$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/207e3e47-38ef-33b5-be86-a8e1ac3b2094.roa File: 207e3e47-38ef-33b5-be86-a8e1ac3b2094.roa (raw, json) Hash identifier: aJdA1FJtkj2irBkDQthhq2wyKAYIqI9FtBAWOe81EvQ= Subject key identifier: A5:28:12:A4:C3:99:0F:59:FA:EB:F1:8A:7D:0B:54:E9:65:08:5B:5C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496CE471443CED6D5AFA9183C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/207e3e47-38ef-33b5-be86-a8e1ac3b2094.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 24319 IP address blocks: 23.55.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:71:44:3c:ed:6d:5a:fa:91:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=e2b96891-969a-461d-91d4-8030b4f3d611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b6:81:0e:ad:71:6a:59:f0:e5:49:2e:17:e3: d2:dd:93:3d:79:96:35:c7:2a:a7:9f:9f:4e:c7:25: e7:7c:1a:9f:d5:c0:32:50:d1:9f:67:25:9e:b6:23: 1d:b2:68:4a:1c:2b:c0:9e:27:20:5a:ad:cc:9f:ce: b2:14:20:76:7c:74:ad:a2:82:3a:34:f4:34:3f:05: 02:b1:ac:73:a1:54:f1:0a:8b:34:de:b2:1d:37:d6: 65:f2:86:53:13:ee:a2:89:32:18:72:2f:a1:02:99: 50:1a:fc:e8:34:fc:ae:1e:5b:10:58:55:1a:4f:65: 86:3c:0c:01:f6:f2:94:74:0b:66:3e:ac:af:7a:b8: 88:a4:2b:28:09:d8:aa:cc:65:29:77:49:65:15:54: ee:f4:d3:ba:55:db:2d:13:68:d6:79:12:ea:6d:6f: 13:2a:a2:76:70:95:f3:19:e2:77:18:33:be:0f:34: b0:36:7d:99:18:16:65:8d:62:95:bf:a0:73:11:fb: d1:e3:fc:7d:35:72:7c:13:1b:17:7c:e7:d9:8d:be: 13:ca:40:4d:89:f8:43:ea:4f:c6:4e:e4:70:cd:9d: a5:a1:e9:87:1b:c6:f2:d7:4d:8b:05:98:b2:b6:30: 08:29:19:09:58:1f:10:87:42:96:b4:7f:76:cf:a3: 78:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:28:12:A4:C3:99:0F:59:FA:EB:F1:8A:7D:0B:54:E9:65:08:5B:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/207e3e47-38ef-33b5-be86-a8e1ac3b2094.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.55.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c2:4f:3c:32:4f:2c:98:f2:62:9b:38:6a:59:e3:83:8e:89: 63:8a:57:48:c5:e6:a2:68:f4:4b:95:a5:db:cb:a5:16:d9:47: 64:21:80:93:30:c4:5a:03:e9:c7:7e:83:91:eb:db:9e:61:2a: 16:60:8f:67:59:7b:fe:10:d2:06:51:ee:c7:b4:7a:68:ba:a5: 54:7e:7c:7f:e4:93:33:dd:42:26:6c:9a:bf:bc:40:92:38:fc: 89:45:c5:ae:1e:66:7a:9f:71:85:4a:ad:1d:52:59:3b:88:6c: 91:74:42:18:d6:5e:19:85:ba:ba:3b:28:cc:c6:b2:5b:80:52: 74:8d:b1:23:04:f6:ed:cd:a9:ef:b9:90:b7:2b:43:15:11:b2: 5a:68:14:49:be:e7:ed:54:0e:c1:6c:88:56:9b:d9:8d:0c:35: 64:cb:44:74:d2:63:85:06:f1:b5:57:60:96:60:2d:ce:35:4b: 30:85:2a:e4:94:c6:92:2d:66:e7:03:7b:8d:29:ee:86:ba:0f: 2b:92:47:fc:e9:40:f4:9e:3f:f8:c3:3f:fd:6a:66:16:ac:28: d5:aa:ab:06:b1:93:44:53:a4:e0:45:45:3d:40:93:04:e2:2b: 8c:ca:66:17:72:86:1e:e3:ed:e8:d1:14:7b:08:62:59:c5:cf: 96:96:a8:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5HFEPO1tWvqRg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk ZTJiOTY4OTEtOTY5YS00NjFkLTkxZDQtODAzMGI0ZjNkNjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7aBDq1xalnw5UkuF+PS3ZM9eZY1xyqnn59O xyXnfBqf1cAyUNGfZyWetiMdsmhKHCvAnicgWq3Mn86yFCB2fHStooI6NPQ0PwUC saxzoVTxCos03rIdN9Zl8oZTE+6iiTIYci+hAplQGvzoNPyuHlsQWFUaT2WGPAwB 9vKUdAtmPqyveriIpCsoCdiqzGUpd0llFVTu9NO6VdstE2jWeRLqbW8TKqJ2cJXz GeJ3GDO+DzSwNn2ZGBZljWKVv6BzEfvR4/x9NXJ8ExsXfOfZjb4TykBNifhD6k/G TuRwzZ2loemHG8by102LBZiytjAIKRkJWB8Qh0KWtH92z6N42QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUoEqTDmQ9Z+uvxin0LVOllCFtcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjA3ZTNlNDctMzhlZi0z M2I1LWJlODYtYThlMWFjM2IyMDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzcxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/CTzwyTyyY8mKbOGpZ44OOiWOKV0jF5qJo9EuVpdvLpRbZR2QhgJMw xFoD6cd+g5Hr255hKhZgj2dZe/4Q0gZR7se0emi6pVR+fH/kkzPdQiZsmr+8QJI4 /IlFxa4eZnqfcYVKrR1SWTuIbJF0QhjWXhmFuro7KMzGsluAUnSNsSME9u3Nqe+5 kLcrQxURslpoFEm+5+1UDsFsiFab2Y0MNWTLRHTSY4UG8bVXYJZgLc41SzCFKuSU xpItZucDe40p7oa6DyuSR/zpQPSeP/jDP/1qZhasKNWqqwaxk0RTpOBFRT1AkwTi K4zKZhdyhh7j7ejRFHsIYlnFz5aWqCA= -----END CERTIFICATE-----Generated at Wed Apr 9 05:24:58 2025 by rpki-client