$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3de0a6b5-6c71-3fc1-87e5-d8888b1f777b.roa File: 3de0a6b5-6c71-3fc1-87e5-d8888b1f777b.roa (raw, json) Hash identifier: ZxzzEr5uignIQOxHzvv/pbTS197z1Ko6kn42WmaNquI= Subject key identifier: C6:31:80:AB:32:92:FE:E1:AE:11:AF:CE:9F:9C:49:82:F0:5A:4D:F0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584905B6AE2FECA4756F18554C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3de0a6b5-6c71-3fc1-87e5-d8888b1f777b.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 24319 IP address blocks: 23.6.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:ae:2f:ec:a4:75:6f:18:55:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=e93ae58b-2fae-4785-8fd3-6e38216f4f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:35:20:6b:60:79:2a:91:b4:f3:5f:57:04:1b: 3f:cd:25:aa:77:45:da:e5:78:b0:c2:0a:b3:98:4a: e2:77:99:9a:37:fe:e3:d4:7e:d0:0a:d7:e0:45:e9: d1:29:76:56:d4:d4:00:75:0e:dd:ef:47:6f:85:a8: a9:92:4c:5c:e4:1f:fb:e7:01:8e:fe:94:4e:c4:53: 5e:18:cf:6a:2b:84:92:ba:95:35:5c:ba:2e:f3:a5: 5f:c4:9c:3f:4d:7c:cf:e0:71:8a:5c:09:e4:76:7f: 2e:b0:17:e0:b4:8a:d4:09:0f:71:db:99:d0:53:fb: e4:42:44:89:27:b5:d1:c5:d9:38:46:70:81:96:1a: 6f:aa:09:10:b3:ef:47:dc:c3:30:a4:92:5a:3b:38: 7c:70:48:5c:2b:2d:dc:da:fe:40:b3:07:86:43:70: ce:fa:ec:53:7e:67:f7:5d:d5:83:a9:3e:b9:a8:64: 97:4a:ae:07:ef:b0:4f:19:a4:e8:b3:f6:ca:6a:a7: b7:02:67:84:ac:5c:38:03:8f:6f:96:2d:9b:70:e0: 68:7a:41:9f:a0:7c:1e:0c:91:36:44:86:68:09:90: 45:e4:5a:57:09:2c:ea:0e:2f:20:6d:42:74:c0:32: 3a:3b:bd:e0:24:02:b2:ad:d3:bd:ae:a0:ec:d1:c0: 72:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:31:80:AB:32:92:FE:E1:AE:11:AF:CE:9F:9C:49:82:F0:5A:4D:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3de0a6b5-6c71-3fc1-87e5-d8888b1f777b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.6.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:81:97:be:bb:f3:cc:ec:50:ae:05:8a:86:a5:49:79:4e:3f: 2c:6b:00:42:8e:a4:a0:e5:24:10:79:60:27:53:29:0e:96:68: 91:5e:f5:c8:c6:72:2e:dc:c5:26:77:cb:26:73:a6:3e:a3:eb: 7d:91:e0:c3:0c:50:3a:2f:4e:77:a1:8d:8b:01:96:b7:cb:7c: 0a:a7:1d:e0:3c:8a:04:c6:e5:12:c4:5c:3f:4f:32:7b:37:3e: 8c:af:00:48:b5:ed:ca:c7:c9:11:5f:4f:63:19:e3:e7:69:7c: 6e:18:02:02:b1:ae:8d:e9:36:b0:a9:50:33:e7:aa:6a:52:81: c1:2c:9d:fc:00:c7:31:54:e0:ed:f4:2b:70:fd:2f:a8:d7:b1: 20:44:bc:a6:d4:7d:a0:bf:da:52:e9:1e:f9:93:18:03:1b:b8: b9:f1:cd:f9:b9:f3:8f:15:42:4f:2e:a0:a9:9b:ea:9a:e3:a4: bb:28:be:85:8a:ea:d4:9f:4a:ca:f9:67:0d:24:da:45:66:b0: 24:7e:d9:f7:76:e3:42:37:a6:ab:f5:7f:5e:69:82:a0:b8:f9: c3:c5:63:20:81:b2:cf:68:d3:1f:2c:08:0a:99:a0:24:af:14: 2a:b1:d3:b0:68:6d:61:1a:22:b9:3f:19:71:2d:14:6d:4d:03: 77:5f:7a:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtq4v7KR1bxhVTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk ZTkzYWU1OGItMmZhZS00Nzg1LThmZDMtNmUzODIxNmY0ZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDUga2B5KpG0819XBBs/zSWqd0Xa5Xiwwgqz mErid5maN/7j1H7QCtfgRenRKXZW1NQAdQ7d70dvhaipkkxc5B/75wGO/pROxFNe GM9qK4SSupU1XLou86VfxJw/TXzP4HGKXAnkdn8usBfgtIrUCQ9x25nQU/vkQkSJ J7XRxdk4RnCBlhpvqgkQs+9H3MMwpJJaOzh8cEhcKy3c2v5AsweGQ3DO+uxTfmf3 XdWDqT65qGSXSq4H77BPGaTos/bKaqe3AmeErFw4A49vli2bcOBoekGfoHweDJE2 RIZoCZBF5FpXCSzqDi8gbUJ0wDI6O73gJAKyrdO9rqDs0cBy1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYxgKsykv7hrhGvzp+cSYLwWk3wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2RlMGE2YjUtNmM3MS0z ZmMxLTg3ZTUtZDg4ODhiMWY3NzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwbGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+Bl76788zsUK4FioalSXlOPyxrAEKOpKDlJBB5YCdTKQ6WaJFe9cjG ci7cxSZ3yyZzpj6j632R4MMMUDovTnehjYsBlrfLfAqnHeA8igTG5RLEXD9PMns3 PoyvAEi17crHyRFfT2MZ4+dpfG4YAgKxro3pNrCpUDPnqmpSgcEsnfwAxzFU4O30 K3D9L6jXsSBEvKbUfaC/2lLpHvmTGAMbuLnxzfm5848VQk8uoKmb6prjpLsovoWK 6tSfSsr5Zw0k2kVmsCR+2fd240I3pqv1f15pgqC4+cPFYyCBss9o0x8sCAqZoCSv FCqx07BobWEaIrk/GXEtFG1NA3dfeso= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:22 2025 by rpki-client