$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d083a9a-26b6-39b4-8173-c02daa0520e1.roa File: 0d083a9a-26b6-39b4-8173-c02daa0520e1.roa (raw, json) Hash identifier: B6xRG5nu5DQ9AFlw9y/nsslXMllxX10e92ze2JqFsxU= Subject key identifier: 77:56:D7:08:C7:91:56:C3:96:5B:35:1E:62:C7:C3:BE:86:FF:B1:7E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858488DAB631FA4B0E69D7C2F3E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d083a9a-26b6-39b4-8173-c02daa0520e1.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.61.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:63:1f:a4:b0:e6:9d:7c:2f:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=ccdb8452-64b5-41da-8eef-21c8c6a8f489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:17:d3:b9:8d:0d:bd:c4:f8:3f:d8:88:75:98: c7:fd:b3:72:7e:66:eb:ec:c4:b6:78:7d:7e:bc:89: fb:11:7d:c7:5d:36:a1:56:f0:82:1c:5a:f0:cd:9a: f7:5a:29:ce:d8:35:39:7e:ea:20:f6:e3:04:1b:da: e1:14:e5:eb:d5:0a:98:d0:e1:f9:0c:f9:c3:db:e2: db:df:4f:ee:8f:02:d7:1c:a8:64:e6:e7:37:f4:52: 0d:16:43:20:d5:b7:34:81:85:ed:ad:69:f6:41:6e: 53:c7:39:b0:d4:ce:48:dd:cd:b5:f8:1d:82:df:44: d7:71:32:29:6a:3a:66:8f:dc:9b:76:ff:84:92:27: 46:b9:c8:8a:0c:09:e6:0f:c3:f4:ab:10:61:76:f3: e4:d2:bd:fe:76:03:25:c0:da:96:ba:a5:1d:39:7f: 7d:35:7c:cd:ce:8b:cc:e8:23:3b:55:ba:f6:6c:08: ea:ca:f3:9d:9e:79:85:16:5c:40:ce:61:5b:1d:91: 3b:b3:75:c1:75:34:8d:e0:8a:b1:45:a2:6d:70:2d: 67:4d:f6:41:e9:c8:0c:1f:5d:55:de:0e:fb:7b:6a: 2f:a2:c0:11:d9:38:2b:0a:18:64:99:bc:78:5e:fe: 63:a8:d0:da:20:e9:cd:df:df:eb:55:1a:5c:c9:6c: c6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:56:D7:08:C7:91:56:C3:96:5B:35:1E:62:C7:C3:BE:86:FF:B1:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d083a9a-26b6-39b4-8173-c02daa0520e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.61.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ed:a9:bd:e6:48:69:56:26:65:f9:f3:55:d3:02:89:74:3c: da:9b:9f:ef:29:24:1f:08:0b:8f:77:5a:fb:65:34:e8:fd:fb: 9a:c2:0f:f3:da:cc:b8:a4:6c:f0:46:2b:b0:55:84:52:8f:f0: ec:07:22:4b:df:8e:f9:ab:bc:00:97:94:46:71:48:59:6a:52: 05:66:ec:ea:36:b0:a9:19:29:b1:6e:b6:af:10:9e:fe:79:de: 09:4b:92:5c:52:ea:36:bd:5c:06:4b:fa:ef:ea:73:98:8c:78: 6f:3a:5d:63:3e:fa:0a:4f:28:bb:57:b6:e5:85:26:67:48:9a: 17:30:2e:9a:5e:17:ae:ed:22:d7:ad:90:b8:4f:cd:aa:9d:9c: e2:0c:23:d3:d2:ac:9a:25:b4:43:51:f6:d9:d8:4d:cd:8f:3d: 08:6e:1f:15:86:9e:41:df:f5:4f:49:b5:f5:b8:d3:32:d1:4d: b7:05:f3:b3:a0:5c:19:c7:d5:4e:77:9f:6e:dc:1f:f8:db:05: 6d:1a:ea:df:0e:65:71:83:f1:13:a9:aa:6d:31:b2:f1:db:4d: 92:59:1b:f8:44:f2:bd:fe:d6:72:a5:ac:75:48:d5:5f:bb:6e: dc:4d:b1:bc:ac:43:ad:79:b8:5f:88:6e:fb:37:cc:ea:42:80: 99:5c:4a:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq2MfpLDmnXwvPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk Y2NkYjg0NTItNjRiNS00MWRhLThlZWYtMjFjOGM2YThmNDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRfTuY0NvcT4P9iIdZjH/bNyfmbr7MS2eH1+ vIn7EX3HXTahVvCCHFrwzZr3WinO2DU5fuog9uMEG9rhFOXr1QqY0OH5DPnD2+Lb 30/ujwLXHKhk5uc39FINFkMg1bc0gYXtrWn2QW5Txzmw1M5I3c21+B2C30TXcTIp ajpmj9ybdv+EkidGuciKDAnmD8P0qxBhdvPk0r3+dgMlwNqWuqUdOX99NXzNzovM 6CM7Vbr2bAjqyvOdnnmFFlxAzmFbHZE7s3XBdTSN4IqxRaJtcC1nTfZB6cgMH11V 3g77e2ovosAR2TgrChhkmbx4Xv5jqNDaIOnN39/rVRpcyWzG7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdW1wjHkVbDlls1HmLHw76G/7F+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGQwODNhOWEtMjZiNi0z OWI0LTgxNzMtYzAyZGFhMDUyMGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFz3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHtqb3mSGlWJmX581XTAol0PNqbn+8pJB8IC493WvtlNOj9+5rCD/Pa zLikbPBGK7BVhFKP8OwHIkvfjvmrvACXlEZxSFlqUgVm7Oo2sKkZKbFutq8Qnv55 3glLklxS6ja9XAZL+u/qc5iMeG86XWM++gpPKLtXtuWFJmdImhcwLppeF67tItet kLhPzaqdnOIMI9PSrJoltENR9tnYTc2PPQhuHxWGnkHf9U9JtfW40zLRTbcF87Og XBnH1U53n27cH/jbBW0a6t8OZXGD8ROpqm0xsvHbTZJZG/hE8r3+1nKlrHVI1V+7 btxNsbysQ615uF+Ibvs3zOpCgJlcStA= -----END CERTIFICATE-----Generated at Sat Apr 5 11:05:11 2025 by rpki-client