$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5026e6a-bc8d-335b-9c5a-08a8c407b059.roa File: e5026e6a-bc8d-335b-9c5a-08a8c407b059.roa (raw, json) Hash identifier: oNAIz2CIl9DeqwL6vKr0t1VPOIUNroylpfw0Uj4hcBI= Subject key identifier: 22:90:57:FB:92:20:3F:89:C7:DA:FC:37:40:25:23:2B:2B:38:B5:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858488DAB5F59A54B1CFBF76F9800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5026e6a-bc8d-335b-9c5a-08a8c407b059.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 9498 IP address blocks: 23.59.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:5f:59:a5:4b:1c:fb:f7:6f:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=b0319d34-aa78-44e2-a5db-0129558eedfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:be:79:d9:50:70:82:21:9e:91:63:9f:0f:1f: 8d:dd:ec:35:49:1e:91:c2:55:71:13:8e:16:23:34: ed:e9:b1:a1:55:0b:c6:43:a5:05:20:ec:bc:8d:09: 75:02:61:5e:90:05:54:be:eb:50:da:43:23:72:b5: 36:2e:a5:39:3b:82:ba:a3:1d:8a:18:56:5a:6f:47: 40:ec:30:7d:ab:d4:36:f3:50:ae:20:47:16:f5:c9: fb:a8:16:f9:5c:c2:31:76:9f:48:3d:11:aa:07:3b: e2:ac:3e:b4:b6:f8:5d:77:54:b7:31:85:cc:41:e5: 0a:fb:3d:2b:6d:ed:7c:07:9d:9f:49:99:de:84:20: 5b:ec:35:f7:a2:3a:7c:27:85:33:82:51:21:92:8f: 5e:ab:18:4a:18:38:b2:66:df:4b:71:d1:2d:61:a6: 93:04:fe:7e:82:5c:4b:22:de:34:f6:4a:c9:fe:73: 6c:3d:6a:5c:11:1f:75:11:69:d6:d2:f7:1d:8a:54: de:aa:bf:f1:99:17:b9:3a:ff:cd:75:d5:f6:ee:02: 61:b2:10:88:ab:fc:db:49:3f:b2:86:0b:ab:86:d6: d9:1c:5f:51:61:54:44:40:f5:8f:bf:a3:43:f6:43: 66:69:7d:2e:44:d8:09:d9:ab:72:e0:ab:10:71:c1: 6f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:90:57:FB:92:20:3F:89:C7:DA:FC:37:40:25:23:2B:2B:38:B5:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5026e6a-bc8d-335b-9c5a-08a8c407b059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f6:12:2e:d7:84:9e:9e:01:d9:42:a4:39:1e:66:d6:40:84: 2c:c2:e8:d4:25:6f:f3:92:01:0e:b0:03:27:10:4a:2a:16:70: a9:77:a7:31:01:97:a2:27:03:18:cf:ae:bb:c5:6c:4e:87:4a: da:0b:50:16:00:a6:38:1b:c3:7c:95:95:bd:4f:49:3f:6d:ae: 07:bd:b9:9e:f2:cd:5e:9d:8d:9c:22:c4:9d:a9:b7:bc:1b:b8: 4b:ae:0e:e7:ab:82:7c:23:5c:cb:15:a2:1f:54:d3:02:5a:6c: 93:69:66:6e:9b:02:23:d4:08:ad:23:58:ee:10:9b:a1:8d:d8: a1:60:05:aa:56:90:a9:65:d3:cf:93:c2:91:89:ab:63:d1:fb: 34:56:48:3c:7e:2a:78:09:50:b0:9e:f6:7b:58:4c:ed:5e:9a: 09:cf:0f:66:a4:57:22:27:43:4f:77:eb:51:dd:34:05:d8:c4: 37:77:d4:1b:a1:61:69:cf:ef:ee:b2:2c:aa:59:8d:be:40:97: 67:ca:d2:bc:9d:7d:4e:49:af:31:8d:82:70:26:1a:15:e8:3f: 17:d8:84:c1:80:6a:a0:8c:d7:80:f9:50:07:62:1a:c1:78:37: 01:69:e1:86:af:61:60:dc:e6:e6:51:c0:74:8f:e0:be:73:bc: 3d:06:93:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq19ZpUsc+/dvmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk YjAzMTlkMzQtYWE3OC00NGUyLWE1ZGItMDEyOTU1OGVlZGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr552VBwgiGekWOfDx+N3ew1SR6RwlVxE44W IzTt6bGhVQvGQ6UFIOy8jQl1AmFekAVUvutQ2kMjcrU2LqU5O4K6ox2KGFZab0dA 7DB9q9Q281CuIEcW9cn7qBb5XMIxdp9IPRGqBzvirD60tvhdd1S3MYXMQeUK+z0r be18B52fSZnehCBb7DX3ojp8J4UzglEhko9eqxhKGDiyZt9LcdEtYaaTBP5+glxL It409krJ/nNsPWpcER91EWnW0vcdilTeqr/xmRe5Ov/NddX27gJhshCIq/zbST+y hgurhtbZHF9RYVREQPWPv6ND9kNmaX0uRNgJ2aty4KsQccFv4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKQV/uSID+Jx9r8N0AlIysrOLX7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTUwMjZlNmEtYmM4ZC0z MzViLTljNWEtMDhhOGM0MDdiMDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzscMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAD2Ei7XhJ6eAdlCpDkeZtZAhCzC6NQlb/OSAQ6wAycQSioWcKl3pzEB l6InAxjPrrvFbE6HStoLUBYApjgbw3yVlb1PST9trge9uZ7yzV6djZwixJ2pt7wb uEuuDuergnwjXMsVoh9U0wJabJNpZm6bAiPUCK0jWO4Qm6GN2KFgBapWkKll08+T wpGJq2PR+zRWSDx+KngJULCe9ntYTO1emgnPD2akVyInQ09361HdNAXYxDd31Buh YWnP7+6yLKpZjb5Al2fK0rydfU5JrzGNgnAmGhXoPxfYhMGAaqCM14D5UAdiGsF4 NwFp4YavYWDc5uZRwHSP4L5zvD0Gk48= -----END CERTIFICATE-----Generated at Sat Apr 5 06:28:46 2025 by rpki-client