$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/128cc7a7-e456-3883-a8ab-1b1f7a3f9709.roa File: 128cc7a7-e456-3883-a8ab-1b1f7a3f9709.roa (raw, json) Hash identifier: J5cWbFgrYz2PkIxNmcHRmLGpAvnkkvZbekBznQsdmcU= Subject key identifier: C9:3E:B0:3C:2C:57:5B:82:66:2A:DA:ED:BE:ED:9F:62:8F:79:B7:B0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495C247B5744EBA0BA253B4600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/128cc7a7-e456-3883-a8ab-1b1f7a3f9709.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 16625 IP address blocks: 23.43.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:7b:57:44:eb:a0:ba:25:3b:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=75484740-4c97-4d2b-bc72-4bdc69d76bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8b:47:45:c4:ee:72:8e:9a:68:df:28:f5:f4: 19:9b:8e:e2:65:9e:60:d7:82:43:d1:d8:ef:6e:82: 50:7f:ef:7d:e3:04:61:68:b2:4a:19:53:80:f8:d4: b1:0e:62:98:c2:2e:62:2d:e3:a2:2d:ea:b3:aa:fe: 56:4a:9c:30:85:1c:3c:d0:6b:58:dc:11:ff:d4:6f: 78:93:f8:27:37:2e:b7:69:f6:8e:1b:4c:66:25:f0: b8:b6:67:f2:c1:e5:80:ff:2f:05:6a:f7:a0:11:33: bc:94:15:65:52:1c:28:00:50:8d:30:f4:c5:8f:c2: c7:1e:9d:90:65:25:45:92:91:8c:2e:2d:d6:1b:af: de:10:81:a5:27:8d:8e:3d:2e:12:98:b7:3e:f7:1f: 9d:f7:c5:5c:25:42:40:d3:8a:f8:d9:01:bb:28:7d: 9f:90:eb:dc:49:4e:39:8f:6e:14:b1:41:7a:fc:9e: 6c:e0:dc:00:90:15:a7:a3:39:49:b9:1e:09:30:da: d6:73:8a:30:6d:9d:ca:8d:b9:49:c7:0d:09:3a:41: e1:da:40:a3:7d:69:fa:6a:53:4d:93:cd:d2:f5:44: 60:67:76:53:2c:62:5c:3d:c8:1f:f9:51:f3:a2:da: d0:5f:ac:2c:0e:f5:e9:91:f4:62:63:b8:b2:62:24: 02:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3E:B0:3C:2C:57:5B:82:66:2A:DA:ED:BE:ED:9F:62:8F:79:B7:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/128cc7a7-e456-3883-a8ab-1b1f7a3f9709.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:e1:03:49:cf:a8:7e:0c:b1:98:9d:90:99:69:8d:1a:d4:b6: 74:d9:9f:40:c0:06:65:71:4b:62:a6:de:d9:d5:e2:cf:57:49: 37:24:5b:b8:bb:ff:8c:6e:35:60:4e:03:2f:78:bb:22:e2:60: 03:58:13:1f:2f:ea:24:59:d9:d8:54:4d:75:29:f3:b6:0c:5f: b2:0d:2d:07:26:d8:8a:5a:eb:c8:c0:8d:55:e2:ac:37:dd:da: c7:c1:9e:2f:c1:ee:6d:dc:10:8c:4c:03:76:aa:39:12:73:38: 00:e0:85:0f:ca:69:a4:98:82:60:2d:c8:14:e6:7f:d4:2d:27: 89:1d:88:8a:71:c2:06:b7:15:39:89:84:8c:bc:2c:1a:88:5d: 03:06:d2:30:64:6a:81:23:0e:5e:f2:d3:7c:2f:c4:1c:27:1d: ce:3d:0c:5a:61:48:34:fa:f9:0d:b7:76:61:21:2b:57:c1:8d: c0:73:64:4f:d3:c1:6d:16:a1:72:c4:e8:25:6d:44:11:04:af: 35:dd:7f:35:de:83:2f:37:05:c9:0c:af:46:f6:f7:4b:e3:e9: 4f:82:4c:66:a1:c7:54:6b:51:6f:23:d3:0e:d0:90:cb:8f:17: aa:f7:05:01:a5:f9:8a:8d:a5:0a:97:b1:31:0c:54:39:fb:2d: 32:7b:7e:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJHtXROuguiU7RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk NzU0ODQ3NDAtNGM5Ny00ZDJiLWJjNzItNGJkYzY5ZDc2YmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4tHRcTuco6aaN8o9fQZm47iZZ5g14JD0djv boJQf+994wRhaLJKGVOA+NSxDmKYwi5iLeOiLeqzqv5WSpwwhRw80GtY3BH/1G94 k/gnNy63afaOG0xmJfC4tmfyweWA/y8FavegETO8lBVlUhwoAFCNMPTFj8LHHp2Q ZSVFkpGMLi3WG6/eEIGlJ42OPS4SmLc+9x+d98VcJUJA04r42QG7KH2fkOvcSU45 j24UsUF6/J5s4NwAkBWnozlJuR4JMNrWc4owbZ3KjblJxw0JOkHh2kCjfWn6alNN k83S9URgZ3ZTLGJcPcgf+VHzotrQX6wsDvXpkfRiY7iyYiQCIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMk+sDwsV1uCZira7b7tn2KPebewMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTI4Y2M3YTctZTQ1Ni0z ODgzLWE4YWItMWIxZjdhM2Y5NzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyv8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPhA0nPqH4MsZidkJlpjRrUtnTZn0DABmVxS2Km3tnV4s9XSTckW7i7 /4xuNWBOAy94uyLiYANYEx8v6iRZ2dhUTXUp87YMX7INLQcm2Ipa68jAjVXirDfd 2sfBni/B7m3cEIxMA3aqORJzOADghQ/KaaSYgmAtyBTmf9QtJ4kdiIpxwga3FTmJ hIy8LBqIXQMG0jBkaoEjDl7y03wvxBwnHc49DFphSDT6+Q23dmEhK1fBjcBzZE/T wW0WoXLE6CVtRBEErzXdfzXegy83BckMr0b290vj6U+CTGahx1RrUW8j0w7QkMuP F6r3BQGl+YqNpQqXsTEMVDn7LTJ7fgs= -----END CERTIFICATE-----Generated at Sat Apr 5 10:58:28 2025 by rpki-client