$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47c6183f-38b8-3f31-8e6e-fb3bb2f37216.roa File: 47c6183f-38b8-3f31-8e6e-fb3bb2f37216.roa (raw, json) Hash identifier: ZU0rsCJ4CgT+2qbN64j/rJmTjAEX8gq0kjQKjt4CKv8= Subject key identifier: 64:0D:C5:E1:E5:A4:72:C5:C5:99:35:97:7A:38:C0:25:D5:FD:E2:19 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABEEB24C2379C7973403080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47c6183f-38b8-3f31-8e6e-fb3bb2f37216.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.41.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:eb:24:c2:37:9c:79:73:40:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=f95ff7ba-19fe-4f14-8061-3eae68a017fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:03:73:a5:2c:0d:7b:9e:de:2f:27:aa:36:ec: 27:4e:b8:8a:48:11:b5:43:88:c9:14:1f:a0:8e:df: 36:29:a1:dc:34:a8:1c:83:84:c9:18:bd:c8:1a:c3: f8:39:82:e1:a8:9b:9a:dd:ae:f4:1e:ec:97:8c:ab: 72:5d:ae:55:d7:b4:46:a8:7f:e1:e6:d8:67:c5:47: 54:c6:9b:c1:cc:03:34:68:c7:02:e0:53:01:43:5e: 16:86:c6:31:00:2c:54:75:9b:8c:40:4c:ef:da:7c: b4:2e:89:af:5a:02:da:49:62:92:7b:d5:05:48:7f: 79:4a:c8:99:b1:8c:79:1e:1a:e7:1c:70:2e:aa:3e: 43:6c:02:8f:bb:84:d9:0e:ca:6a:80:d5:65:4d:eb: c5:3e:16:dd:85:d4:19:65:c5:ac:c9:cb:e2:4f:7a: 28:ba:ad:a7:a0:14:cd:ba:41:11:4d:b9:0c:10:ee: 36:fe:2a:c5:c8:20:7c:37:ae:d8:6d:1a:f2:b3:88: a7:a2:dd:16:af:46:b7:6a:0c:06:55:f3:bf:84:cc: b9:19:1c:20:74:20:c8:9b:1d:be:8e:ec:96:7e:3c: 0c:5f:77:4b:bb:61:70:df:66:75:6d:24:36:9c:0f: 32:5b:0c:e1:c3:05:aa:61:32:a6:c3:90:68:31:9b: ca:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0D:C5:E1:E5:A4:72:C5:C5:99:35:97:7A:38:C0:25:D5:FD:E2:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47c6183f-38b8-3f31-8e6e-fb3bb2f37216.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:ab:e0:cf:05:85:4c:d3:b1:fa:03:d5:b8:d4:e1:b0:8f:13: 0a:c1:85:6c:04:22:c3:d2:37:38:00:df:95:fb:4c:bc:7b:c0: 85:4d:52:56:95:7d:76:85:43:f4:60:4e:b5:17:c2:19:a0:7a: 51:76:ad:42:c4:01:b5:df:2f:b3:57:6d:7f:95:b2:25:fb:c2: 32:dd:95:bc:4d:1b:72:0f:f8:53:a6:fd:95:62:54:13:7c:cf: 28:a9:a1:16:fb:c2:09:c6:4f:89:f0:e3:7d:e2:14:63:10:a5: b0:19:f6:09:2c:79:54:92:f6:3e:b5:a2:51:ec:50:39:99:3c: b7:8f:00:ac:7f:62:83:cd:01:7f:ed:6b:f0:ac:6e:2c:ac:f4: dc:ba:62:6d:20:ee:6c:2a:a0:88:6f:9e:4f:1a:2d:c5:84:dc: 18:81:21:01:f9:2c:d3:a1:26:8f:6c:8f:90:d8:77:f7:56:49: cf:7c:2a:a5:1e:f9:25:ae:3e:dd:8f:72:16:26:35:77:4a:5b: 1e:c1:c6:02:3c:f7:2f:c4:68:cb:a8:c9:02:25:28:10:75:ef: be:4c:12:9b:23:f0:92:5a:00:5f:db:7b:e7:4f:d7:40:42:61: 6a:50:5b:a5:ae:ea:8e:02:ce:6b:ac:55:60:a6:93:dc:12:c1: f7:29:d0:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuskwjeceXNAMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk Zjk1ZmY3YmEtMTlmZS00ZjE0LTgwNjEtM2VhZTY4YTAxN2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQNzpSwNe57eLyeqNuwnTriKSBG1Q4jJFB+g jt82KaHcNKgcg4TJGL3IGsP4OYLhqJua3a70HuyXjKtyXa5V17RGqH/h5thnxUdU xpvBzAM0aMcC4FMBQ14WhsYxACxUdZuMQEzv2ny0LomvWgLaSWKSe9UFSH95SsiZ sYx5HhrnHHAuqj5DbAKPu4TZDspqgNVlTevFPhbdhdQZZcWsycviT3oouq2noBTN ukERTbkMEO42/irFyCB8N67YbRrys4inot0Wr0a3agwGVfO/hMy5GRwgdCDImx2+ juyWfjwMX3dLu2Fw32Z1bSQ2nA8yWwzhwwWqYTKmw5BoMZvKUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQNxeHlpHLFxZk1l3o4wCXV/eIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDdjNjE4M2YtMzhiOC0z ZjMxLThlNmUtZmIzYmIyZjM3MjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyn2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJer4M8FhUzTsfoD1bjU4bCPEwrBhWwEIsPSNzgA35X7TLx7wIVNUlaV fXaFQ/RgTrUXwhmgelF2rULEAbXfL7NXbX+VsiX7wjLdlbxNG3IP+FOm/ZViVBN8 zyipoRb7wgnGT4nw433iFGMQpbAZ9gkseVSS9j61olHsUDmZPLePAKx/YoPNAX/t a/Csbiys9Ny6Ym0g7mwqoIhvnk8aLcWE3BiBIQH5LNOhJo9sj5DYd/dWSc98KqUe +SWuPt2PchYmNXdKWx7BxgI89y/EaMuoyQIlKBB1775MEpsj8JJaAF/be+dP10BC YWpQW6Wu6o4CzmusVWCmk9wSwfcp0Hk= -----END CERTIFICATE-----Generated at Sat Apr 5 11:09:08 2025 by rpki-client