$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/298a200a-7e8a-38c4-b7b8-815a52c8e069.roa File: 298a200a-7e8a-38c4-b7b8-815a52c8e069.roa (raw, json) Hash identifier: CdvFjdrdvLoMIwh4KP46yr7qDfNFKlDLf4TiybDntQ0= Subject key identifier: 88:E8:7E:73:31:DB:6C:1A:DF:2E:A7:B8:33:89:E3:6F:57:CD:8C:E6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858487A06C90ACB62C97E6A36EDC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/298a200a-7e8a-38c4-b7b8-815a52c8e069.roa Signing time: Wed 08 Jan 2025 13:09:11 +0000 ROA not before: Wed 08 Jan 2025 13:09:11 +0000 ROA not after: Tue 08 Apr 2025 12:09:11 +0000 asID: 20940 IP address blocks: 23.49.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:06:c9:0a:cb:62:c9:7e:6a:36:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 8 13:09:11 2025 GMT Not After : Apr 8 12:09:11 2025 GMT Subject: CN=07d84c10-8eb4-46c1-b7f0-615a5fdba134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a9:3c:19:c8:7e:a6:e1:da:78:e2:ed:1f:bb: 61:69:17:96:14:bd:b1:36:3e:91:0f:76:59:26:32: 04:4b:bd:3a:f3:35:8e:26:f7:00:29:91:37:44:91: d0:be:62:19:9d:52:3a:50:4f:4b:3f:c6:23:c6:4c: 6f:cb:7c:43:4c:f5:51:ca:25:31:c8:80:c3:83:3b: 05:ff:f5:62:66:a8:91:ad:7c:a9:20:8f:39:dc:3f: f2:5d:dc:f2:e5:f9:f5:aa:39:58:5f:66:f1:e7:03: 8b:17:35:b6:81:ad:4a:76:42:73:34:59:09:bc:31: a6:80:49:64:26:25:81:64:74:3c:57:94:93:87:d6: d2:74:fe:aa:58:8e:db:c3:fa:d6:a7:24:8c:11:8d: f3:59:45:74:5f:12:c0:f9:81:5c:2b:5e:0a:91:bf: 4f:0a:c0:c4:7c:bb:cf:07:de:7e:a2:6e:01:ad:89: 3b:d2:ef:b3:5d:27:5a:33:61:89:70:bd:bf:71:05: fb:9b:24:ad:4e:b3:ec:eb:b9:82:d8:cc:c4:79:ea: f6:31:59:ce:f6:be:d7:7f:70:78:34:2c:a1:89:b3: 1a:41:09:78:69:d7:52:d4:9b:0c:65:2f:f3:ce:00: 6d:29:61:f3:cd:a0:fd:01:be:a5:b6:cb:b5:39:e1: 63:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E8:7E:73:31:DB:6C:1A:DF:2E:A7:B8:33:89:E3:6F:57:CD:8C:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/298a200a-7e8a-38c4-b7b8-815a52c8e069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.49.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:1b:a0:4d:8c:03:7b:f3:29:5f:83:1b:62:2e:25:7b:be:f9: ce:97:fc:1c:9a:40:06:74:d2:f0:e7:9b:de:42:4a:74:b9:bd: 06:2c:47:b7:1c:90:bf:5f:47:51:f2:76:47:ff:cb:49:f4:d9: da:10:ad:53:1a:05:ef:b7:9b:65:2b:d1:a4:8c:eb:21:4f:d8: ee:d6:c9:b1:17:a3:e7:b3:2d:bd:ad:2c:12:f4:4f:02:91:99: a9:99:31:95:cf:9a:2d:73:2e:9b:25:e5:b4:af:1b:c1:0c:c8: 8e:e4:3e:8d:44:e6:e6:cb:01:09:93:37:6f:e1:80:ff:37:c9: 07:c7:96:a9:aa:46:a6:c9:f1:e7:21:00:52:ff:14:7e:3d:4f: 77:85:3b:42:d4:ff:35:5b:34:6e:27:3c:41:40:8a:3d:a8:2d: 4c:7e:c3:4a:66:c0:12:9d:9a:55:1b:07:3e:1a:98:71:76:bc: ed:51:67:ea:27:b4:5d:0c:05:57:63:f5:90:5e:2c:bd:f1:8b: 47:66:77:2f:d3:4a:c6:9a:ed:7f:c6:65:5d:36:b2:d3:f3:a7: 39:13:e0:5a:c5:38:16:af:85:32:a1:1c:bc:00:d6:e4:0b:22: b8:42:02:c2:06:45:4d:31:ba:ef:38:ab:73:d0:e0:23:1a:60: d9:7f:31:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6BskKy2LJfmo27cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEwODEzMDkxMVoXDTI1MDQwODEyMDkxMVowLzEtMCsGA1UEAxMk MDdkODRjMTAtOGViNC00NmMxLWI3ZjAtNjE1YTVmZGJhMTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKk8Gch+puHaeOLtH7thaReWFL2xNj6RD3ZZ JjIES7068zWOJvcAKZE3RJHQvmIZnVI6UE9LP8Yjxkxvy3xDTPVRyiUxyIDDgzsF //ViZqiRrXypII853D/yXdzy5fn1qjlYX2bx5wOLFzW2ga1KdkJzNFkJvDGmgElk JiWBZHQ8V5STh9bSdP6qWI7bw/rWpySMEY3zWUV0XxLA+YFcK14Kkb9PCsDEfLvP B95+om4BrYk70u+zXSdaM2GJcL2/cQX7myStTrPs67mC2MzEeer2MVnO9r7Xf3B4 NCyhibMaQQl4addS1JsMZS/zzgBtKWHzzaD9Ab6ltsu1OeFjQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjofnMx22wa3y6nuDOJ429XzYzmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjk4YTIwMGEtN2U4YS0z OGM0LWI3YjgtODE1YTUyYzhlMDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzE9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwboE2MA3vzKV+DG2IuJXu++c6X/ByaQAZ00vDnm95CSnS5vQYsR7cc kL9fR1Hydkf/y0n02doQrVMaBe+3m2Ur0aSM6yFP2O7WybEXo+ezLb2tLBL0TwKR mamZMZXPmi1zLpsl5bSvG8EMyI7kPo1E5ubLAQmTN2/hgP83yQfHlqmqRqbJ8ech AFL/FH49T3eFO0LU/zVbNG4nPEFAij2oLUx+w0pmwBKdmlUbBz4amHF2vO1RZ+on tF0MBVdj9ZBeLL3xi0dmdy/TSsaa7X/GZV02stPzpzkT4FrFOBavhTKhHLwA1uQL IrhCAsIGRU0xuu84q3PQ4CMaYNl/Mf8= -----END CERTIFICATE-----Generated at Fri Mar 14 15:03:39 2025 by rpki-client