$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/143a9322-104a-3282-bef5-611d1147110d.roa File: 143a9322-104a-3282-bef5-611d1147110d.roa (raw, json) Hash identifier: y6M5D22tVcgzYxPU98eiVzDuVdkWb2WvEsaRE8u+nAI= Subject key identifier: DF:59:EF:AE:65:4E:DF:3A:58:BA:58:6C:75:0A:12:E6:E9:CB:9C:25 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858493C0935A045FF1BD72E8D19C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/143a9322-104a-3282-bef5-611d1147110d.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 16625 IP address blocks: 23.39.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:35:a0:45:ff:1b:d7:2e:8d:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=79415e77-fa6c-4f6b-bf44-6c64fa8c3b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:60:b4:cc:07:4d:95:32:fb:2b:c3:64:03:d9: 01:27:2d:34:12:e2:6a:ca:c3:f3:88:2d:d4:d1:4e: c2:4d:99:7f:23:ff:c8:57:41:7f:bd:01:22:53:5e: 84:b3:58:3d:7e:00:a2:5f:9e:44:2a:25:c1:2f:66: 64:99:23:d1:24:ad:33:93:5c:34:96:ab:70:ea:db: 63:29:d6:16:af:4d:17:75:ad:45:ef:7b:84:91:4d: 94:07:6b:e3:05:0a:c9:b2:2a:fd:44:64:0c:e0:2b: bc:18:01:eb:0e:78:6e:69:fd:73:77:ee:8f:5e:54: 60:d3:f6:fd:ba:a5:b6:c9:45:5d:61:b0:58:71:0e: 9a:2d:c9:0b:8b:2d:58:81:30:ff:d1:09:7e:b0:63: a8:53:78:9e:85:38:03:a3:4b:20:1c:10:d6:a1:1b: cb:52:3c:80:9a:8d:0c:07:6e:93:9f:0b:3a:5c:92: d4:be:d8:dc:9b:e1:8c:99:24:39:8e:86:fa:47:79: a4:52:83:91:2d:51:34:d0:81:34:f0:77:80:b7:e2: c2:34:da:f1:80:d7:58:3b:2a:af:bb:6f:3c:be:48: 62:d4:78:24:c0:31:98:1e:0b:23:42:23:da:95:0c: 7d:3c:18:7d:3a:d7:9a:ee:92:20:13:3c:47:8c:cb: 09:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:59:EF:AE:65:4E:DF:3A:58:BA:58:6C:75:0A:12:E6:E9:CB:9C:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/143a9322-104a-3282-bef5-611d1147110d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:66:29:38:d8:f0:5c:6a:1b:66:55:d4:42:2c:d4:a9:13:be: e0:18:0c:5a:53:00:ed:4f:7c:da:87:bb:e7:52:e4:4c:59:a8: 3f:6c:89:0e:9e:90:8f:69:d5:ed:b2:e0:65:f0:9e:87:9e:5e: 74:4f:de:04:e4:0e:d8:e6:0b:7e:b3:11:bc:eb:8c:a8:05:7c: 4c:f5:b7:23:d0:df:e8:4e:77:cf:03:03:1b:04:fc:14:e6:e8: 3c:cf:2b:02:cd:82:59:f4:57:94:9a:23:08:b2:86:c9:63:3f: 04:fc:74:ba:5e:52:9e:0a:12:1b:ea:6e:df:b9:3e:24:42:cd: c9:09:9e:c1:3d:6d:68:50:b6:50:81:45:47:75:4f:50:43:a3: 26:d2:6a:60:27:b6:35:62:e1:0a:51:72:89:70:89:c7:5b:8c: 3b:7d:83:31:ce:ed:57:d7:04:37:b9:2e:f7:c6:e5:eb:34:18: 05:9f:ae:d4:bd:f7:f5:f6:55:70:2b:d4:18:df:57:e2:d7:b0: 36:51:83:17:8b:c9:5e:24:83:74:c0:82:a9:33:f3:dc:a9:72: 75:a8:29:18:5c:c9:a7:7e:cf:c4:34:d8:a5:4e:16:8d:cd:66: 43:e5:3f:4c:70:d9:74:ba:82:a7:51:aa:71:b5:d6:72:ef:60: fd:ac:2b:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTWgRf8b1y6NGcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk Nzk0MTVlNzctZmE2Yy00ZjZiLWJmNDQtNmM2NGZhOGMzYjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2C0zAdNlTL7K8NkA9kBJy00EuJqysPziC3U 0U7CTZl/I//IV0F/vQEiU16Es1g9fgCiX55EKiXBL2ZkmSPRJK0zk1w0lqtw6ttj KdYWr00Xda1F73uEkU2UB2vjBQrJsir9RGQM4Cu8GAHrDnhuaf1zd+6PXlRg0/b9 uqW2yUVdYbBYcQ6aLckLiy1YgTD/0Ql+sGOoU3iehTgDo0sgHBDWoRvLUjyAmo0M B26Tnws6XJLUvtjcm+GMmSQ5job6R3mkUoORLVE00IE08HeAt+LCNNrxgNdYOyqv u288vkhi1HgkwDGYHgsjQiPalQx9PBh9Otea7pIgEzxHjMsJhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9Z765lTt86WLpYbHUKEubpy5wlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTQzYTkzMjItMTA0YS0z MjgyLWJlZjUtNjExZDExNDcxMTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFycYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBmKTjY8FxqG2ZV1EIs1KkTvuAYDFpTAO1PfNqHu+dS5ExZqD9siQ6e kI9p1e2y4GXwnoeeXnRP3gTkDtjmC36zEbzrjKgFfEz1tyPQ3+hOd88DAxsE/BTm 6DzPKwLNgln0V5SaIwiyhsljPwT8dLpeUp4KEhvqbt+5PiRCzckJnsE9bWhQtlCB RUd1T1BDoybSamAntjVi4QpRcolwicdbjDt9gzHO7VfXBDe5LvfG5es0GAWfrtS9 9/X2VXAr1BjfV+LXsDZRgxeLyV4kg3TAgqkz89ypcnWoKRhcyad+z8Q02KVOFo3N ZkPlP0xw2XS6gqdRqnG11nLvYP2sK5w= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:42 2025 by rpki-client