$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2dfb0fa5-e063-35db-84f3-e8017a6b0971.roa File: 2dfb0fa5-e063-35db-84f3-e8017a6b0971.roa (raw, json) Hash identifier: 2jTGl1St7Ak/kyA2xjUOiO6mj4G33AxpAE3n61fWr2A= Subject key identifier: 6E:A8:35:B6:2C:A0:4C:16:AA:E4:84:56:C6:08:9E:F8:3C:C5:BA:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494B642D2FA5C32E092F89FC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2dfb0fa5-e063-35db-84f3-e8017a6b0971.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 16625 IP address blocks: 23.63.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:2d:2f:a5:c3:2e:09:2f:89:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=6e35b7ec-4080-4db4-9296-c167585d494b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8c:8f:3a:82:b1:a9:fb:da:a9:20:43:5b:f0: 98:92:6b:89:b4:1a:68:a1:60:47:ad:05:a3:30:ec: 34:69:54:16:ff:74:94:14:ce:8e:ed:5f:80:77:dc: ea:38:80:33:a6:af:22:11:eb:85:f9:41:af:bc:14: b5:9b:eb:5d:71:39:b5:6f:cb:f1:db:bf:9f:0e:9c: 23:0b:13:25:3d:df:9a:5c:0b:30:9d:d1:a7:32:c6: 39:e2:b9:56:df:24:48:4f:8d:80:4e:f5:e8:36:13: 1f:a9:94:c5:30:1a:32:cb:d6:57:94:7d:5d:38:5b: b2:c6:6a:cc:67:e2:e1:dd:f0:1a:84:75:0e:3b:9e: 46:a1:94:72:02:1e:d6:e1:85:6f:90:15:cb:f7:03: 9b:3f:08:e8:8e:f0:a9:9e:1e:89:d7:23:17:0e:f3: e0:01:35:af:61:9c:2d:d1:2f:b4:9c:44:ca:8b:34: da:05:3b:0a:11:8b:c3:c0:0a:2a:c4:8d:85:c5:ca: 4b:d6:51:b4:36:89:ed:de:9d:90:a7:3c:d5:cc:c2: 9a:6d:7e:df:00:d7:8f:0a:43:05:c3:6b:d9:d1:44: f1:30:2d:af:87:61:fb:bc:6e:46:46:36:a0:1f:a3: 11:33:d4:73:f6:1e:c0:0a:b1:30:ef:23:c6:da:5e: 94:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A8:35:B6:2C:A0:4C:16:AA:E4:84:56:C6:08:9E:F8:3C:C5:BA:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2dfb0fa5-e063-35db-84f3-e8017a6b0971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.63.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:4e:01:54:99:b2:9f:91:ba:b2:1b:df:5f:d5:96:35:34:62: ec:a9:9f:aa:85:ac:ca:93:ac:19:1e:cd:25:35:5a:97:5d:43: ad:22:83:27:31:0b:df:71:fc:43:b1:b8:25:59:83:33:30:5e: 13:52:9b:6f:98:1f:a2:79:f6:b2:dc:71:7e:3a:80:c2:6f:0f: e9:cc:79:97:3b:91:4d:e8:df:e2:c9:59:ab:9a:e4:b0:ee:7c: e5:d6:16:f4:ca:5a:7c:d7:c7:6a:26:6e:3f:57:14:0f:a4:b3: 40:51:c6:f2:06:8d:e4:87:2e:2e:ed:65:86:b7:18:70:f2:43: b2:55:e3:d0:4a:94:f3:f1:9a:c5:74:58:cd:d0:ce:47:33:66: 88:2a:fe:36:e0:2d:e3:93:ee:4d:89:6d:18:b7:33:17:d0:82: 7c:e8:50:38:f1:e4:cc:70:49:62:de:f6:05:3e:a1:1b:e7:de: e8:ec:a9:a2:44:9a:00:3d:a6:e2:69:e1:a3:27:71:5c:4b:c7: 51:d6:7e:b9:89:84:7c:42:99:cd:51:e3:bb:f2:fc:d8:f9:23: 8a:32:15:c7:17:6b:72:29:c6:7c:04:90:be:bc:31:42:4f:0a: 6e:ef:00:44:34:fd:98:d5:cb:ed:43:d2:37:66:2b:2e:e1:50: 93:75:5c:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZC0vpcMuCS+J/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk NmUzNWI3ZWMtNDA4MC00ZGI0LTkyOTYtYzE2NzU4NWQ0OTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIyPOoKxqfvaqSBDW/CYkmuJtBpooWBHrQWj MOw0aVQW/3SUFM6O7V+Ad9zqOIAzpq8iEeuF+UGvvBS1m+tdcTm1b8vx27+fDpwj CxMlPd+aXAswndGnMsY54rlW3yRIT42ATvXoNhMfqZTFMBoyy9ZXlH1dOFuyxmrM Z+Lh3fAahHUOO55GoZRyAh7W4YVvkBXL9wObPwjojvCpnh6J1yMXDvPgATWvYZwt 0S+0nETKizTaBTsKEYvDwAoqxI2FxcpL1lG0Nont3p2QpzzVzMKabX7fANePCkMF w2vZ0UTxMC2vh2H7vG5GRjagH6MRM9Rz9h7ACrEw7yPG2l6UwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6oNbYsoEwWquSEVsYInvg8xbr7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmRmYjBmYTUtZTA2My0z NWRiLTg0ZjMtZTgwMTdhNmIwOTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFz8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9OAVSZsp+RurIb31/VljU0Yuypn6qFrMqTrBkezSU1WpddQ60igycx C99x/EOxuCVZgzMwXhNSm2+YH6J59rLccX46gMJvD+nMeZc7kU3o3+LJWaua5LDu fOXWFvTKWnzXx2ombj9XFA+ks0BRxvIGjeSHLi7tZYa3GHDyQ7JV49BKlPPxmsV0 WM3QzkczZogq/jbgLeOT7k2JbRi3MxfQgnzoUDjx5MxwSWLe9gU+oRvn3ujsqaJE mgA9puJp4aMncVxLx1HWfrmJhHxCmc1R47vy/Nj5I4oyFccXa3IpxnwEkL68MUJP Cm7vAEQ0/ZjVy+1D0jdmKy7hUJN1XCM= -----END CERTIFICATE-----Generated at Sat Apr 5 10:53:49 2025 by rpki-client