$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56d5ffda-3e68-3ecc-9c7b-37121b2d0ce9.roa File: 56d5ffda-3e68-3ecc-9c7b-37121b2d0ce9.roa (raw, json) Hash identifier: 3NF5zqdJC0ro6pAJfvn8NRQvacqj9/IoNu/WuaxnPOY= Subject key identifier: 66:98:1D:21:85:65:7E:F8:F6:E2:8E:C7:B1:77:2E:E7:0B:C9:D5:61 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858491ED6F5DC547A27F7B41B5780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56d5ffda-3e68-3ecc-9c7b-37121b2d0ce9.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.77.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:f5:dc:54:7a:27:f7:b4:1b:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=4ad645e7-a189-4481-8d7d-fa23053204f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:90:40:15:20:33:79:4f:d5:7c:47:bb:c7:d9: 9e:0e:fb:0f:79:b9:e6:05:23:65:34:30:83:c8:fe: 0e:b4:56:4e:aa:d6:ef:37:13:34:f0:4b:c1:46:0f: 9b:bc:2b:06:cb:62:23:07:c0:7d:1b:b6:53:b9:05: 42:fd:e7:43:54:45:3b:6b:71:2b:4f:74:d0:37:1c: 4d:4a:66:7d:6a:57:32:06:ae:b2:c7:16:d3:9a:4a: 81:e2:00:17:c9:c5:37:ef:19:9a:00:77:5c:7b:1a: 51:87:93:7d:ce:76:22:f7:98:04:1a:c7:06:a5:98: e3:d4:e3:12:0e:ef:d2:64:e7:64:f7:6f:26:93:bc: 38:aa:71:76:2c:26:16:34:9f:0c:d9:a0:fe:ae:55: 41:bf:d6:ad:20:bc:d6:56:9a:79:c4:77:84:5f:a5: 76:72:4a:b4:68:97:b1:38:a6:29:88:b8:9e:fd:80: 39:44:7b:47:52:02:f7:e3:23:7c:a2:19:45:de:85: ae:59:61:7b:06:9d:3d:94:e1:76:30:6f:86:34:18: 23:bf:b3:59:91:8d:f2:52:fa:a0:1c:f2:d3:97:87: 38:fb:a8:dc:fa:2c:b2:d7:a1:4e:f5:1c:1d:20:b9: 83:83:36:65:18:42:d8:31:4b:35:f8:51:fb:34:ea: b4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:98:1D:21:85:65:7E:F8:F6:E2:8E:C7:B1:77:2E:E7:0B:C9:D5:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56d5ffda-3e68-3ecc-9c7b-37121b2d0ce9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.77.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:dd:82:a1:1f:92:6e:1d:96:df:49:6a:3a:a6:de:3c:f2:71: ca:15:2b:87:02:0a:bd:bb:ce:18:2d:9d:a8:be:03:66:76:18: 73:f3:93:32:dc:5e:b0:26:23:7e:72:8b:1c:4e:ab:60:7d:0a: 20:c4:02:0f:81:65:7f:d3:5b:f9:b8:f2:46:29:d5:59:be:6c: 64:78:5b:4f:cd:92:73:f6:8c:f1:a6:b4:f5:a8:1f:a8:b1:dc: 09:f4:2f:21:fc:44:78:44:40:97:a6:48:f5:e1:2c:35:af:84: f7:79:38:9d:a4:bc:12:f9:ae:3e:ec:a8:4d:69:3f:85:cb:0f: a6:04:4d:5b:2c:e6:b3:6f:9f:43:83:c5:ea:d6:ed:28:01:64: 92:c3:fb:0e:a4:62:8b:ea:04:6e:79:b5:34:36:6c:8d:57:a6: 36:1c:b4:b9:d8:a1:26:00:46:18:0e:3e:7c:9f:41:67:00:92: 8c:1c:a2:69:02:0a:12:f5:0f:a1:99:9c:e7:c8:d6:eb:5c:b6: 69:50:5a:bd:4a:c2:c6:49:0e:53:e0:ec:5d:40:78:21:1d:47: 69:81:3a:f6:1a:62:a3:71:b6:7b:31:6e:02:2d:8b:51:ae:94: ba:60:c2:cb:8a:f5:9d:98:fb:1d:46:28:c6:2f:45:2b:db:d9: 3b:e0:31:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1vXcVHon97QbV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk NGFkNjQ1ZTctYTE4OS00NDgxLThkN2QtZmEyMzA1MzIwNGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpBAFSAzeU/VfEe7x9meDvsPebnmBSNlNDCD yP4OtFZOqtbvNxM08EvBRg+bvCsGy2IjB8B9G7ZTuQVC/edDVEU7a3ErT3TQNxxN SmZ9alcyBq6yxxbTmkqB4gAXycU37xmaAHdcexpRh5N9znYi95gEGscGpZjj1OMS Du/SZOdk928mk7w4qnF2LCYWNJ8M2aD+rlVBv9atILzWVpp5xHeEX6V2ckq0aJex OKYpiLie/YA5RHtHUgL34yN8ohlF3oWuWWF7Bp09lOF2MG+GNBgjv7NZkY3yUvqg HPLTl4c4+6jc+iyy16FO9RwdILmDgzZlGELYMUs1+FH7NOq0EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaYHSGFZX749uKOx7F3LucLydVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTZkNWZmZGEtM2U2OC0z ZWNjLTljN2ItMzcxMjFiMmQwY2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF034MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvdgqEfkm4dlt9Jajqm3jzyccoVK4cCCr27zhgtnai+A2Z2GHPzkzLc XrAmI35yixxOq2B9CiDEAg+BZX/TW/m48kYp1Vm+bGR4W0/NknP2jPGmtPWoH6ix 3An0LyH8RHhEQJemSPXhLDWvhPd5OJ2kvBL5rj7sqE1pP4XLD6YETVss5rNvn0OD xerW7SgBZJLD+w6kYovqBG55tTQ2bI1XpjYctLnYoSYARhgOPnyfQWcAkowcomkC ChL1D6GZnOfI1utctmlQWr1KwsZJDlPg7F1AeCEdR2mBOvYaYqNxtnsxbgIti1Gu lLpgwsuK9Z2Y+x1GKMYvRSvb2TvgMQE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:01:38 2025 by rpki-client