$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01d475ab-a03a-375c-8d98-1d9c959d74da.roa File: 01d475ab-a03a-375c-8d98-1d9c959d74da.roa (raw, json) Hash identifier: r7Ak4XqtwvcUuhBwaFBBkGQwfQ3f7KI3VFLrAVhIqV8= Subject key identifier: 9F:67:5F:31:CD:7D:F2:8B:29:D5:17:39:76:F2:7A:AC:4F:E1:52:C4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848E006771313506DF242F25300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01d475ab-a03a-375c-8d98-1d9c959d74da.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.9.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:77:13:13:50:6d:f2:42:f2:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=d4f0640c-fc30-4e5d-80bd-7747af7eb914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fd:01:f7:cb:d6:5c:fd:05:48:cc:25:01:4b: 7a:31:45:e9:2d:11:81:a4:d0:68:d4:60:b9:3c:df: e2:b3:8c:9a:22:dd:97:d7:d3:dd:2d:b2:20:b3:19: 48:f7:12:ba:1b:7c:60:93:96:10:10:bc:7b:5f:56: 95:f5:3d:26:31:62:e3:e5:e0:68:51:e1:ae:63:bf: 9c:d9:0d:ae:b9:29:32:da:9f:6d:db:27:ad:03:02: 88:24:3b:85:90:ad:66:6c:7c:07:80:20:c8:49:f0: 46:7f:73:2a:b8:e2:af:d6:a9:68:17:b2:87:8f:42: 47:e3:7b:9d:46:54:45:8d:b3:ad:bd:17:78:e0:c7: e7:0c:fb:43:a8:1e:28:b8:58:98:4e:39:8e:2c:0f: 34:dc:a0:34:aa:ea:97:e0:7a:1b:d1:90:ab:3c:db: e4:cd:f4:61:6b:3f:8c:c8:11:a5:ad:ed:cf:3a:3d: b1:ab:24:0b:eb:79:e7:1f:bd:00:0d:97:63:e2:76: 8f:ae:b8:1b:76:6a:07:e4:31:2f:e5:6d:d8:83:0d: 39:45:6a:88:1c:c3:c8:f2:ad:d8:b7:fc:0c:bd:63: f2:a8:bc:74:28:b0:c4:22:66:20:b6:54:99:33:5b: 82:5f:af:39:ba:67:fc:f4:06:1b:94:7f:f9:25:11: 66:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:67:5F:31:CD:7D:F2:8B:29:D5:17:39:76:F2:7A:AC:4F:E1:52:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01d475ab-a03a-375c-8d98-1d9c959d74da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.9.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:9b:7f:0d:c8:ed:95:b9:50:90:49:65:fc:7d:ea:db:89:fb: 9a:d3:0d:ff:56:7e:9a:24:97:45:c6:6b:38:05:33:99:2f:a1: c9:9e:6c:e6:fe:0e:51:b5:f2:35:8f:9b:ea:75:e9:d3:89:25: 52:17:b0:f2:4c:cf:5d:6a:48:0d:69:bd:5b:4f:f9:28:b2:29: e2:3a:46:eb:16:8b:dc:ec:6f:d6:ba:51:db:59:db:eb:a0:2e: c1:0a:15:b6:1b:f2:7d:fa:50:6f:a7:e8:24:5f:b0:95:d0:fd: db:df:db:06:f0:89:42:22:d0:de:06:38:46:7b:0a:f7:43:72: 8c:fa:5b:9e:78:ef:14:6a:fd:ed:a8:c5:57:49:64:90:d2:5c: d8:39:c3:a9:d4:56:cf:58:66:20:d5:61:58:51:cf:ff:ba:f8: 9a:31:71:c5:2a:f3:ba:13:78:e6:42:60:20:ad:12:41:e5:16: 40:73:14:3c:52:f4:ea:1e:9b:54:3d:df:56:ab:d3:76:1c:3d: eb:60:08:b8:53:18:63:04:49:8e:25:8d:5f:72:09:7d:2a:72: 75:cc:1a:e4:e0:18:fa:3c:2f:08:f7:df:b5:3c:ca:66:1d:46: 71:3c:5d:9b:c9:c9:c4:08:2f:1e:46:f5:0d:5e:91:32:d2:3f: eb:2b:74:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBncTE1Bt8kLyUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZDRmMDY0MGMtZmMzMC00ZTVkLTgwYmQtNzc0N2FmN2ViOTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P0B98vWXP0FSMwlAUt6MUXpLRGBpNBo1GC5 PN/is4yaIt2X19PdLbIgsxlI9xK6G3xgk5YQELx7X1aV9T0mMWLj5eBoUeGuY7+c 2Q2uuSky2p9t2yetAwKIJDuFkK1mbHwHgCDISfBGf3MquOKv1qloF7KHj0JH43ud RlRFjbOtvRd44MfnDPtDqB4ouFiYTjmOLA803KA0quqX4Hob0ZCrPNvkzfRhaz+M yBGlre3POj2xqyQL63nnH70ADZdj4naPrrgbdmoH5DEv5W3Ygw05RWqIHMPI8q3Y t/wMvWPyqLx0KLDEImYgtlSZM1uCX685umf89AYblH/5JRFmRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9nXzHNffKLKdUXOXbyeqxP4VLEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDFkNDc1YWItYTAzYS0z NzVjLThkOTgtMWQ5Yzk1OWQ3NGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGFwmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6bfw3I7ZW5UJBJZfx96tuJ+5rTDf9Wfpokl0XGazgFM5kvocmebOb+ DlG18jWPm+p16dOJJVIXsPJMz11qSA1pvVtP+SiyKeI6RusWi9zsb9a6UdtZ2+ug LsEKFbYb8n36UG+n6CRfsJXQ/dvf2wbwiUIi0N4GOEZ7CvdDcoz6W5547xRq/e2o xVdJZJDSXNg5w6nUVs9YZiDVYVhRz/+6+JoxccUq87oTeOZCYCCtEkHlFkBzFDxS 9Ooem1Q931ar03YcPetgCLhTGGMESY4ljV9yCX0qcnXMGuTgGPo8Lwj337U8ymYd RnE8XZvJycQILx5G9Q1ekTLSP+srdOU= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:21 2025 by rpki-client