$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07e5b827-7ecb-3125-a88d-f28c99ecb296.roa File: 07e5b827-7ecb-3125-a88d-f28c99ecb296.roa (raw, json) Hash identifier: w36kMVQ7G08BzmM0s4ikHdYay2txg/yvPWi3qeLoPQc= Subject key identifier: DD:38:CD:85:E1:4C:C4:7F:29:D2:90:E1:30:E9:34:07:EC:B7:B2:5C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495C247C605EF0B2BF56AA9380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07e5b827-7ecb-3125-a88d-f28c99ecb296.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 20940 IP address blocks: 23.44.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:7c:60:5e:f0:b2:bf:56:aa:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=fbefca19-9613-465b-90b6-cd8676a9b970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:49:6e:3b:d9:85:4d:9d:9c:68:47:45:bf:b9: 4b:b0:79:95:0f:03:a9:83:b4:39:92:48:a1:36:a8: 9c:4a:01:77:78:76:01:5f:1a:6a:b4:85:5b:1c:ab: d4:18:cd:91:bc:6b:65:19:f6:fe:81:6d:26:8a:fb: 4d:98:66:e7:06:6c:a7:ae:fa:c5:fe:f8:d9:df:e6: e3:34:77:e6:2b:63:25:3b:9a:0c:8b:01:eb:15:39: 34:a7:41:96:fc:2a:b2:67:95:7b:f8:57:46:78:17: d8:f0:91:a7:ae:88:16:8b:aa:48:b6:6f:4c:e0:39: 37:2f:29:f9:ba:e4:66:32:f0:b0:11:43:93:3a:c9: d6:21:01:ab:b2:85:9d:e5:c6:68:b1:68:ca:2e:d9: 8d:55:da:db:38:71:73:18:8b:3e:33:c9:73:62:99: 78:54:e4:e6:08:24:88:ee:21:95:6d:91:b9:61:82: 12:f7:a3:bf:40:35:b0:e3:d0:5e:ab:11:e0:d6:a2: 03:51:3a:1b:10:8f:12:9f:3f:00:98:05:a4:82:1c: 79:11:75:5e:32:66:c9:5e:cb:a2:40:c8:aa:ff:cc: 61:ae:63:f7:87:85:0b:61:54:b0:25:19:3b:89:72: df:b4:09:5e:84:6c:e6:71:2d:2e:6e:c0:35:e6:4b: 49:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:38:CD:85:E1:4C:C4:7F:29:D2:90:E1:30:E9:34:07:EC:B7:B2:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07e5b827-7ecb-3125-a88d-f28c99ecb296.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:05:5d:41:36:1d:b8:07:89:15:63:fa:5c:b8:73:a0:3f:5a: db:75:48:67:db:a5:c0:83:6c:cc:e2:59:21:82:62:50:96:5b: 80:5a:00:c4:30:df:60:75:71:6f:6b:46:5b:78:25:87:3c:36: cb:6e:d9:21:ad:24:d3:0f:9c:dd:38:ef:e5:00:88:89:8a:2a: ad:f0:a5:d2:e5:95:8f:2f:ec:a7:10:89:3d:cd:0e:66:c0:1c: 44:5f:61:af:18:7e:50:fa:18:b2:b5:f3:54:c9:96:ea:09:cf: b7:9d:1c:3f:e3:5a:49:ed:38:82:9d:6f:d6:09:b5:48:90:d6: d8:aa:3c:f5:5b:c4:a1:65:65:43:d4:7f:b1:8d:af:71:a2:4f: c5:43:50:07:a3:8e:ab:af:28:20:91:0b:da:59:a7:49:91:a6: 59:e1:67:eb:53:0e:10:12:02:90:93:47:63:d3:cc:71:32:c9: 36:9b:9b:6f:e1:ab:2a:22:46:08:43:e7:39:6b:1c:a7:8e:7c: 06:94:5c:9d:92:4b:0a:5d:b3:a4:c2:f7:04:55:37:f2:f0:1a: 92:10:ef:3f:8a:c0:98:29:d8:0d:11:3a:60:ba:1a:d1:88:bc: 6e:b6:6c:a3:b3:15:f6:bd:71:55:de:76:a0:5d:ce:a3:f7:f5: 68:42:7b:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJHxgXvCyv1aqk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk ZmJlZmNhMTktOTYxMy00NjViLTkwYjYtY2Q4Njc2YTliOTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0luO9mFTZ2caEdFv7lLsHmVDwOpg7Q5kkih NqicSgF3eHYBXxpqtIVbHKvUGM2RvGtlGfb+gW0mivtNmGbnBmynrvrF/vjZ3+bj NHfmK2MlO5oMiwHrFTk0p0GW/CqyZ5V7+FdGeBfY8JGnrogWi6pItm9M4Dk3Lyn5 uuRmMvCwEUOTOsnWIQGrsoWd5cZosWjKLtmNVdrbOHFzGIs+M8lzYpl4VOTmCCSI 7iGVbZG5YYIS96O/QDWw49BeqxHg1qIDUTobEI8Snz8AmAWkghx5EXVeMmbJXsui QMiq/8xhrmP3h4ULYVSwJRk7iXLftAlehGzmcS0ubsA15ktJIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN04zYXhTMR/KdKQ4TDpNAfst7JcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDdlNWI4MjctN2VjYi0z MTI1LWE4OGQtZjI4Yzk5ZWNiMjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIFXUE2HbgHiRVj+ly4c6A/Wtt1SGfbpcCDbMziWSGCYlCWW4BaAMQw 32B1cW9rRlt4JYc8Nstu2SGtJNMPnN047+UAiImKKq3wpdLllY8v7KcQiT3NDmbA HERfYa8YflD6GLK181TJluoJz7edHD/jWkntOIKdb9YJtUiQ1tiqPPVbxKFlZUPU f7GNr3GiT8VDUAejjquvKCCRC9pZp0mRplnhZ+tTDhASApCTR2PTzHEyyTabm2/h qyoiRghD5zlrHKeOfAaUXJ2SSwpds6TC9wRVN/LwGpIQ7z+KwJgp2A0ROmC6GtGI vG62bKOzFfa9cVXedqBdzqP39WhCe0Y= -----END CERTIFICATE-----Generated at Sat Apr 5 10:53:38 2025 by rpki-client