$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8a4b66b-a071-328d-b971-9d35e22111a8.roa File: e8a4b66b-a071-328d-b971-9d35e22111a8.roa (raw, json) Hash identifier: sDAWRRfy08BUV8v4pyMdoXkBxHLYUpmatEWoi0/9ljQ= Subject key identifier: D7:56:D5:B3:8D:B3:88:9D:83:F0:B5:C9:54:DE:BF:18:20:03:C1:64 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496CE478AD93BDCF8B7F47C9E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8a4b66b-a071-328d-b971-9d35e22111a8.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.59.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:78:ad:93:bd:cf:8b:7f:47:c9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=758e7307-1951-47c7-8a9a-94766343fd25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e7:e9:47:9d:c9:ef:1d:a2:fe:6d:c7:14:6c: ef:47:57:72:ee:d1:29:fa:51:a9:30:ff:20:51:28: e9:29:b2:d0:84:50:a2:c3:7e:9c:40:47:12:ee:04: 5a:cc:e3:dd:19:1e:9c:95:db:08:66:20:1f:91:47: 74:a5:5c:fa:ac:24:83:84:f2:07:3d:0c:f3:30:82: 93:89:9e:f0:36:6c:4d:48:4d:f1:23:6c:78:cc:68: 55:0a:58:c3:3f:77:54:6e:cf:9b:88:03:75:1b:ca: ef:f0:53:eb:e4:a4:16:81:a0:3d:81:6a:e4:31:81: 31:ee:e9:ee:dc:a7:73:07:6b:4d:0c:0c:9f:af:8f: c3:99:94:6a:b4:7e:26:87:a9:30:12:02:25:76:17: cc:ce:45:80:4d:6b:29:4f:83:8e:50:67:ec:b7:cf: db:ce:d0:08:3d:8b:71:ec:78:2c:c7:45:5f:b1:5a: d8:ba:d9:09:92:be:2b:e1:73:45:94:87:24:78:5e: 8f:32:bd:06:7d:d6:6c:5b:cb:aa:79:21:a7:b5:26: c9:0c:51:c9:0e:d6:ab:2d:90:de:e5:08:1d:7c:c3: 7a:8b:1f:8c:32:35:15:5c:c0:6b:86:86:13:5a:0e: 96:5b:e9:e3:c8:33:1a:72:9d:5f:86:a7:ac:68:69: 33:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:56:D5:B3:8D:B3:88:9D:83:F0:B5:C9:54:DE:BF:18:20:03:C1:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8a4b66b-a071-328d-b971-9d35e22111a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:7f:a4:c0:4d:f3:e2:73:8b:5d:b3:29:83:d2:07:ae:7f:6f: 46:61:84:db:6a:19:7e:9b:f8:f7:9a:ef:14:b1:0a:38:15:4f: 9d:13:33:72:cd:0a:de:6c:35:9b:b8:b4:a7:81:a8:ef:7d:58: 98:9e:7b:78:2f:20:09:1d:d4:15:55:d6:27:ea:d3:26:79:ad: 58:81:58:73:b9:f0:7a:b7:bd:cf:1d:ed:4e:25:28:40:bf:10: f0:be:a9:4b:48:f0:43:00:bf:eb:f1:17:a4:4a:3e:d0:84:4a: 5f:d5:40:4a:d3:f9:fb:cd:5d:b4:fc:b8:cc:5f:01:85:c6:ba: b4:32:f7:44:68:e8:3a:80:13:2f:55:d3:b5:bb:f6:63:4b:fb: b4:8d:93:ae:dc:d1:72:9f:19:a7:05:e0:0f:b8:6e:71:10:66: 3b:31:d0:97:1a:05:54:bc:7d:d6:4b:c4:ec:f8:95:e4:24:2d: e2:7e:14:c3:c6:cb:c4:cb:45:e8:88:2b:73:20:d7:6c:5e:4e: 6c:d0:80:ce:f7:08:0c:96:21:68:cc:e2:96:cb:0f:28:63:d0: 33:8c:5c:1a:b8:45:62:5d:d2:db:61:76:a4:6e:be:16:c2:79: 9e:b0:28:7f:05:ae:59:7a:d0:b4:d7:8f:28:e4:f0:da:64:5e: 80:30:ef:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5Hitk73Pi39HyeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk NzU4ZTczMDctMTk1MS00N2M3LThhOWEtOTQ3NjYzNDNmZDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhefpR53J7x2i/m3HFGzvR1dy7tEp+lGpMP8g USjpKbLQhFCiw36cQEcS7gRazOPdGR6cldsIZiAfkUd0pVz6rCSDhPIHPQzzMIKT iZ7wNmxNSE3xI2x4zGhVCljDP3dUbs+biAN1G8rv8FPr5KQWgaA9gWrkMYEx7unu 3KdzB2tNDAyfr4/DmZRqtH4mh6kwEgIldhfMzkWATWspT4OOUGfst8/bztAIPYtx 7Hgsx0VfsVrYutkJkr4r4XNFlIckeF6PMr0GfdZsW8uqeSGntSbJDFHJDtarLZDe 5QgdfMN6ix+MMjUVXMBrhoYTWg6WW+njyDMacp1fhqesaGkzbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdW1bONs4idg/C1yVTevxggA8FkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZThhNGI2NmItYTA3MS0z MjhkLWI5NzEtOWQzNWUyMjExMWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzvrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9/pMBN8+Jzi12zKYPSB65/b0ZhhNtqGX6b+Pea7xSxCjgVT50TM3LN Ct5sNZu4tKeBqO99WJiee3gvIAkd1BVV1ifq0yZ5rViBWHO58Hq3vc8d7U4lKEC/ EPC+qUtI8EMAv+vxF6RKPtCESl/VQErT+fvNXbT8uMxfAYXGurQy90Ro6DqAEy9V 07W79mNL+7SNk67c0XKfGacF4A+4bnEQZjsx0JcaBVS8fdZLxOz4leQkLeJ+FMPG y8TLReiIK3Mg12xeTmzQgM73CAyWIWjM4pbLDyhj0DOMXBq4RWJd0tthdqRuvhbC eZ6wKH8Frll60LTXjyjk8NpkXoAw77M= -----END CERTIFICATE-----Generated at Sat Apr 26 15:56:41 2025 by rpki-client