$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c75aa0a-9d48-3b87-bf8c-d65b3151c388.roa File: 8c75aa0a-9d48-3b87-bf8c-d65b3151c388.roa (raw, json) Hash identifier: aPtfHzIiLw4gbl4wGc5OY905GSUHIS4llxuEqN4sC3U= Subject key identifier: 36:E3:4C:36:96:D4:95:8C:61:14:71:97:11:0E:BC:2D:D6:43:5B:2B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849244E9B7B904758DC7E93F1C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c75aa0a-9d48-3b87-bf8c-d65b3151c388.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 9498 IP address blocks: 23.3.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:9b:7b:90:47:58:dc:7e:93:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=b2907bd7-5c70-4681-b2b5-b2d5d524beff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2b:ef:d5:28:ff:dd:35:5a:6e:f8:2d:a6:17: f2:e1:f4:dc:d9:a5:5c:be:0f:9c:58:8c:8f:c7:6c: 11:1b:33:c8:a8:73:4d:77:24:e2:ff:b2:9f:19:66: c2:11:f1:36:07:75:56:e5:0a:95:b3:ec:79:54:34: 98:7a:7d:0f:fe:a3:43:70:03:a8:eb:ad:70:d4:71: 64:fd:dd:48:91:69:3c:70:c5:71:0b:f0:0f:04:88: 83:74:7d:c0:1b:c8:b5:9b:29:87:51:d3:e2:44:ee: 57:d2:3a:e9:71:b1:76:44:81:16:39:10:73:05:6d: f8:38:2f:b2:e7:cb:91:48:73:dc:64:f0:92:21:21: 91:66:04:7c:a0:73:bf:5c:26:4e:9e:c6:a9:84:46: d9:22:76:81:f4:f6:c9:ff:c4:7b:91:e4:4f:1e:85: 15:b2:bc:95:ef:c0:b5:47:27:a1:e5:7f:f5:a9:72: 3d:7d:83:84:05:98:8f:53:66:4d:33:71:2e:b6:da: 92:c1:0e:19:3a:40:07:ac:44:73:3a:20:0c:31:29: 85:2d:9d:dd:23:c4:83:63:a7:75:b8:1f:fd:d7:3c: 55:14:89:aa:cf:d3:65:b1:d9:e7:5a:4c:f8:09:5a: d3:48:c9:6b:51:3c:b6:45:19:f3:2c:7f:a2:68:6a: 03:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E3:4C:36:96:D4:95:8C:61:14:71:97:11:0E:BC:2D:D6:43:5B:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c75aa0a-9d48-3b87-bf8c-d65b3151c388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:5c:57:bb:4c:93:0d:02:b8:45:a2:ea:25:c9:02:42:6d:c3: c9:b2:3c:c4:ac:7e:9d:d0:67:79:89:1e:d0:cb:ac:bd:cd:87: 47:57:8d:57:45:a0:04:f0:29:63:2d:e6:48:a3:cb:74:83:93: 0e:24:04:69:af:a3:22:4f:af:e3:a2:bd:0f:7e:34:51:0e:e0: bf:e5:22:ea:a1:7c:d0:a0:85:59:ea:eb:1c:c5:21:c6:d6:cd: fc:e2:3c:a1:a2:20:f7:d7:2c:7c:23:0a:85:b0:50:09:19:ce: 38:6c:19:73:9e:f5:62:9b:d1:f0:99:5d:11:d0:bd:af:29:0b: d9:89:54:d4:98:5f:4a:63:88:11:c1:ee:51:07:2e:e7:f7:ec: 3a:95:81:6d:36:93:39:be:b0:78:31:6a:92:17:11:5f:fb:e4: 28:86:2e:92:4d:f3:e4:63:65:cc:16:2a:d4:65:57:f1:a9:d1: 6f:59:7e:2d:2c:5c:6a:46:c6:58:1e:0a:c6:c5:45:b2:7e:f5: 33:65:9d:bd:45:fd:d3:54:1f:80:d4:fc:4b:d9:5a:45:3d:7c: 31:7a:b4:f5:86:6a:2e:5f:3b:ed:7d:b1:46:ef:4d:fa:36:0e: 42:23:95:69:15:4c:23:cc:3f:14:57:48:db:61:e9:cb:56:91: 91:30:f4:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTpt7kEdY3H6T8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk YjI5MDdiZDctNWM3MC00NjgxLWIyYjUtYjJkNWQ1MjRiZWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSvv1Sj/3TVabvgtphfy4fTc2aVcvg+cWIyP x2wRGzPIqHNNdyTi/7KfGWbCEfE2B3VW5QqVs+x5VDSYen0P/qNDcAOo661w1HFk /d1IkWk8cMVxC/APBIiDdH3AG8i1mymHUdPiRO5X0jrpcbF2RIEWORBzBW34OC+y 58uRSHPcZPCSISGRZgR8oHO/XCZOnsaphEbZInaB9PbJ/8R7keRPHoUVsryV78C1 Ryeh5X/1qXI9fYOEBZiPU2ZNM3EuttqSwQ4ZOkAHrERzOiAMMSmFLZ3dI8SDY6d1 uB/91zxVFImqz9NlsdnnWkz4CVrTSMlrUTy2RRnzLH+iaGoDLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbjTDaW1JWMYRRxlxEOvC3WQ1srMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGM3NWFhMGEtOWQ0OC0z Yjg3LWJmOGMtZDY1YjMxNTFjMzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwNGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhcV7tMkw0CuEWi6iXJAkJtw8myPMSsfp3QZ3mJHtDLrL3Nh0dXjVdF oATwKWMt5kijy3SDkw4kBGmvoyJPr+OivQ9+NFEO4L/lIuqhfNCghVnq6xzFIcbW zfziPKGiIPfXLHwjCoWwUAkZzjhsGXOe9WKb0fCZXRHQva8pC9mJVNSYX0pjiBHB 7lEHLuf37DqVgW02kzm+sHgxapIXEV/75CiGLpJN8+RjZcwWKtRlV/Gp0W9Zfi0s XGpGxlgeCsbFRbJ+9TNlnb1F/dNUH4DU/EvZWkU9fDF6tPWGai5fO+19sUbvTfo2 DkIjlWkVTCPMPxRXSNth6ctWkZEw9Co= -----END CERTIFICATE-----Generated at Sat Apr 5 06:28:47 2025 by rpki-client