C02vL s11UxgrsNRfgojrmktyP1DtGAag5gFvuZlYDuqIeFauSRXHOGiIOZOWpGkUZYxuR /rWgQvR//vgoxydo0OsBcVoBme8b+rulSW+34Yn/vMaEX5UlgnFRS96hwPh3L+aj Y2n9utacQedO8tkE5cj0UfC1A5xOIlyPgGnVmqMjiSElgNXKvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNX4Qq9WORmuUcJe+J6ECdWcRGWVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTc0ZjUwYzYtNTljOS0z YmM3LTllNzctYjZkOTAzMWE1M2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFz7IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSdBclVIpXsjaRpm3ZgVI+d93F70QL6J2gHZ+0qvI5vTvIujWuRhov+ rA2Bib/7WdpNqILVkhMrQAUpMKag2WlWGE0fnShX5nlwxBOfrwLxiBpc4MiBI3k8 7A+5uDsF6HCntQdt3+S+Wl7xYGdhCy6idIOa8Ip1llkW4LtBEETINNHurmz2o/7b VPgF9tjmfzLtAsIxgh0FD1DLuNl3KxpqRumSO2/BTFU3yJbCNnPKWT8JGfo1TC8r berx4Kq3IyXceHA1mYow5k7o9M8XmSOBu8VvUyL9nvR0Fv1+ODoz6KPuPryovA00 UlPrqGW7u6/56NJUucr0blsDReVL1v8= -----END CERTIFICATE-----Generated at Sun Apr 27 03:14:07 2025 by rpki-client