$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48dca9cd-98ff-3351-81e9-e910a97dfb5c.roa File: 48dca9cd-98ff-3351-81e9-e910a97dfb5c.roa (raw, json) Hash identifier: exNX04FE3qrX/Vb9/R5qsjm8lFWRsSm35b+lijfi7uU= Subject key identifier: 68:4F:A8:65:79:CB:DA:69:7B:11:95:A6:F0:4B:6A:16:DB:77:7B:E3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494CC955BEA569854993302900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48dca9cd-98ff-3351-81e9-e910a97dfb5c.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 16625 IP address blocks: 23.32.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:55:be:a5:69:85:49:93:30:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=4d1d3138-5083-4f0e-b950-9e6befaa534d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:86:28:be:2d:33:5d:71:8b:6b:74:25:5d:ca: 19:e2:2b:7a:53:06:80:a5:89:85:f0:4a:4b:1d:6c: c0:ba:47:9f:f6:35:47:dd:62:f7:69:25:0b:87:b0: df:4c:42:7d:19:06:48:d3:8e:12:ce:4f:2f:d2:15: f2:9b:01:91:1f:c9:7f:96:71:89:c5:6f:27:ca:82: 0e:11:a9:71:f4:cf:53:8c:6e:6d:40:06:ce:98:39: eb:15:ee:7a:91:74:4d:a5:67:a3:e8:37:b0:e6:68: a3:89:d8:ac:e4:76:ff:8f:b1:66:f3:c1:95:50:18: 96:de:9d:35:64:1a:ed:db:a7:6c:91:60:ea:28:c2: bc:d3:75:64:a5:d1:4e:3d:d0:9d:6c:06:5b:e1:04: fc:a1:7c:15:7e:c4:25:ab:a1:4e:b0:4f:35:16:23: 16:91:f0:4e:27:41:6e:ff:e5:4f:78:ad:64:de:14: 54:79:a5:58:0e:da:b1:c5:f1:97:28:b0:71:53:9c: 95:a5:38:7c:8a:8f:a8:b8:1b:fb:1c:79:39:30:fb: c4:35:d4:b1:f7:78:9f:e7:0d:e9:65:78:86:22:9f: 54:ec:2f:36:6a:17:69:9d:d7:26:04:fb:eb:83:55: 55:1a:09:2a:40:04:a9:72:1d:fd:7f:fd:52:37:2c: 81:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4F:A8:65:79:CB:DA:69:7B:11:95:A6:F0:4B:6A:16:DB:77:7B:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48dca9cd-98ff-3351-81e9-e910a97dfb5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:48:94:dd:63:f2:24:12:c3:92:9d:ea:98:a5:47:15:c5:3c: b7:e0:20:1a:50:95:7e:80:73:0b:6f:45:2f:59:79:85:d6:86: 96:e6:56:b9:37:f3:a3:b6:a5:ba:e0:8a:be:2c:77:dc:94:d4: 70:fe:ec:9d:bd:df:12:f4:d4:0c:77:d1:68:93:26:ff:8a:57: 1f:da:b5:67:f2:3c:83:9f:8a:38:6a:6d:68:9f:f8:78:fa:1a: a5:74:3e:c4:b4:3a:d4:8b:93:de:aa:21:b3:15:80:9d:82:80: 4e:a4:69:e1:73:6f:16:16:fc:a6:c0:3c:33:98:3a:9e:38:6f: 80:39:e2:f3:b2:5e:70:08:ad:f2:ce:bc:ee:fa:3f:f2:5a:78: 3d:11:c2:5c:87:79:28:c1:80:57:8a:bf:89:08:8a:a7:31:62: 00:86:8d:e5:51:e3:bd:1e:48:31:f4:48:63:6a:71:7a:1f:6f: 6e:a9:85:b5:cd:99:a6:03:d3:38:3f:99:0c:76:fc:75:18:5c: b2:78:18:15:34:79:81:17:8c:3a:00:6c:4d:9a:a4:0b:e8:0a: d3:8c:de:9e:f2:bb:d7:df:18:e2:03:91:d7:ee:1a:dc:85:45: 01:b9:e5:c1:09:0b:a0:e9:14:e5:5a:37:df:c3:8f:14:de:ce: 0f:82:70:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVW+pWmFSZMwKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk NGQxZDMxMzgtNTA4My00ZjBlLWI5NTAtOWU2YmVmYWE1MzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIYovi0zXXGLa3QlXcoZ4it6UwaApYmF8EpL HWzAukef9jVH3WL3aSULh7DfTEJ9GQZI044Szk8v0hXymwGRH8l/lnGJxW8nyoIO Ealx9M9TjG5tQAbOmDnrFe56kXRNpWej6Dew5mijidis5Hb/j7Fm88GVUBiW3p01 ZBrt26dskWDqKMK803VkpdFOPdCdbAZb4QT8oXwVfsQlq6FOsE81FiMWkfBOJ0Fu /+VPeK1k3hRUeaVYDtqxxfGXKLBxU5yVpTh8io+ouBv7HHk5MPvENdSx93if5w3p ZXiGIp9U7C82ahdpndcmBPvrg1VVGgkqQASpch39f/1SNyyBxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhPqGV5y9ppexGVpvBLahbbd3vjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDhkY2E5Y2QtOThmZi0z MzUxLTgxZTktZTkxMGE5N2RmYjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyAWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxIlN1j8iQSw5Kd6pilRxXFPLfgIBpQlX6AcwtvRS9ZeYXWhpbmVrk3 86O2pbrgir4sd9yU1HD+7J293xL01Ax30WiTJv+KVx/atWfyPIOfijhqbWif+Hj6 GqV0PsS0OtSLk96qIbMVgJ2CgE6kaeFzbxYW/KbAPDOYOp44b4A54vOyXnAIrfLO vO76P/JaeD0RwlyHeSjBgFeKv4kIiqcxYgCGjeVR470eSDH0SGNqcXofb26phbXN maYD0zg/mQx2/HUYXLJ4GBU0eYEXjDoAbE2apAvoCtOM3p7yu9ffGOIDkdfuGtyF RQG55cEJC6DpFOVaN9/DjxTezg+CcGg= -----END CERTIFICATE-----Generated at Sat Apr 5 11:03:58 2025 by rpki-client