$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/009b8d5e-939c-3ff2-8b6e-26ba6b357234.roa File: 009b8d5e-939c-3ff2-8b6e-26ba6b357234.roa (raw, json) Hash identifier: eBYDrNKGhHnR7aRGPYxxdaKtVZuOpoGmcSzr06I9fuY= Subject key identifier: 6B:E5:A5:F6:6B:8B:E8:D3:8A:18:DF:23:B8:68:24:2B:8B:B1:B6:C5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABEDCB1FA5A708719C69E90 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/009b8d5e-939c-3ff2-8b6e-26ba6b357234.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.40.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:dc:b1:fa:5a:70:87:19:c6:9e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=72fbe30d-d498-4307-8ab1-d4173d2c2719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:37:b2:d1:80:fe:3d:41:2e:80:5f:b5:45:e9: 41:8b:8c:75:48:33:dd:e5:c2:1d:96:42:2e:95:6b: 0a:4e:25:5d:65:4d:e8:91:00:8e:34:a0:de:43:4c: 28:66:97:54:95:a1:bb:72:c5:74:18:fe:f8:3c:1a: d7:bf:57:54:b5:91:69:38:cf:8f:eb:55:b4:95:1c: 19:52:18:4c:c1:8c:18:70:ce:de:cc:83:4e:37:9d: ab:75:d1:07:38:a4:dc:49:b6:b0:8a:82:58:94:ed: 85:9b:ed:85:9a:7c:8e:02:a9:62:6f:bf:68:0f:67: 37:a6:3f:6b:d0:33:d6:90:89:7d:b5:dd:2c:fb:6f: ee:d6:d1:96:cf:a1:3f:90:6a:b0:3b:0c:55:7d:3a: 39:18:b1:b4:8f:c2:32:c9:62:60:d4:7e:45:31:50: f4:08:b6:09:3a:80:0d:0c:e1:02:cb:a9:aa:37:7b: 93:3c:b0:30:ca:07:fd:ea:c2:10:a4:f9:6b:9e:d1: ba:56:8b:77:c8:2a:e1:76:48:74:4e:b9:5e:de:49: 8a:4c:29:f3:c5:49:12:3f:4b:d2:33:23:24:18:7c: c9:01:e0:90:be:98:dd:42:28:31:6c:db:48:ec:c3: b9:8b:a6:94:e5:94:a6:ce:eb:d4:42:b8:08:c6:cd: 27:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E5:A5:F6:6B:8B:E8:D3:8A:18:DF:23:B8:68:24:2B:8B:B1:B6:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/009b8d5e-939c-3ff2-8b6e-26ba6b357234.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:de:99:1f:ca:61:6e:dd:06:2b:92:74:c3:17:dd:55:34:84: c7:f0:6f:d8:c7:b1:d3:e8:c9:00:a7:79:7a:b8:8e:84:1d:fa: 8e:4e:ac:1f:0f:59:73:37:2f:3d:72:bd:e2:69:cc:bc:26:a2: 41:9e:76:ce:f4:4c:03:1a:02:64:26:04:e2:1b:7f:36:75:fa: 37:3e:2f:3b:76:86:e2:34:da:d7:83:ef:b8:04:78:63:7b:63: f8:4a:17:53:c6:f9:66:b6:e7:82:da:f8:c0:94:c4:00:f1:f3: 90:7e:eb:0e:34:e9:64:4f:ca:4b:4e:5c:73:35:04:df:1d:46: 4b:f9:6a:53:1b:f7:98:7a:d2:49:6f:0e:d3:d1:54:1e:a9:7f: fb:41:41:2a:a0:54:fb:c3:fe:87:76:03:b5:06:53:c1:c3:a7: 9f:0f:98:a0:01:ac:2a:52:d8:45:41:96:b0:5b:12:f8:2d:51: 60:82:2a:b4:4b:ed:64:99:38:95:a5:6f:1a:35:d5:e5:48:be: 01:36:23:29:19:43:5d:9d:b5:9b:37:96:5b:ee:ce:99:00:f4: 6c:45:fd:88:df:71:5c:6c:93:4b:f8:54:9a:ff:b8:75:44:de: 58:56:3a:1f:b6:64:1f:18:15:8d:a5:fd:3d:d4:b3:8d:e7:89: e6:1f:5c:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavtyx+lpwhxnGnpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NzJmYmUzMGQtZDQ5OC00MzA3LThhYjEtZDQxNzNkMmMyNzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Dey0YD+PUEugF+1RelBi4x1SDPd5cIdlkIu lWsKTiVdZU3okQCONKDeQ0woZpdUlaG7csV0GP74PBrXv1dUtZFpOM+P61W0lRwZ UhhMwYwYcM7ezINON52rddEHOKTcSbawioJYlO2Fm+2FmnyOAqlib79oD2c3pj9r 0DPWkIl9td0s+2/u1tGWz6E/kGqwOwxVfTo5GLG0j8IyyWJg1H5FMVD0CLYJOoAN DOECy6mqN3uTPLAwygf96sIQpPlrntG6Vot3yCrhdkh0Trle3kmKTCnzxUkSP0vS MyMkGHzJAeCQvpjdQigxbNtI7MO5i6aU5ZSmzuvUQrgIxs0nxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvlpfZri+jTihjfI7hoJCuLsbbFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDA5YjhkNWUtOTM5Yy0z ZmYyLThiNmUtMjZiYTZiMzU3MjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyi+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/emR/KYW7dBiuSdMMX3VU0hMfwb9jHsdPoyQCneXq4joQd+o5OrB8P WXM3Lz1yveJpzLwmokGeds70TAMaAmQmBOIbfzZ1+jc+Lzt2huI02teD77gEeGN7 Y/hKF1PG+Wa254La+MCUxADx85B+6w406WRPyktOXHM1BN8dRkv5alMb95h60klv DtPRVB6pf/tBQSqgVPvD/od2A7UGU8HDp58PmKABrCpS2EVBlrBbEvgtUWCCKrRL 7WSZOJWlbxo11eVIvgE2IykZQ12dtZs3llvuzpkA9GxF/YjfcVxsk0v4VJr/uHVE 3lhWOh+2ZB8YFY2l/T3Us43nieYfXJc= -----END CERTIFICATE-----Generated at Sat Apr 5 10:56:13 2025 by rpki-client