$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ef4286b-3382-3abe-9f12-4da67d368141.roa File: 4ef4286b-3382-3abe-9f12-4da67d368141.roa (raw, json) Hash identifier: lx6pRaz6ImQANXHoBP1SnwZ+mddRQIYXuX/Y8oEY5W0= Subject key identifier: B4:B1:D2:DC:3B:C5:D6:D7:E6:C0:04:90:13:A7:98:1A:FE:C6:5D:AD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494CC95681CBD86396AC9F1D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ef4286b-3382-3abe-9f12-4da67d368141.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 20940 IP address blocks: 23.32.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:56:81:cb:d8:63:96:ac:9f:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=16ea0139-985b-4f45-8827-283894e2d72d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:12:25:3a:2a:6a:24:ef:91:87:10:1b:5b:0e: e9:7f:b4:c4:17:96:42:6f:13:1c:c6:aa:1c:41:ee: 97:28:01:86:72:9c:b1:91:ca:c9:6e:5e:88:71:0a: 19:a5:c8:9a:78:92:63:5e:c7:b8:1e:2d:8f:24:dd: 98:67:b3:e0:25:61:64:19:64:2b:0d:08:bf:5e:73: a6:9f:2c:4f:b9:0e:dc:bd:e0:90:07:36:05:9e:7a: 72:2d:fc:1f:8f:fc:b6:12:f4:34:5e:1a:a4:62:0f: 7b:95:53:30:ed:66:41:08:52:56:ad:1d:72:bb:6e: 9b:a5:ec:43:84:83:5f:c7:4d:dd:1a:f7:37:56:3a: 98:c7:f7:eb:6b:93:92:73:12:68:44:16:49:aa:59: 1e:47:ed:22:35:00:b5:28:4f:81:73:9c:32:b4:55: a5:16:14:83:82:62:96:8a:d4:c8:98:5b:f4:c8:cc: a8:bf:8e:b1:46:59:d8:ff:de:b1:57:97:90:3f:6a: 71:99:0b:db:8e:b6:f5:67:9a:82:5f:81:c7:0f:f8: 80:43:1c:57:65:f0:d5:41:96:1e:85:57:d9:27:47: 2a:97:94:d4:61:53:a4:3b:30:85:ab:c7:60:9a:07: 0d:3d:ac:b6:e3:0f:3e:dd:b0:cf:fe:4e:25:f3:ba: fc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B1:D2:DC:3B:C5:D6:D7:E6:C0:04:90:13:A7:98:1A:FE:C6:5D:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ef4286b-3382-3abe-9f12-4da67d368141.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:57:bd:2c:15:fa:fc:78:89:8f:58:a9:38:ee:dd:97:04:c1: 51:0f:22:05:27:0e:e8:9b:5a:1f:fd:06:7f:6e:6d:4c:a8:85: f8:7f:25:5d:60:8d:96:d9:6c:32:65:12:1b:88:30:39:c3:07: f0:81:67:5e:aa:cf:c7:8f:ae:04:07:56:a0:a7:c8:3f:ff:2e: a1:1e:92:e2:a3:78:a8:83:8b:1d:99:00:a8:ca:08:e3:e3:2d: cf:25:0b:80:03:39:0c:3e:39:b0:b9:48:c8:78:39:d8:ae:bf: e5:ea:20:bc:e5:ff:e6:5b:fb:87:17:1b:e4:7a:69:12:92:02: fd:94:68:86:c6:ac:b9:84:9a:2a:80:89:ba:9a:ce:92:97:d3: 98:5e:d4:0c:db:91:0e:25:c0:94:51:7c:ea:d4:46:b5:e9:e4: e9:00:af:ce:b8:39:54:bf:04:32:8b:fe:6b:ca:98:8a:bf:d6: 37:3a:2e:b7:5e:9e:35:3b:81:e1:e3:f0:d9:06:17:bc:39:f9: 82:23:c6:ab:36:ca:11:db:aa:11:05:8c:74:51:41:e8:ae:c1: b7:3b:a9:74:52:a4:73:a5:10:d6:b3:3d:2c:e4:6f:ab:fb:89: 7e:f0:cc:9d:d4:ce:45:1b:4c:1a:9f:10:ef:98:e9:50:77:df: 50:95:06:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVaBy9hjlqyfHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk MTZlYTAxMzktOTg1Yi00ZjQ1LTg4MjctMjgzODk0ZTJkNzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBIlOipqJO+RhxAbWw7pf7TEF5ZCbxMcxqoc Qe6XKAGGcpyxkcrJbl6IcQoZpciaeJJjXse4Hi2PJN2YZ7PgJWFkGWQrDQi/XnOm nyxPuQ7cveCQBzYFnnpyLfwfj/y2EvQ0XhqkYg97lVMw7WZBCFJWrR1yu26bpexD hINfx03dGvc3VjqYx/fra5OScxJoRBZJqlkeR+0iNQC1KE+Bc5wytFWlFhSDgmKW itTImFv0yMyov46xRlnY/96xV5eQP2pxmQvbjrb1Z5qCX4HHD/iAQxxXZfDVQZYe hVfZJ0cql5TUYVOkOzCFq8dgmgcNPay24w8+3bDP/k4l87r8lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSx0tw7xdbX5sAEkBOnmBr+xl2tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGVmNDI4NmItMzM4Mi0z YWJlLTlmMTItNGRhNjdkMzY4MTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyA4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1XvSwV+vx4iY9YqTju3ZcEwVEPIgUnDuibWh/9Bn9ubUyohfh/JV1g jZbZbDJlEhuIMDnDB/CBZ16qz8ePrgQHVqCnyD//LqEekuKjeKiDix2ZAKjKCOPj Lc8lC4ADOQw+ObC5SMh4Odiuv+XqILzl/+Zb+4cXG+R6aRKSAv2UaIbGrLmEmiqA ibqazpKX05he1AzbkQ4lwJRRfOrURrXp5OkAr864OVS/BDKL/mvKmIq/1jc6Lrde njU7geHj8NkGF7w5+YIjxqs2yhHbqhEFjHRRQeiuwbc7qXRSpHOlENazPSzkb6v7 iX7wzJ3UzkUbTBqfEO+Y6VB331CVBkM= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:49 2025 by rpki-client