$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2daef208-3e43-3dd1-ae79-e14ddd83d492.roa File: 2daef208-3e43-3dd1-ae79-e14ddd83d492.roa (raw, json) Hash identifier: 5s0Qt18PYcx2/A+CWkCqsvJtf1i2FK9oUXfCQT1Mf8A= Subject key identifier: 8A:0B:B8:31:41:F7:35:23:12:83:A0:2A:C9:94:92:83:57:5C:81:F9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABEEAAFACC158A9844AEB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2daef208-3e43-3dd1-ae79-e14ddd83d492.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.41.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:ea:af:ac:c1:58:a9:84:4a:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=696453aa-978b-4b01-aab3-e583f7eda485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:42:59:50:0b:7c:84:cb:42:e1:bb:53:fa:76: 20:ea:28:c2:f3:d5:2b:84:d2:92:91:c1:1f:c5:1c: 98:e0:33:50:d5:b2:85:76:cb:97:38:19:54:a2:58: 06:9b:55:22:12:e9:ad:d0:6d:77:49:52:9c:6d:d4: d7:69:f3:fb:0f:4f:cc:39:00:b5:e6:65:ef:51:43: 75:45:38:47:51:d0:aa:ec:1e:6f:dd:a5:2f:f2:9e: 6e:ba:ed:55:b8:5b:5c:b9:3b:7a:8f:a6:ac:66:b1: b3:6f:08:8b:4b:cc:2e:93:eb:fe:7f:9d:54:50:c1: c8:3f:09:a5:d4:b4:43:b2:ae:7c:60:d4:a2:dc:57: 6e:fb:30:9b:07:7b:8b:76:a5:16:8e:a4:cf:d9:ba: bf:0d:7b:e9:c3:82:3f:82:55:8a:d7:28:ac:88:76: 46:b3:f8:68:81:14:e4:84:f2:02:65:aa:ae:3f:82: 8b:09:56:05:4f:30:da:f1:0e:5e:c8:b3:d4:d0:14: 8a:a2:4d:bc:9a:39:c1:bd:c4:69:52:59:44:eb:70: 97:7a:21:5c:8c:39:8e:d5:dc:d2:b8:b7:b8:50:dc: 39:ef:19:cf:bd:e2:97:d4:d5:89:27:e3:8b:9d:b4: bd:6c:b5:ce:e1:73:52:79:d8:7d:82:8f:d5:58:cf: 6e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0B:B8:31:41:F7:35:23:12:83:A0:2A:C9:94:92:83:57:5C:81:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2daef208-3e43-3dd1-ae79-e14ddd83d492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a3:55:8e:06:c7:39:e7:ef:99:7d:4f:b7:e7:f8:f1:d1:d4: e4:f0:9e:82:37:4b:e5:c3:c3:b1:7a:87:e4:d7:67:93:ef:53: 31:b6:ed:2a:5f:d4:38:7e:d9:3d:fd:a0:b6:20:dd:df:3f:eb: 0c:55:83:13:25:ac:60:26:3d:83:1d:75:bd:32:92:03:0d:8b: 7d:13:c4:40:6a:3b:02:52:f5:8b:4a:d0:10:74:b3:c8:76:3b: ee:bc:7e:b7:2d:72:11:93:38:b0:88:10:bc:d2:16:aa:98:6b: ba:9e:e2:0b:83:15:93:21:b9:71:9c:48:56:32:0d:d4:38:6d: 05:54:99:44:ba:29:64:df:34:5a:00:20:79:6b:be:b4:b0:86: 8f:fb:fa:03:d3:59:3c:7e:06:c1:97:e0:07:63:05:60:89:45: c0:81:0c:62:55:cd:45:df:f9:f6:1d:bd:e5:0c:79:9e:12:f0: 91:41:ab:5f:5d:71:b8:31:9c:a0:1f:ff:2d:e1:46:44:60:48: ef:1f:54:1a:b9:f4:8b:47:c9:28:ab:ae:12:83:f5:ba:f2:3a: da:30:47:f7:c8:45:60:91:3c:46:bf:a4:d5:10:b0:d6:e0:7f: d6:43:6b:11:e0:98:77:41:e7:ce:6f:14:39:e0:d5:59:76:2a: da:6b:65:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuqvrMFYqYRK6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk Njk2NDUzYWEtOTc4Yi00YjAxLWFhYjMtZTU4M2Y3ZWRhNDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkJZUAt8hMtC4btT+nYg6ijC89UrhNKSkcEf xRyY4DNQ1bKFdsuXOBlUolgGm1UiEumt0G13SVKcbdTXafP7D0/MOQC15mXvUUN1 RThHUdCq7B5v3aUv8p5uuu1VuFtcuTt6j6asZrGzbwiLS8wuk+v+f51UUMHIPwml 1LRDsq58YNSi3Fdu+zCbB3uLdqUWjqTP2bq/DXvpw4I/glWK1yisiHZGs/hogRTk hPICZaquP4KLCVYFTzDa8Q5eyLPU0BSKok28mjnBvcRpUllE63CXeiFcjDmO1dzS uLe4UNw57xnPveKX1NWJJ+OLnbS9bLXO4XNSedh9go/VWM9uEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoLuDFB9zUjEoOgKsmUkoNXXIH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmRhZWYyMDgtM2U0My0z ZGQxLWFlNzktZTE0ZGRkODNkNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFymyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCjVY4Gxznn75l9T7fn+PHR1OTwnoI3S+XDw7F6h+TXZ5PvUzG27Spf 1Dh+2T39oLYg3d8/6wxVgxMlrGAmPYMddb0ykgMNi30TxEBqOwJS9YtK0BB0s8h2 O+68frctchGTOLCIELzSFqqYa7qe4guDFZMhuXGcSFYyDdQ4bQVUmUS6KWTfNFoA IHlrvrSwho/7+gPTWTx+BsGX4AdjBWCJRcCBDGJVzUXf+fYdveUMeZ4S8JFBq19d cbgxnKAf/y3hRkRgSO8fVBq59ItHySirrhKD9bryOtowR/fIRWCRPEa/pNUQsNbg f9ZDaxHgmHdB585vFDng1Vl2KtprZeM= -----END CERTIFICATE-----Generated at Sat Apr 5 11:00:14 2025 by rpki-client