$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/307630b3-3ef3-35f5-8124-8fb8b7b346ac.roa File: 307630b3-3ef3-35f5-8124-8fb8b7b346ac.roa (raw, json) Hash identifier: 8xTS8kQXuf+avcrVNjFnWuQBrgfaBxDE40l+RT56CaI= Subject key identifier: 91:00:77:AC:6F:57:BB:40:3E:08:DD:CA:3B:E9:AA:D1:22:B9:84:A5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABEE9BC3EE74B9F4D94FCC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/307630b3-3ef3-35f5-8124-8fb8b7b346ac.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.42.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e9:bc:3e:e7:4b:9f:4d:94:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=ba1c3d1c-88de-416a-9979-bc2db8b9e7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:61:36:83:b8:ca:f3:e9:71:be:7a:35:30:6d: 02:47:cf:49:fc:35:83:81:2d:10:fd:6d:35:83:e3: 99:6a:ea:2f:71:2e:0c:43:09:5c:87:c8:b4:a0:ac: 1c:61:63:9a:ab:01:b8:f0:23:bf:0e:ea:e9:96:b6: 83:46:72:e5:f9:3e:8d:6d:1c:cc:c0:ed:af:d2:2e: ba:1a:20:c5:dc:12:d4:34:0b:65:28:af:9f:55:67: 50:5d:b4:66:1f:81:ba:64:0b:c4:26:98:b6:25:e3: df:17:7d:5e:c1:30:36:8f:96:48:27:47:fa:67:3b: d6:58:c2:1e:5b:a3:6f:bb:f9:8d:34:2e:01:f7:86: 34:b0:26:08:b4:7e:5d:e7:d1:19:71:e9:a6:22:29: e7:f7:7d:d0:0f:1a:b0:9f:28:03:bf:9a:08:36:cb: f2:d4:c4:4f:1d:c5:d1:16:eb:6c:45:f7:48:1b:74: b4:50:2a:c5:72:78:51:a5:32:1f:5f:4d:ea:67:22: c4:33:63:f7:0b:15:99:e4:1d:75:ba:6c:1a:79:2d: 6e:04:a4:d1:2e:1d:37:8a:80:bb:cd:ff:76:69:c0: 2c:8c:7b:16:f8:98:cf:57:99:0f:e6:b8:ab:75:f9: c2:58:5b:c7:b7:9e:4b:e9:7f:10:4b:ba:e6:df:bb: 1c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:00:77:AC:6F:57:BB:40:3E:08:DD:CA:3B:E9:AA:D1:22:B9:84:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/307630b3-3ef3-35f5-8124-8fb8b7b346ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.42.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:33:e3:b5:20:35:1c:57:0e:6e:b6:39:0f:22:0c:4c:14:7e: de:b5:bd:47:b7:eb:fc:4c:e0:88:46:0b:d6:a8:17:9a:d2:0a: 45:66:89:a9:ed:5f:a2:65:ab:89:cd:fe:43:73:7e:6f:ad:57: 0f:05:a2:58:a4:7e:9a:5b:27:22:46:30:47:5e:a4:b7:ba:03: be:4c:d5:47:3e:d6:90:f0:08:6d:dd:1a:f8:ce:6f:a3:86:23: e5:4d:c3:56:96:78:c3:46:67:78:42:df:1c:04:d1:1f:dc:bb: 83:88:ca:2d:20:95:b8:77:9b:a5:8a:be:61:75:db:dd:d8:07: f2:b6:8f:6e:eb:1d:ed:db:12:14:18:62:61:ff:5c:d9:28:25: 1e:35:40:7b:ae:da:9f:9e:06:9b:83:a0:78:46:db:45:f0:c3: 0c:37:44:75:41:b2:a2:a4:94:67:81:84:10:58:2e:b7:61:23: fc:65:e9:94:ae:61:95:cd:2c:e0:08:cc:38:40:5c:b8:4e:4f: 44:9e:08:18:cd:a1:fd:97:9e:7a:39:37:2c:3a:a0:2d:e9:11: c4:9e:1f:ae:60:82:82:fd:80:f3:2c:28:37:a1:62:fc:39:ef: 59:f5:cf:9c:2b:47:2b:8b:4e:f6:fa:e1:d1:01:d0:34:83:d8: bc:65:75:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavum8PudLn02U/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk YmExYzNkMWMtODhkZS00MTZhLTk5NzktYmMyZGI4YjllN2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmE2g7jK8+lxvno1MG0CR89J/DWDgS0Q/W01 g+OZauovcS4MQwlch8i0oKwcYWOaqwG48CO/DurplraDRnLl+T6NbRzMwO2v0i66 GiDF3BLUNAtlKK+fVWdQXbRmH4G6ZAvEJpi2JePfF31ewTA2j5ZIJ0f6ZzvWWMIe W6Nvu/mNNC4B94Y0sCYItH5d59EZcemmIinn933QDxqwnygDv5oINsvy1MRPHcXR FutsRfdIG3S0UCrFcnhRpTIfX03qZyLEM2P3CxWZ5B11umwaeS1uBKTRLh03ioC7 zf92acAsjHsW+JjPV5kP5rirdfnCWFvHt55L6X8QS7rm37scqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEAd6xvV7tAPgjdyjvpqtEiuYSlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzA3NjMwYjMtM2VmMy0z NWY1LTgxMjQtOGZiOGI3YjM0NmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUz47UgNRxXDm62OQ8iDEwUft61vUe36/xM4IhGC9aoF5rSCkVmiant X6Jlq4nN/kNzfm+tVw8FolikfppbJyJGMEdepLe6A75M1Uc+1pDwCG3dGvjOb6OG I+VNw1aWeMNGZ3hC3xwE0R/cu4OIyi0glbh3m6WKvmF1293YB/K2j27rHe3bEhQY YmH/XNkoJR41QHuu2p+eBpuDoHhG20Xwwww3RHVBsqKklGeBhBBYLrdhI/xl6ZSu YZXNLOAIzDhAXLhOT0SeCBjNof2Xnno5Nyw6oC3pEcSeH65ggoL9gPMsKDehYvw5 71n1z5wrRyuLTvb64dEB0DSD2LxldS4= -----END CERTIFICATE-----Generated at Sat Apr 5 11:07:28 2025 by rpki-client