$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2959c63a-5bae-3efb-9e66-26291ee15d04.roa File: 2959c63a-5bae-3efb-9e66-26291ee15d04.roa (raw, json) Hash identifier: AoPb9BKECUT039pZaz9x7GGqAnFrD3xj0q/lOOPVlxY= Subject key identifier: 21:D5:D2:B2:C8:AA:34:67:40:EB:DA:6A:37:02:0B:47:6D:A3:3E:BB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABED27D118D138FA5611740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2959c63a-5bae-3efb-9e66-26291ee15d04.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.39.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:d2:7d:11:8d:13:8f:a5:61:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=ad0c0312-a937-4ab4-9fa9-a2e698feb4d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:98:b8:23:72:8e:47:00:9b:76:f9:22:15:80: b7:72:fa:95:26:16:fd:d7:fc:69:d4:64:7f:e8:69: 5f:18:99:0d:1a:b2:f0:22:b2:68:f0:8c:9b:f1:4a: 5a:92:1a:77:98:19:7c:b6:7f:51:d3:93:1d:a0:bd: 50:c5:cf:07:5a:a8:e4:db:74:51:ba:9c:7c:2a:f4: 6f:c5:8c:01:78:f4:c6:b3:c9:06:57:02:90:00:99: 06:05:75:68:3d:cd:02:95:29:60:f7:3b:aa:f3:fa: 65:f5:0e:64:b2:76:94:26:56:bf:d2:b4:ff:c8:68: fb:68:33:41:66:5f:9d:c4:2e:56:19:22:92:5c:42: 53:83:1c:01:75:b9:1a:42:4e:53:e7:15:6f:b8:50: c1:57:35:78:4e:e8:59:96:fc:5a:eb:7d:5f:96:1b: 3e:99:6c:6c:f5:7c:19:3f:04:d7:78:e6:6d:1b:ab: 81:f9:09:d8:c9:fc:eb:0f:74:29:dc:7d:87:51:51: 76:fb:a3:e1:38:9d:ea:3e:37:a9:4b:90:1e:b2:17: f5:ae:7f:b3:a2:b6:d6:5c:07:2c:81:a5:ba:b9:a6: b6:c3:a8:4e:f0:e6:9a:99:75:72:13:ef:bb:ca:bc: 03:90:13:68:57:b6:d1:10:ca:55:66:3c:d9:ea:18: 06:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D5:D2:B2:C8:AA:34:67:40:EB:DA:6A:37:02:0B:47:6D:A3:3E:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2959c63a-5bae-3efb-9e66-26291ee15d04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:4f:4a:8e:47:14:2f:2e:bc:5e:36:f8:5c:c2:80:0b:de:13: a2:33:9c:3b:e1:87:00:ae:fb:fe:9b:cf:c2:9e:9a:69:0a:a4: 4d:ff:f3:df:68:b8:aa:f5:d5:72:de:95:b2:24:d0:cf:1c:c2: 6c:f9:fd:66:52:d2:9b:42:a4:b5:1a:30:72:f1:57:1e:94:3e: 9c:ae:19:b3:38:dc:b5:5d:27:64:19:38:5a:27:0a:c3:41:ff: f7:97:1f:d8:88:15:63:63:6d:86:ec:7f:b2:52:c5:95:11:21: dc:f3:59:ac:36:d1:e7:4a:96:b7:23:31:da:f3:aa:88:e4:a8: 07:a4:40:6e:bc:00:54:82:78:f0:54:31:27:b6:84:94:9b:4a: 87:7b:f8:a8:e8:7d:66:a7:50:4b:25:9c:17:7e:c6:69:19:64: ab:0a:e0:e7:76:dd:36:ee:b7:b6:2c:fa:35:d0:56:d4:eb:06: 34:f9:70:15:2a:39:d6:08:da:94:6a:37:0e:ab:e5:e5:2f:f9: 0a:03:23:fb:d9:bf:d5:80:a8:46:d8:77:6b:71:2a:a7:36:a1: a9:cf:b1:7b:cc:59:f9:78:a8:34:15:7c:67:ee:2a:fd:dd:5b: 4f:82:43:3b:90:2c:fb:8e:83:b8:a4:7c:a5:6d:4b:a0:fa:cd: 30:cf:37:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavtJ9EY0Tj6VhF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk YWQwYzAzMTItYTkzNy00YWI0LTlmYTktYTJlNjk4ZmViNGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5i4I3KORwCbdvkiFYC3cvqVJhb91/xp1GR/ 6GlfGJkNGrLwIrJo8Iyb8Upakhp3mBl8tn9R05MdoL1Qxc8HWqjk23RRupx8KvRv xYwBePTGs8kGVwKQAJkGBXVoPc0ClSlg9zuq8/pl9Q5ksnaUJla/0rT/yGj7aDNB Zl+dxC5WGSKSXEJTgxwBdbkaQk5T5xVvuFDBVzV4TuhZlvxa631flhs+mWxs9XwZ PwTXeOZtG6uB+QnYyfzrD3Qp3H2HUVF2+6PhOJ3qPjepS5Aeshf1rn+zorbWXAcs gaW6uaa2w6hO8OaamXVyE++7yrwDkBNoV7bREMpVZjzZ6hgG4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHV0rLIqjRnQOvaajcCC0dtoz67MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjk1OWM2M2EtNWJhZS0z ZWZiLTllNjYtMjYyOTFlZTE1ZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFycgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBPSo5HFC8uvF42+FzCgAveE6IznDvhhwCu+/6bz8KemmkKpE3/899o uKr11XLelbIk0M8cwmz5/WZS0ptCpLUaMHLxVx6UPpyuGbM43LVdJ2QZOFonCsNB //eXH9iIFWNjbYbsf7JSxZURIdzzWaw20edKlrcjMdrzqojkqAekQG68AFSCePBU MSe2hJSbSod7+KjofWanUEslnBd+xmkZZKsK4Od23Tbut7Ys+jXQVtTrBjT5cBUq OdYI2pRqNw6r5eUv+QoDI/vZv9WAqEbYd2txKqc2oanPsXvMWfl4qDQVfGfuKv3d W0+CQzuQLPuOg7ikfKVtS6D6zTDPNzQ= -----END CERTIFICATE-----Generated at Sat Apr 5 10:58:23 2025 by rpki-client