$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/216a9e88-1e1f-3ff4-a301-3fab09f9ab8b.roa File: 216a9e88-1e1f-3ff4-a301-3fab09f9ab8b.roa (raw, json) Hash identifier: b42e1TIiUfPgb7VC+j/9BQTyFeCbyYe4LtadQeAROQA= Subject key identifier: 69:AC:1C:3B:41:11:B9:9A:FA:25:02:D0:DC:95:9F:4B:56:00:B5:37 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849244E711F64049B3A3E837E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/216a9e88-1e1f-3ff4-a301-3fab09f9ab8b.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.5.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:71:1f:64:04:9b:3a:3e:83:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=8a0bfb39-7c70-4619-ac49-9caf9cad6119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f0:95:51:45:42:2b:64:2b:4f:0d:c6:b9:d6: 6e:2b:9c:9f:3b:45:7f:02:83:b9:d6:6f:82:0d:8d: fa:2a:15:a0:99:3c:5a:82:47:1a:1e:72:06:f3:1f: a3:30:51:37:22:7b:70:2f:0d:df:60:fd:71:e4:88: e9:35:80:10:e9:be:7c:e3:82:67:f8:25:18:0d:ca: 43:9d:8f:a8:d8:47:f1:ed:f3:29:f4:df:9b:67:32: 53:6c:e5:b7:83:d6:33:c7:89:a2:f5:70:1d:77:7d: d3:da:34:c9:f8:30:f9:dd:10:4c:c8:af:29:ac:2d: c4:0c:8b:cb:5d:3e:70:1a:4a:73:65:b0:91:5f:14: 27:20:7b:8d:b0:1b:c2:64:4f:fd:69:10:f5:4f:93: b4:0e:f1:6c:3d:92:9b:cc:a7:b5:2a:cc:00:74:fb: f7:cd:0b:02:2f:03:80:c2:00:df:73:eb:d2:0b:83: ea:c9:e2:13:9c:2e:d1:62:41:05:10:0a:e2:96:ac: 01:69:e0:bb:38:4f:7e:51:37:b5:d8:d4:0e:07:6d: 5b:f7:06:ee:ba:0a:c2:8c:1b:c5:71:82:23:84:30: 86:36:c5:9b:c1:40:13:7b:b8:0b:fb:ac:88:67:a2: 86:c1:29:73:8c:a3:77:d1:6b:08:bc:29:21:24:cd: 7f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AC:1C:3B:41:11:B9:9A:FA:25:02:D0:DC:95:9F:4B:56:00:B5:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/216a9e88-1e1f-3ff4-a301-3fab09f9ab8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.5.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:43:6a:9d:85:18:e3:09:25:81:07:60:cc:f4:bf:1a:f8:6a: ec:7c:1b:12:34:05:9a:f9:5b:13:44:77:cf:37:e0:eb:d8:c8: 38:85:22:c0:fd:a2:30:3a:7b:44:b8:28:c0:aa:bc:9e:d0:18: cc:11:56:0c:c7:0c:aa:4a:17:92:5d:c4:38:4c:95:8e:92:1c: a0:f3:ae:20:ea:d1:70:cb:7c:1c:23:35:57:48:df:be:32:cb: f7:be:06:fc:3b:3c:fe:e7:06:5d:5d:7f:ab:70:b9:4e:55:d8: 82:ce:e7:93:31:c4:cc:46:54:35:d5:c0:8f:9e:36:da:ab:5f: 53:17:5f:68:f8:a0:8f:e1:f2:70:b4:0f:a7:cc:a9:a6:13:af: f7:04:45:cd:65:86:4d:17:8a:1a:c3:17:53:05:4b:e1:00:f3: 08:f2:ff:ea:b8:ef:b6:1a:d4:f8:b8:61:8a:f3:9d:a0:39:2d: 1e:b9:e6:cf:e9:b2:4b:cf:ca:9b:c0:f9:d5:00:63:f1:b5:d9: ee:29:f5:da:c5:54:5e:f3:e7:ab:7b:e0:86:e8:28:4d:51:3d: 3f:5e:40:63:9b:4a:f8:2e:9a:28:03:1d:f6:d3:f4:95:ff:82: 1f:f8:f0:7b:cd:b6:3a:b9:ce:9a:5b:00:0b:25:46:ce:49:72: 21:22:0e:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTnEfZASbOj6DfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk OGEwYmZiMzktN2M3MC00NjE5LWFjNDktOWNhZjljYWQ2MTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPCVUUVCK2QrTw3GudZuK5yfO0V/AoO51m+C DY36KhWgmTxagkcaHnIG8x+jMFE3IntwLw3fYP1x5IjpNYAQ6b5844Jn+CUYDcpD nY+o2Efx7fMp9N+bZzJTbOW3g9Yzx4mi9XAdd33T2jTJ+DD53RBMyK8prC3EDIvL XT5wGkpzZbCRXxQnIHuNsBvCZE/9aRD1T5O0DvFsPZKbzKe1KswAdPv3zQsCLwOA wgDfc+vSC4PqyeITnC7RYkEFEArilqwBaeC7OE9+UTe12NQOB21b9wbuugrCjBvF cYIjhDCGNsWbwUATe7gL+6yIZ6KGwSlzjKN30WsIvCkhJM1/TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmsHDtBEbma+iUC0NyVn0tWALU3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjE2YTllODgtMWUxZi0z ZmY0LWEzMDEtM2ZhYjA5ZjlhYjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpDap2FGOMJJYEHYMz0vxr4aux8GxI0BZr5WxNEd8834OvYyDiFIsD9 ojA6e0S4KMCqvJ7QGMwRVgzHDKpKF5JdxDhMlY6SHKDzriDq0XDLfBwjNVdI374y y/e+Bvw7PP7nBl1df6twuU5V2ILO55MxxMxGVDXVwI+eNtqrX1MXX2j4oI/h8nC0 D6fMqaYTr/cERc1lhk0XihrDF1MFS+EA8wjy/+q477Ya1Pi4YYrznaA5LR655s/p skvPypvA+dUAY/G12e4p9drFVF7z56t74IboKE1RPT9eQGObSvgumigDHfbT9JX/ gh/48HvNtjq5zppbAAslRs5JciEiDsk= -----END CERTIFICATE-----Generated at Sat Apr 5 10:58:28 2025 by rpki-client