$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3882b44a-ca1e-3221-b251-988c637fe6f9.roa File: 3882b44a-ca1e-3221-b251-988c637fe6f9.roa (raw, json) Hash identifier: xWaFveiebagGAA+iZwdnszP5J+TTpguU3J58lq4m1bc= Subject key identifier: C2:BA:D5:84:8F:22:B0:5E:40:14:C2:72:F6:18:78:5C:E9:70:9F:13 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584908712640F25903DE95664680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3882b44a-ca1e-3221-b251-988c637fe6f9.roa Signing time: Fri 28 Feb 2025 13:28:16 +0000 ROA not before: Fri 28 Feb 2025 13:28:16 +0000 ROA not after: Thu 29 May 2025 12:28:16 +0000 asID: 16625 IP address blocks: 23.49.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:71:26:40:f2:59:03:de:95:66:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 28 13:28:16 2025 GMT Not After : May 29 12:28:16 2025 GMT Subject: CN=1687be14-3dcd-4c96-b85d-6eaccbc7c470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7f:7e:5f:2c:aa:7b:a4:21:90:9e:ba:11:b3: 64:bf:23:66:fe:f4:fa:10:bc:12:b6:01:aa:35:e4: f7:97:35:1d:71:4b:86:44:e5:ff:e7:07:ed:e1:00: 16:9e:c9:d2:12:f2:e3:be:3c:76:fe:20:4d:d3:83: 70:fb:7c:ab:4d:e8:ae:83:62:a4:e8:ba:b7:26:9c: f5:79:72:ae:c5:57:76:f4:f5:49:3e:ba:f1:c5:ab: 3f:1f:a4:68:57:7a:49:77:74:c4:28:50:1c:4a:98: 21:19:53:1c:e1:7b:f6:df:5f:23:b6:39:f6:80:fa: c1:b3:e6:ec:43:8c:ba:d3:f1:f6:de:be:3d:08:a0: 6f:9a:7b:6f:6c:8a:4c:91:d6:2b:90:86:ab:52:54: d8:67:ec:52:8b:bd:00:35:58:33:52:b8:3f:f1:1b: e6:02:cd:42:22:74:db:03:2c:de:93:c5:00:c4:28: ef:34:48:ef:ca:df:19:c7:13:87:23:a6:57:e3:ea: f6:ec:2f:8d:15:99:c4:59:da:c0:1e:bd:ee:aa:c5: 9b:73:cc:e5:3b:04:7e:9a:9c:65:8d:85:4e:b5:e5: 54:7d:d3:bc:c2:2a:03:67:90:7b:8b:8d:b0:9e:47: 40:a2:3e:db:c3:55:71:89:d0:74:96:91:0f:d3:df: 02:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BA:D5:84:8F:22:B0:5E:40:14:C2:72:F6:18:78:5C:E9:70:9F:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3882b44a-ca1e-3221-b251-988c637fe6f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.49.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:43:50:9d:60:25:f5:cf:ef:a7:b7:19:96:61:77:ee:c7:fc: a8:e2:d9:ca:81:e6:17:87:d1:b2:6f:29:7e:56:6f:dd:b3:da: 56:8f:40:98:82:f2:3c:b0:28:ad:c0:90:c1:a3:4f:af:85:7e: 6a:e4:15:fe:51:ae:61:3c:0c:d5:aa:1f:34:a5:8c:98:97:51: ea:59:3b:83:5a:f8:9d:83:3f:a8:da:6f:e7:96:35:57:f8:80: 44:ae:f2:c3:c2:b0:c8:22:74:95:3e:74:29:1f:0b:31:5c:f5: bc:7f:53:87:11:79:f5:a1:89:41:6e:31:62:ca:45:cf:d7:c1: 0a:03:24:e2:54:0b:dc:e7:a6:43:a9:d4:6e:17:bd:59:82:05: 67:b7:14:ef:4c:60:40:c0:71:c1:6f:f1:11:46:3d:73:62:e0: b5:07:06:dc:a4:c1:19:83:e9:41:5b:52:1d:2d:4d:4c:38:8f: 15:09:f8:0d:40:2a:25:32:0c:7a:68:b6:27:cd:b7:0f:b6:3a: 88:b5:69:9d:6b:bf:bd:72:e7:0f:b2:ef:01:93:36:2b:e3:0b: c8:30:16:62:86:13:4b:b1:ce:12:81:b8:85:d9:b3:30:10:2c: d4:5c:a3:4e:4a:6b:b7:e7:e7:51:63:a1:56:53:42:57:cf:e6: 4c:c0:3b:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIcSZA8lkD3pVmRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyODEzMjgxNloXDTI1MDUyOTEyMjgxNlowLzEtMCsGA1UEAxMk MTY4N2JlMTQtM2RjZC00Yzk2LWI4NWQtNmVhY2NiYzdjNDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn39+Xyyqe6QhkJ66EbNkvyNm/vT6ELwStgGq NeT3lzUdcUuGROX/5wft4QAWnsnSEvLjvjx2/iBN04Nw+3yrTeiug2Kk6Lq3Jpz1 eXKuxVd29PVJPrrxxas/H6RoV3pJd3TEKFAcSpghGVMc4Xv2318jtjn2gPrBs+bs Q4y60/H23r49CKBvmntvbIpMkdYrkIarUlTYZ+xSi70ANVgzUrg/8RvmAs1CInTb Ayzek8UAxCjvNEjvyt8ZxxOHI6ZX4+r27C+NFZnEWdrAHr3uqsWbc8zlOwR+mpxl jYVOteVUfdO8wioDZ5B7i42wnkdAoj7bw1VxidB0lpEP098COwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMK61YSPIrBeQBTCcvYYeFzpcJ8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzg4MmI0NGEtY2ExZS0z MjIxLWIyNTEtOTg4YzYzN2ZlNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtDUJ1gJfXP76e3GZZhd+7H/Kji2cqB5heH0bJvKX5Wb92z2laPQJiC 8jywKK3AkMGjT6+FfmrkFf5RrmE8DNWqHzSljJiXUepZO4Na+J2DP6jab+eWNVf4 gESu8sPCsMgidJU+dCkfCzFc9bx/U4cRefWhiUFuMWLKRc/XwQoDJOJUC9znpkOp 1G4XvVmCBWe3FO9MYEDAccFv8RFGPXNi4LUHBtykwRmD6UFbUh0tTUw4jxUJ+A1A KiUyDHpotifNtw+2Ooi1aZ1rv71y5w+y7wGTNivjC8gwFmKGE0uxzhKBuIXZszAQ LNRco05Ka7fn51FjoVZTQlfP5kzAO8Y= -----END CERTIFICATE-----Generated at Fri Mar 14 15:03:29 2025 by rpki-client