$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43083772-3eb5-35cd-a8ea-5deefe5de773.roa File: 43083772-3eb5-35cd-a8ea-5deefe5de773.roa (raw, json) Hash identifier: 57nf++Zgeq3N2LVa8Y3rkWNZJSnDmI2nrQayZUAF9No= Subject key identifier: 7F:46:36:96:25:EB:B7:16:FA:48:10:54:07:15:3F:99:C6:FF:A1:0D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849287E549EC993772975A27700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43083772-3eb5-35cd-a8ea-5deefe5de773.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.0.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:54:9e:c9:93:77:29:75:a2:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=0ea4d3e0-bdb5-4fd5-88ba-fb96b8f8a176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c1:2a:d9:ba:0d:92:43:e7:7a:66:af:c7:3b: 6b:4d:d1:bc:52:12:a3:e6:3d:2f:17:79:c7:43:fa: 32:80:f7:83:97:aa:9b:2d:b4:fb:2d:b4:c6:8f:11: 25:8f:b6:9e:9e:e5:0a:d8:a0:a6:de:5f:36:55:50: 3d:2b:b6:c9:c7:89:96:14:1f:b1:01:b8:83:19:d5: 33:3b:87:05:ee:66:0d:97:b8:0c:4e:36:a2:5a:97: b5:e5:25:a9:e4:75:ca:2c:e5:24:f3:b9:38:3b:40: ac:7f:82:e9:7d:b4:ec:14:ab:3c:8c:f2:36:4b:33: 48:fb:56:2e:ee:2a:01:d7:aa:1e:44:45:69:62:db: 8f:10:26:1e:0c:cf:6e:9d:36:d7:5d:1f:c5:4a:48: e6:3f:a5:a0:5f:6f:77:bc:cb:fa:85:29:41:ce:31: 3e:70:d4:eb:9f:6a:0a:8c:b0:c3:99:43:dc:b5:fa: b4:1a:08:e8:70:5d:e1:71:4f:6e:8e:92:43:68:ff: db:7a:19:8e:5a:f3:1b:f3:d9:0f:6d:3b:23:0b:84: 96:7a:34:b7:bb:94:0f:3d:5f:cf:42:61:f4:f5:9d: 9e:5c:4b:de:ac:c1:af:e9:93:d8:28:f9:39:50:45: 9d:48:69:b5:3e:c8:1a:a2:ab:0c:ab:55:39:9c:30: db:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:46:36:96:25:EB:B7:16:FA:48:10:54:07:15:3F:99:C6:FF:A1:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43083772-3eb5-35cd-a8ea-5deefe5de773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.0.0.0/12 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b1:8c:e8:96:15:2f:17:1a:b7:00:2a:db:18:32:cf:2b:a9: cb:6a:71:95:5a:8d:96:8f:3d:dc:bf:78:fe:a7:42:08:60:19: 12:3d:e5:06:b4:55:fe:17:88:d9:04:5f:1b:41:5a:4b:f4:66: dc:af:40:f2:ba:c8:54:ce:3e:33:ca:76:79:1b:a0:23:44:8f: 29:24:1e:01:05:af:45:eb:b2:50:5e:2a:c1:63:18:64:b7:ec: 5b:2f:6b:e8:ab:05:b0:f8:8e:38:1a:cc:16:fc:cd:0e:3b:60: 48:6a:c0:89:09:c8:2c:15:22:03:9a:b1:5a:2a:9e:80:3b:1e: e0:78:1d:7d:6a:62:69:35:cc:3f:98:93:62:99:b0:18:e6:65: c7:48:9f:48:8a:30:de:03:5c:c1:98:33:f2:76:72:22:33:1e: db:51:3a:9e:89:ec:56:0a:f0:31:8c:c4:e3:8e:67:27:49:b5: 0b:4e:e8:54:6c:a7:a4:00:49:17:95:78:3f:e4:5e:11:09:12: d2:46:e4:1f:50:4e:b6:7a:a2:21:67:1d:d3:9f:47:e0:0e:6b: 4b:b1:c5:c1:bb:a1:48:37:70:f7:e0:98:96:10:69:17:7c:0d: 2c:d5:f2:07:36:e7:05:a0:0d:4f:73:c5:8e:0a:70:32:9a:72: 4a:4b:c6:21 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkoflSeyZN3KXWidwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk MGVhNGQzZTAtYmRiNS00ZmQ1LTg4YmEtZmI5NmI4ZjhhMTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8Eq2boNkkPnemavxztrTdG8UhKj5j0vF3nH Q/oygPeDl6qbLbT7LbTGjxElj7aenuUK2KCm3l82VVA9K7bJx4mWFB+xAbiDGdUz O4cF7mYNl7gMTjaiWpe15SWp5HXKLOUk87k4O0Csf4LpfbTsFKs8jPI2SzNI+1Yu 7ioB16oeREVpYtuPECYeDM9unTbXXR/FSkjmP6WgX293vMv6hSlBzjE+cNTrn2oK jLDDmUPctfq0GgjocF3hcU9ujpJDaP/behmOWvMb89kPbTsjC4SWejS3u5QPPV/P QmH09Z2eXEverMGv6ZPYKPk5UEWdSGm1PsgaoqsMq1U5nDDbLQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFH9GNpYl67cW+kgQVAcVP5nG/6ENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDMwODM3NzItM2ViNS0z NWNkLWE4ZWEtNWRlZWZlNWRlNzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEFwAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAZLGM6JYVLxcatwAq2xgyzyupy2pxlVqNlo893L94/qdCCGAZEj3lBrRV /heI2QRfG0FaS/Rm3K9A8rrIVM4+M8p2eRugI0SPKSQeAQWvReuyUF4qwWMYZLfs Wy9r6KsFsPiOOBrMFvzNDjtgSGrAiQnILBUiA5qxWiqegDse4HgdfWpiaTXMP5iT YpmwGOZlx0ifSIow3gNcwZgz8nZyIjMe21E6nonsVgrwMYzE445nJ0m1C07oVGyn pABJF5V4P+ReEQkS0kbkH1BOtnqiIWcd059H4A5rS7HFwbuhSDdw9+CYlhBpF3wN LNXyBzbnBaANT3PFjgpwMppySkvGIQ== -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:52 2025 by rpki-client