$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20308d09-a0cf-3452-b847-ea4c8776bc34.roa File: 20308d09-a0cf-3452-b847-ea4c8776bc34.roa (raw, json) Hash identifier: 2qsgUJFfo+1dgj7IdsK6VUrVfD1oXSFjugGPNAS87Cc= Subject key identifier: 70:33:29:DE:58:14:04:EF:7A:9A:7D:00:5F:43:95:BC:E5:15:E1:62 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495EEEF0A7EEF56017FB594B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20308d09-a0cf-3452-b847-ea4c8776bc34.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 16625 IP address blocks: 23.47.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:f0:a7:ee:f5:60:17:fb:59:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=ce229a26-73ac-44e4-ac38-ddb8a7c6fc38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5b:99:46:8c:75:46:23:91:48:ea:88:49:5d: 4e:78:60:40:2a:f4:a1:80:3d:8a:ab:4f:dc:7e:57: 32:97:bb:77:5a:47:83:73:76:ae:fc:dc:a4:60:6d: 71:a4:f5:b5:a4:6f:0f:98:b7:42:af:8c:e3:9e:ea: 2b:5d:0b:1a:6c:c9:42:28:cb:c0:ac:ee:5e:44:4e: bd:6f:97:04:c1:68:cf:be:29:6f:14:9b:f4:87:0e: 0c:c6:ab:68:14:ab:77:a6:f8:6f:c8:54:12:95:29: 35:c7:6e:74:1d:22:71:10:8e:1c:4c:2b:f3:73:cb: 84:f0:cb:b2:eb:85:ca:57:fd:06:9b:da:f3:da:0c: 34:c5:dd:75:f0:97:89:a0:44:87:7c:49:1b:ff:28: d9:54:ff:58:51:b6:81:61:de:c3:a4:f4:06:df:97: 37:9e:78:0d:48:19:c3:f1:7b:b0:17:31:4e:4b:0e: 9d:45:f9:95:27:4e:86:c0:63:8c:58:0f:3f:1a:e6: 34:b2:d9:27:c5:8a:44:a7:cd:a8:08:b2:15:c9:45: a4:ee:87:ba:f0:97:be:70:d5:65:02:50:7d:74:02: 9a:5c:83:73:56:09:ff:7d:2d:c2:d8:94:5b:4b:41: 83:0d:30:e9:f5:6f:64:6b:cb:cd:f3:bf:7c:b4:d9: 3e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:33:29:DE:58:14:04:EF:7A:9A:7D:00:5F:43:95:BC:E5:15:E1:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20308d09-a0cf-3452-b847-ea4c8776bc34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.47.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:53:b4:89:e4:c4:14:2f:63:9b:e1:95:67:3a:3b:c1:21:41: 3c:4a:1f:cf:0a:2e:3e:f6:1e:4a:80:7a:39:bc:d8:55:63:3a: 65:d3:8a:5b:6e:80:1a:da:79:12:76:32:58:21:f1:13:96:46: 53:c2:a1:ca:8d:08:2f:8c:97:55:f9:d7:da:ec:aa:af:d3:df: cf:fe:13:ed:c0:dd:7b:71:4e:4e:9f:ad:b7:92:8a:ed:87:2e: 0f:db:60:bb:46:b0:d3:b6:8e:2a:81:85:39:7f:87:51:a4:04: 60:ca:91:fe:09:a3:28:1c:3d:bc:fe:5d:51:68:da:53:e7:7a: de:76:40:7d:1c:79:5b:10:53:46:a1:cb:2b:97:65:bc:3b:91: 81:1f:b9:10:bb:8c:02:f5:fc:de:b8:02:f4:32:f9:07:cf:ad: 38:24:83:e0:80:cf:27:74:0a:77:16:2b:17:a7:b6:e6:7e:86: 79:4a:d8:91:e3:22:3d:c5:c1:9a:7b:15:ad:5f:56:77:04:2f: b7:36:9f:15:17:ec:6e:2e:4c:9c:7c:49:41:b1:19:77:7f:62: 5e:f2:bb:0b:1a:ce:23:be:b8:bf:02:71:6c:a9:ce:5b:42:93: 11:36:6d:b3:02:45:29:a6:96:d8:f3:c9:ca:5e:82:8f:b0:31: 98:fd:76:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7vCn7vVgF/tZSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk Y2UyMjlhMjYtNzNhYy00NGU0LWFjMzgtZGRiOGE3YzZmYzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjluZRox1RiORSOqISV1OeGBAKvShgD2Kq0/c flcyl7t3WkeDc3au/NykYG1xpPW1pG8PmLdCr4zjnuorXQsabMlCKMvArO5eRE69 b5cEwWjPvilvFJv0hw4MxqtoFKt3pvhvyFQSlSk1x250HSJxEI4cTCvzc8uE8Muy 64XKV/0Gm9rz2gw0xd118JeJoESHfEkb/yjZVP9YUbaBYd7DpPQG35c3nngNSBnD 8XuwFzFOSw6dRfmVJ06GwGOMWA8/GuY0stknxYpEp82oCLIVyUWk7oe68Je+cNVl AlB9dAKaXINzVgn/fS3C2JRbS0GDDTDp9W9ka8vN8798tNk+IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAzKd5YFATvepp9AF9DlbzlFeFiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjAzMDhkMDktYTBjZi0z NDUyLWI4NDctZWE0Yzg3NzZiYzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFy9wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlTtInkxBQvY5vhlWc6O8EhQTxKH88KLj72HkqAejm82FVjOmXTiltu gBraeRJ2Mlgh8ROWRlPCocqNCC+Ml1X519rsqq/T38/+E+3A3XtxTk6frbeSiu2H Lg/bYLtGsNO2jiqBhTl/h1GkBGDKkf4JoygcPbz+XVFo2lPnet52QH0ceVsQU0ah yyuXZbw7kYEfuRC7jAL1/N64AvQy+QfPrTgkg+CAzyd0CncWKxentuZ+hnlK2JHj Ij3FwZp7Fa1fVncEL7c2nxUX7G4uTJx8SUGxGXd/Yl7yuwsaziO+uL8CcWypzltC kxE2bbMCRSmmltjzycpego+wMZj9dtY= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:51 2025 by rpki-client