$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8103bb2-6fb1-347c-a4f2-baa8f9fb125f.roa File: f8103bb2-6fb1-347c-a4f2-baa8f9fb125f.roa (raw, json) Hash identifier: e4r5PQ6vbewksxekkWv3arrfReNNcXbyH+suVZnrSBY= Subject key identifier: 63:3A:81:D0:A8:0F:D4:C5:9F:5F:94:A9:D9:79:05:91:A7:66:68:41 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496CE46B2596DF57BA14DF8F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8103bb2-6fb1-347c-a4f2-baa8f9fb125f.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.60.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:6b:25:96:df:57:ba:14:df:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=4c0ee4a4-38c6-41d1-90d2-f11a9f2bd1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e0:fd:f0:20:22:b7:0f:d1:fb:5a:fd:19:02: 42:2e:64:78:f6:74:f8:d8:ba:02:a1:5e:91:81:00: 88:81:bc:bc:72:69:de:13:87:7f:09:2a:41:4f:3c: 0c:45:d3:f7:88:aa:8c:c8:ac:fc:78:9b:b3:40:57: 5c:f8:c6:8c:ee:37:a0:6a:35:8b:7b:ad:96:35:96: d6:d3:22:65:82:09:a9:f8:a1:5c:77:99:44:8f:c0: 17:ad:c7:98:eb:31:0b:00:83:84:ad:26:a6:e6:b9: db:ff:88:e1:d0:79:b2:b1:f2:3a:38:c5:b3:65:c2: 85:d6:fe:58:c5:c7:87:20:10:e2:c8:2c:57:76:f8: 4c:91:4a:c1:58:c7:54:f7:da:2d:58:77:7e:a1:3c: d5:46:7f:ad:72:96:f0:13:7f:ea:33:bf:aa:ca:53: d7:0b:d4:ac:fa:6b:23:b2:18:5e:dd:3a:15:d8:dd: 5c:14:88:1e:77:46:1a:1d:41:b3:6e:28:8c:48:96: d0:af:44:2a:2b:84:57:dd:81:20:ab:06:86:5c:6f: 91:b7:4a:61:68:02:ad:90:21:4c:25:90:f5:fa:b5: 48:b0:85:73:9d:9d:9a:7f:19:29:6e:31:8c:2a:ad: b4:2e:ec:f8:0e:94:e2:13:af:00:5d:02:b3:f3:a1: 17:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3A:81:D0:A8:0F:D4:C5:9F:5F:94:A9:D9:79:05:91:A7:66:68:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8103bb2-6fb1-347c-a4f2-baa8f9fb125f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.60.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:da:41:c8:b1:01:cc:fa:f8:15:37:5e:71:f2:3e:a8:9d:32: ab:ea:89:80:b8:4f:57:9b:50:24:a6:67:15:10:84:b8:ba:2c: ce:62:40:80:69:dd:cd:e3:a3:67:54:dc:dd:ed:0e:00:b6:df: 48:b3:0e:97:55:49:f7:a4:bb:f9:bf:78:c4:33:c6:4e:7d:4a: 39:a5:a1:ac:f6:69:2d:2e:17:02:d2:f3:22:db:f4:3a:78:21: 7a:c7:d5:2a:56:49:de:00:a7:f3:4b:41:f8:b1:65:fd:a8:eb: bf:8e:eb:e9:b3:c9:e0:30:71:da:c3:33:e8:31:11:62:11:05: b0:76:1e:f8:4d:ef:0e:ac:0b:5e:80:15:42:34:56:c3:8c:be: 55:9f:27:65:29:b3:f8:fd:46:43:ee:89:a6:b7:a3:0f:1e:9c: 55:05:22:e9:12:64:04:ed:5f:fc:e0:e3:ca:31:66:db:2f:b9: 50:ae:31:e6:01:80:1b:ea:22:33:4a:b2:0f:c0:10:7c:a2:90: f6:62:60:c2:01:15:6e:97:74:39:45:b5:4a:a1:ab:bf:ae:f5: 87:1f:13:69:5a:a4:6f:20:69:72:bd:0e:23:b6:6b:8d:1e:d1: 5b:32:89:ea:4e:da:be:10:b2:df:8d:3c:cf:99:19:2d:f9:d0: b4:32:58:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5Gsllt9XuhTfjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk NGMwZWU0YTQtMzhjNi00MWQxLTkwZDItZjExYTlmMmJkMWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuD98CAitw/R+1r9GQJCLmR49nT42LoCoV6R gQCIgby8cmneE4d/CSpBTzwMRdP3iKqMyKz8eJuzQFdc+MaM7jegajWLe62WNZbW 0yJlggmp+KFcd5lEj8AXrceY6zELAIOErSam5rnb/4jh0HmysfI6OMWzZcKF1v5Y xceHIBDiyCxXdvhMkUrBWMdU99otWHd+oTzVRn+tcpbwE3/qM7+qylPXC9Ss+msj shhe3ToV2N1cFIged0YaHUGzbiiMSJbQr0QqK4RX3YEgqwaGXG+Rt0phaAKtkCFM JZD1+rVIsIVznZ2afxkpbjGMKq20Luz4DpTiE68AXQKz86EX+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGM6gdCoD9TFn1+Uqdl5BZGnZmhBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjgxMDNiYjItNmZiMS0z NDdjLWE0ZjItYmFhOGY5ZmIxMjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzytMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3aQcixAcz6+BU3XnHyPqidMqvqiYC4T1ebUCSmZxUQhLi6LM5iQIBp 3c3jo2dU3N3tDgC230izDpdVSfeku/m/eMQzxk59Sjmloaz2aS0uFwLS8yLb9Dp4 IXrH1SpWSd4Ap/NLQfixZf2o67+O6+mzyeAwcdrDM+gxEWIRBbB2HvhN7w6sC16A FUI0VsOMvlWfJ2Ups/j9RkPuiaa3ow8enFUFIukSZATtX/zg48oxZtsvuVCuMeYB gBvqIjNKsg/AEHyikPZiYMIBFW6XdDlFtUqhq7+u9YcfE2lapG8gaXK9DiO2a40e 0VsyiepO2r4Qst+NPM+ZGS350LQyWNk= -----END CERTIFICATE-----Generated at Sat Apr 26 15:59:48 2025 by rpki-client