$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02fbfaa9-bcaa-3147-b8aa-d68fc6198387.roa File: 02fbfaa9-bcaa-3147-b8aa-d68fc6198387.roa (raw, json) Hash identifier: 2I3t0o6XXYgFNTRlt0nlyVuJK1bSJK+6qCSivLpGqp4= Subject key identifier: 6E:29:65:BB:F3:34:8B:69:64:65:95:48:AC:C5:3D:5A:85:4E:86:17 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495EEEF6296282B5AB2581BE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02fbfaa9-bcaa-3147-b8aa-d68fc6198387.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.48.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:f6:29:62:82:b5:ab:25:81:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=1a33cd7d-650b-4808-9b12-95259840bf15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f7:7d:09:7c:d9:53:82:04:ba:be:86:4a:e5: 78:97:60:de:2a:7a:4d:08:8c:cf:b1:2f:08:43:a3: 3e:20:07:2a:c3:16:0c:f4:99:3b:7b:14:f2:5f:5b: 5c:2d:7e:2d:c0:f6:aa:53:3b:71:d5:7e:83:8f:4d: 92:d3:a9:3d:46:6c:31:27:59:83:52:a3:aa:2b:a1: 10:4d:c0:46:49:14:6e:64:df:85:5c:f7:35:47:ce: 51:c9:61:b0:3a:12:6a:f6:c8:a7:a9:fa:2b:d6:6b: 04:b4:0a:72:61:4d:7b:76:af:c1:e5:a2:c1:e0:ab: 0d:44:9d:d3:9c:7b:09:de:a7:d0:62:bf:af:8e:8a: d9:71:f2:72:e8:0c:fc:92:94:c1:0b:b1:15:3c:c5: a2:85:51:73:d2:bd:96:40:71:87:ab:cd:52:f5:4f: 04:2f:d1:79:b3:c6:15:9e:57:46:10:b3:a9:f0:71: bd:50:1e:a9:0b:26:4c:9f:9f:55:03:b3:b3:78:3e: 5d:e6:48:0f:d5:e9:cd:e7:c3:6a:d5:e1:f4:1c:67: ef:fe:8d:1c:4d:c6:5d:7b:f3:5f:6e:01:5a:cf:94: 0d:d5:90:03:20:2c:b9:a7:f7:a1:8a:9b:13:1f:5d: 69:ee:0e:0b:72:eb:9d:2b:c4:22:ad:1f:ba:4d:fc: 1d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:29:65:BB:F3:34:8B:69:64:65:95:48:AC:C5:3D:5A:85:4E:86:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02fbfaa9-bcaa-3147-b8aa-d68fc6198387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:0c:7d:a6:bd:3a:5a:15:78:a0:e5:4d:41:19:a4:10:40:30: 1d:86:4e:a1:f5:30:1e:25:cb:a4:9b:7c:81:61:51:11:60:0a: bb:67:6c:7b:00:b1:c8:af:32:91:82:e3:df:b1:de:dd:ea:8e: 7f:e5:21:ee:03:de:4c:b2:f2:f4:fa:19:95:c3:e7:cc:a4:88: ec:7f:27:21:3a:18:ad:ac:90:c9:da:64:f2:12:61:49:04:1d: 26:87:16:b5:fd:99:ef:33:e9:20:1f:85:09:c0:18:1f:db:0e: 04:e7:df:d7:a3:ff:4e:ec:8a:4c:2d:f7:8b:5e:38:36:9d:5c: ec:7e:53:c8:bf:37:d3:4b:1c:aa:dd:d9:88:4e:60:76:c4:14: 58:c3:41:48:97:7b:75:ea:38:59:f8:4f:0d:9d:91:61:df:89: ae:8b:d4:99:27:93:d9:9b:7c:7b:b5:57:5a:7a:6f:69:11:ba: 64:9b:fb:b1:ac:34:6f:50:a8:1f:56:20:86:f6:61:c6:fd:c1: c7:1e:1a:68:46:00:ef:91:cc:c1:82:65:cb:43:10:e0:96:42: 2f:1a:5c:bd:9a:f7:50:bd:55:3d:7a:8c:be:6f:99:75:b1:2f: eb:50:a4:01:c2:a7:03:cd:00:e1:e8:53:94:23:bc:5d:e8:1f: 36:d9:20:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7vYpYoK1qyWBvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk MWEzM2NkN2QtNjUwYi00ODA4LTliMTItOTUyNTk4NDBiZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/d9CXzZU4IEur6GSuV4l2DeKnpNCIzPsS8I Q6M+IAcqwxYM9Jk7exTyX1tcLX4twPaqUztx1X6Dj02S06k9RmwxJ1mDUqOqK6EQ TcBGSRRuZN+FXPc1R85RyWGwOhJq9sinqfor1msEtApyYU17dq/B5aLB4KsNRJ3T nHsJ3qfQYr+vjorZcfJy6Az8kpTBC7EVPMWihVFz0r2WQHGHq81S9U8EL9F5s8YV nldGELOp8HG9UB6pCyZMn59VA7OzeD5d5kgP1enN58Nq1eH0HGfv/o0cTcZde/Nf bgFaz5QN1ZADICy5p/ehipsTH11p7g4LcuudK8QirR+6TfwdHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4pZbvzNItpZGWVSKzFPVqFToYXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDJmYmZhYTktYmNhYS0z MTQ3LWI4YWEtZDY4ZmM2MTk4Mzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzBjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIMfaa9OloVeKDlTUEZpBBAMB2GTqH1MB4ly6SbfIFhURFgCrtnbHsA scivMpGC49+x3t3qjn/lIe4D3kyy8vT6GZXD58ykiOx/JyE6GK2skMnaZPISYUkE HSaHFrX9me8z6SAfhQnAGB/bDgTn39ej/07sikwt94teODadXOx+U8i/N9NLHKrd 2YhOYHbEFFjDQUiXe3XqOFn4Tw2dkWHfia6L1Jknk9mbfHu1V1p6b2kRumSb+7Gs NG9QqB9WIIb2Ycb9wcceGmhGAO+RzMGCZctDEOCWQi8aXL2a91C9VT16jL5vmXWx L+tQpAHCpwPNAOHoU5QjvF3oHzbZIIE= -----END CERTIFICATE-----Generated at Sat Apr 5 12:24:51 2025 by rpki-client