$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29630211-a286-36ba-b410-6bef60ebc95c.roa File: 29630211-a286-36ba-b410-6bef60ebc95c.roa (raw, json) Hash identifier: kfYuluADXbg93v4K0gnpwrHJPzoeVeaQBPBhcZsmI1U= Subject key identifier: 3B:E1:8E:DB:80:93:E8:44:2E:8C:7D:25:7B:5C:65:89:11:3E:0E:35 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849403952D841C82C3938B540A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29630211-a286-36ba-b410-6bef60ebc95c.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 35994 IP address blocks: 23.59.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:52:d8:41:c8:2c:39:38:b5:40:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=ce8fa54c-542b-4606-ab35-707c9e9a95d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:43:88:ba:14:47:fe:6f:99:2a:a8:6d:8a:62: a7:59:5e:8d:ba:13:cc:3a:16:35:7c:15:ea:eb:b5: 84:28:63:cb:39:d9:d4:57:2c:6c:62:9c:29:8d:f9: d5:aa:13:4d:d4:00:fe:1a:bc:54:ea:b7:e7:29:13: a4:ec:42:16:46:08:f3:85:05:6b:f8:56:d4:9f:d5: ef:e4:cb:14:de:29:73:ac:55:3e:c5:f7:53:fa:5e: 4c:ef:49:0a:e6:40:e8:1e:83:aa:45:11:f2:4a:a6: 46:f7:ee:e9:91:95:d0:c3:53:c8:8d:a3:67:8b:bd: 00:86:b6:b1:cb:d4:ad:2a:31:31:a4:f3:d4:7c:bc: 00:be:1e:32:ff:a5:65:2e:92:5d:3e:aa:e3:9c:d2: 45:67:0d:24:9a:67:ff:0a:4a:d7:1f:76:48:6c:0a: 4a:77:81:15:9c:18:30:24:b6:e0:8c:c8:ba:45:a3: 24:cf:e8:ed:40:ec:e3:08:86:25:f4:0a:a9:e9:67: b3:ca:00:69:1c:73:3e:b2:46:c9:69:76:3d:ca:f3: b8:92:ba:c5:c0:4f:f8:16:45:ce:03:9f:44:a2:34: 79:69:79:d4:ac:89:1b:42:18:74:a9:86:f8:66:bc: ec:00:af:50:a6:40:3d:ed:9c:88:78:e6:19:76:52: 93:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E1:8E:DB:80:93:E8:44:2E:8C:7D:25:7B:5C:65:89:11:3E:0E:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29630211-a286-36ba-b410-6bef60ebc95c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f6:88:7c:42:9e:8c:0f:91:38:d5:58:7a:71:88:b4:23:11: 6d:54:b4:c9:86:a9:df:15:95:58:56:cd:9c:fb:aa:aa:58:74: 3f:c1:e7:7d:f8:55:a5:d2:0e:9c:e4:9e:c1:33:20:5b:cd:db: 0b:d6:88:ed:39:7e:2b:9c:38:96:15:e8:a7:b5:e2:d2:ca:26: 95:0d:c4:0c:51:8f:88:bc:2e:71:69:dd:e6:e5:a4:60:a6:b1: b7:f8:a4:23:14:88:3e:1c:7e:28:98:9e:39:42:1c:86:d1:3a: 9c:3d:5d:83:a9:3d:7e:a2:f1:13:43:68:47:4c:a6:a2:37:0f: e8:c4:dd:e3:9c:1b:28:7e:cc:21:de:24:6e:83:14:1f:07:2d: ee:23:6a:16:e5:38:b1:6a:68:bd:2b:e6:70:bd:22:95:6c:7c: 41:80:66:ee:c3:d4:ad:6d:5a:cb:51:c3:45:0b:6d:cd:71:69: 78:28:fc:fb:5e:67:4f:a7:22:99:b0:83:a8:1a:36:c3:14:56: f8:bd:68:2b:55:36:01:b9:a7:27:5d:03:3e:d3:55:0c:e2:1d: aa:97:0f:50:5b:2c:40:b5:91:bd:75:7e:d6:a6:91:cc:9e:23: 18:3c:d4:7c:7a:4a:fd:5e:be:98:05:42:b4:e2:cf:4d:a7:59: ca:fc:6a:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOVLYQcgsOTi1QKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk Y2U4ZmE1NGMtNTQyYi00NjA2LWFiMzUtNzA3YzllOWE5NWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0OIuhRH/m+ZKqhtimKnWV6NuhPMOhY1fBXq 67WEKGPLOdnUVyxsYpwpjfnVqhNN1AD+GrxU6rfnKROk7EIWRgjzhQVr+FbUn9Xv 5MsU3ilzrFU+xfdT+l5M70kK5kDoHoOqRRHySqZG9+7pkZXQw1PIjaNni70Ahrax y9StKjExpPPUfLwAvh4y/6VlLpJdPqrjnNJFZw0kmmf/CkrXH3ZIbApKd4EVnBgw JLbgjMi6RaMkz+jtQOzjCIYl9Aqp6WezygBpHHM+skbJaXY9yvO4krrFwE/4FkXO A59EojR5aXnUrIkbQhh0qYb4ZrzsAK9QpkA97ZyIeOYZdlKTnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvhjtuAk+hELox9JXtcZYkRPg41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjk2MzAyMTEtYTI4Ni0z NmJhLWI0MTAtNmJlZjYwZWJjOTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzvyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABz2iHxCnowPkTjVWHpxiLQjEW1UtMmGqd8VlVhWzZz7qqpYdD/B5334 VaXSDpzknsEzIFvN2wvWiO05fiucOJYV6Ke14tLKJpUNxAxRj4i8LnFp3eblpGCm sbf4pCMUiD4cfiiYnjlCHIbROpw9XYOpPX6i8RNDaEdMpqI3D+jE3eOcGyh+zCHe JG6DFB8HLe4jahblOLFqaL0r5nC9IpVsfEGAZu7D1K1tWstRw0ULbc1xaXgo/Pte Z0+nIpmwg6gaNsMUVvi9aCtVNgG5pyddAz7TVQziHaqXD1BbLEC1kb11ftamkcye Ixg81Hx6Sv1evpgFQrTiz02nWcr8asg= -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:31 2025 by rpki-client