$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a70a411-ab7e-3fd0-997e-3104a2766210.roa File: 0a70a411-ab7e-3fd0-997e-3104a2766210.roa (raw, json) Hash identifier: Z3+Dtyg8WuU1Do59Uze9BW5dMTTj/oxiz/fcUecSrLI= Subject key identifier: 67:A9:5E:C0:5C:1E:25:42:83:97:01:C5:19:85:8A:E2:52:61:52:7E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495C247E9B2841B19377996560 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a70a411-ab7e-3fd0-997e-3104a2766210.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 16625 IP address blocks: 23.45.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:7e:9b:28:41:b1:93:77:99:65:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=1f84a1d8-771b-4e3a-a207-dd58d40289eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fc:01:36:6a:38:15:89:de:4b:5d:58:57:b6: 79:7d:9e:8d:6c:4c:e8:15:27:6b:c0:48:ee:36:1a: 32:cb:7e:67:9a:7b:98:7e:32:89:e0:52:e8:5b:aa: 7c:3d:bf:4c:b3:ca:cd:89:33:cb:54:b2:27:f2:9d: 6d:2d:85:83:99:bd:b1:9f:17:9c:47:a1:e2:2b:c2: 40:26:15:41:74:7d:a5:21:c6:26:d9:35:6e:44:2a: 63:01:03:56:d9:f0:5d:bd:cd:bc:90:b7:a8:55:04: c3:be:b8:8d:f4:2a:ba:33:49:cd:cb:33:78:67:8c: 53:d9:74:0b:dd:be:a6:0e:44:09:67:7b:c4:b4:46: 7f:c8:75:e2:65:df:b4:45:f8:9a:1a:be:96:79:2d: 3a:f1:fc:f0:4a:2e:60:8a:a6:14:ea:7c:f1:91:02: 31:e4:23:d0:1c:9d:3c:45:93:6a:a7:b5:0e:cc:3a: 57:ee:73:40:7a:32:cd:2a:e7:19:28:dc:d1:d4:9b: 3e:08:e3:6b:00:8a:94:b4:fc:bb:21:98:a6:96:b9: 8e:e1:90:9e:81:a1:c7:22:fb:85:c4:d8:1c:6e:ba: d0:ae:84:63:7f:b6:4a:87:1f:f6:64:f5:90:13:32: 95:84:18:d5:82:ca:53:66:27:49:05:99:60:7b:cd: 82:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A9:5E:C0:5C:1E:25:42:83:97:01:C5:19:85:8A:E2:52:61:52:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a70a411-ab7e-3fd0-997e-3104a2766210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:ca:f3:2a:cf:d4:50:dd:c3:48:5a:7f:c4:35:6e:1f:3c:73: c2:32:7a:5b:10:2d:aa:88:30:bc:f2:74:7f:ae:48:88:ba:d0: a0:99:ea:c3:be:d9:7c:ac:0a:11:d8:5e:d5:de:11:77:22:5c: 67:41:10:e5:1e:85:9c:fe:b2:69:8f:9f:95:b2:02:77:2a:7b: 51:5b:87:33:d9:57:ed:a6:25:8f:6d:46:64:1b:73:67:1b:0f: 41:64:da:b1:bc:3e:eb:ac:b8:be:c2:f0:7f:58:c9:41:ad:c2: 77:00:86:c4:17:da:01:28:d1:a0:93:55:1f:00:37:ae:73:d6: ca:f9:81:d1:d7:8d:0e:04:98:ba:5c:59:9c:57:37:65:86:2e: 19:33:b7:c3:5b:67:e2:cd:72:5b:3e:56:9e:88:47:c3:e3:32: 78:1d:18:de:b0:d0:c2:60:b2:dd:14:7b:48:13:61:c1:55:2d: ef:a9:5d:bc:ac:30:73:0d:29:26:7b:6d:ba:36:17:67:a3:92: 8e:75:06:3c:f2:02:08:ea:30:f0:e3:97:7c:ca:34:84:50:d8: 16:30:42:06:46:0e:87:72:1a:d0:0f:5e:39:8e:b6:2c:cf:15: 85:7d:2c:d9:d7:d5:39:48:7c:92:11:55:1f:74:fe:4b:d7:d6: 70:60:ed:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJH6bKEGxk3eZZWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk MWY4NGExZDgtNzcxYi00ZTNhLWEyMDctZGQ1OGQ0MDI4OWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPwBNmo4FYneS11YV7Z5fZ6NbEzoFSdrwEju Nhoyy35nmnuYfjKJ4FLoW6p8Pb9Ms8rNiTPLVLIn8p1tLYWDmb2xnxecR6HiK8JA JhVBdH2lIcYm2TVuRCpjAQNW2fBdvc28kLeoVQTDvriN9Cq6M0nNyzN4Z4xT2XQL 3b6mDkQJZ3vEtEZ/yHXiZd+0RfiaGr6WeS068fzwSi5giqYU6nzxkQIx5CPQHJ08 RZNqp7UOzDpX7nNAejLNKucZKNzR1Js+CONrAIqUtPy7IZimlrmO4ZCegaHHIvuF xNgcbrrQroRjf7ZKhx/2ZPWQEzKVhBjVgspTZidJBZlge82CvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGepXsBcHiVCg5cBxRmFiuJSYVJ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGE3MGE0MTEtYWI3ZS0z ZmQwLTk5N2UtMzEwNGEyNzY2MjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFy1UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTK8yrP1FDdw0haf8Q1bh88c8IyelsQLaqIMLzydH+uSIi60KCZ6sO+ 2XysChHYXtXeEXciXGdBEOUehZz+smmPn5WyAncqe1FbhzPZV+2mJY9tRmQbc2cb D0Fk2rG8PuusuL7C8H9YyUGtwncAhsQX2gEo0aCTVR8AN65z1sr5gdHXjQ4EmLpc WZxXN2WGLhkzt8NbZ+LNcls+Vp6IR8PjMngdGN6w0MJgst0Ue0gTYcFVLe+pXbys MHMNKSZ7bbo2F2ejko51BjzyAgjqMPDjl3zKNIRQ2BYwQgZGDodyGtAPXjmOtizP FYV9LNnX1TlIfJIRVR90/kvX1nBg7Us= -----END CERTIFICATE-----Generated at Sat Apr 5 11:01:27 2025 by rpki-client