$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/435f33b2-752c-39e4-877d-e9e4ac1bf294.roa File: 435f33b2-752c-39e4-877d-e9e4ac1bf294.roa (raw, json) Hash identifier: NecmMo7iIGksA4FKxjuGCHqaBftEEgA+tFrdj8rCFWY= Subject key identifier: 74:C7:7A:3B:34:81:C1:91:BD:78:A6:53:0B:9E:09:62:A5:3B:D9:9A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849244E90E8DAA1F1141573E4C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/435f33b2-752c-39e4-877d-e9e4ac1bf294.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.15.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:90:e8:da:a1:f1:14:15:73:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=27e0de0b-2976-40eb-ae07-1d714332755b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:88:15:f9:5f:53:82:ef:a3:b5:49:68:ba:c1: 99:c5:72:b5:17:ec:f6:26:b5:4d:3d:36:6f:f3:98: 8c:77:bb:e9:42:c5:16:d5:22:4e:4f:1c:d2:68:f7: b1:87:cc:11:e9:77:a0:1f:5d:26:86:47:1c:97:35: b6:32:62:e5:0f:70:73:85:73:e7:1e:92:ff:d2:ad: 9c:ae:7c:70:6b:5f:48:bd:b0:31:4e:ab:24:9d:fc: b9:85:32:53:a3:2f:3f:4a:18:0b:38:fb:d1:88:f4: 0a:06:e1:1e:37:6c:7a:eb:44:42:6f:40:a9:96:eb: 6b:88:88:bc:ac:95:ae:ff:6c:43:f3:64:19:f8:c6: ef:02:7f:9c:78:62:1c:bf:b4:7d:d4:fc:d2:36:af: 92:97:fe:ca:39:d7:3f:8e:5e:4b:b4:28:ba:ca:8f: 1d:98:b5:4f:2d:82:af:22:2b:91:df:3d:c8:0f:95: eb:9c:9a:2a:f3:33:da:31:08:a5:d7:93:49:be:c2: 55:40:19:76:c4:a3:ac:16:a2:36:25:47:99:2a:6d: 44:35:3b:dc:94:ec:8c:5d:f0:6b:f0:1c:7e:f1:ad: 44:14:09:5e:a6:d0:7b:0c:01:02:40:9f:8e:f4:90: 37:f9:dc:06:41:75:72:e1:bb:3c:78:24:0b:10:9d: b2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C7:7A:3B:34:81:C1:91:BD:78:A6:53:0B:9E:09:62:A5:3B:D9:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/435f33b2-752c-39e4-877d-e9e4ac1bf294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.15.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:a1:d7:c8:7c:39:8e:0b:f3:d8:ec:a6:41:a8:99:8a:9f:c8: d1:58:83:06:26:31:9b:15:29:a3:3c:c9:03:c0:8a:d4:5c:e1: 7f:98:20:de:20:1f:bf:d0:64:9d:c5:fe:3e:82:80:0b:41:f7: 49:9e:16:a1:0f:d6:96:bc:45:f3:94:44:30:6a:24:7c:99:86: 64:4f:0d:9b:e9:a7:c4:73:2c:c1:33:e3:7e:71:c3:65:f7:8f: 39:e4:b7:91:4c:5b:7e:42:fd:ec:55:f4:e0:85:ac:32:22:22: ec:1a:3d:06:fa:c0:95:39:b7:b1:62:76:4f:49:e4:bb:e0:eb: 34:62:f1:bb:39:34:84:90:7d:df:9c:f0:40:a6:47:08:0c:41: 44:55:72:68:40:b1:45:b2:e6:a8:92:2a:ab:f6:c7:36:1d:c2: 0a:ff:23:aa:6f:82:4d:26:95:5a:f0:ff:1b:58:1b:a3:ce:31: 15:31:a1:bc:35:19:53:81:14:e2:e3:25:b9:db:e3:0e:90:24: fc:4b:d5:df:0e:06:4a:27:1e:8d:40:7c:fc:80:35:00:5f:d1: b8:58:8e:51:c6:98:f9:24:f4:ef:09:f7:c9:24:41:72:f9:7a: 4f:6d:79:1d:d3:61:d2:0b:28:3c:6e:2b:03:16:de:2f:97:c9: 0a:49:cf:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTpDo2qHxFBVz5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MjdlMGRlMGItMjk3Ni00MGViLWFlMDctMWQ3MTQzMzI3NTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4gV+V9Tgu+jtUlousGZxXK1F+z2JrVNPTZv 85iMd7vpQsUW1SJOTxzSaPexh8wR6XegH10mhkcclzW2MmLlD3BzhXPnHpL/0q2c rnxwa19IvbAxTqsknfy5hTJToy8/ShgLOPvRiPQKBuEeN2x660RCb0CplutriIi8 rJWu/2xD82QZ+MbvAn+ceGIcv7R91PzSNq+Sl/7KOdc/jl5LtCi6yo8dmLVPLYKv IiuR3z3ID5XrnJoq8zPaMQil15NJvsJVQBl2xKOsFqI2JUeZKm1ENTvclOyMXfBr 8Bx+8a1EFAleptB7DAECQJ+O9JA3+dwGQXVy4bs8eCQLEJ2ysQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTHejs0gcGRvXimUwueCWKlO9maMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDM1ZjMzYjItNzUyYy0z OWU0LTg3N2QtZTllNGFjMWJmMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFw+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCh18h8OY4L89jspkGomYqfyNFYgwYmMZsVKaM8yQPAitRc4X+YIN4g H7/QZJ3F/j6CgAtB90meFqEP1pa8RfOURDBqJHyZhmRPDZvpp8RzLMEz435xw2X3 jznkt5FMW35C/exV9OCFrDIiIuwaPQb6wJU5t7Fidk9J5Lvg6zRi8bs5NISQfd+c 8ECmRwgMQURVcmhAsUWy5qiSKqv2xzYdwgr/I6pvgk0mlVrw/xtYG6POMRUxobw1 GVOBFOLjJbnb4w6QJPxL1d8OBkonHo1AfPyANQBf0bhYjlHGmPkk9O8J98kkQXL5 ek9teR3TYdILKDxuKwMW3i+XyQpJz7o= -----END CERTIFICATE-----Generated at Sat Apr 5 11:00:18 2025 by rpki-client