$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57f10b5c-0b6a-3c05-ab63-1de8b1a40ac1.roa File: 57f10b5c-0b6a-3c05-ab63-1de8b1a40ac1.roa (raw, json) Hash identifier: Z4LvTKXBTi3zWQCS/Jc1TCpDMcdmu5Z65HCLZnzyjKg= Subject key identifier: 17:20:FE:A1:89:17:C3:84:C2:88:94:84:74:5F:33:B1:C5:B6:90:3A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABED11262F4FD57B274E950 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57f10b5c-0b6a-3c05-ab63-1de8b1a40ac1.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.38.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:d1:12:62:f4:fd:57:b2:74:e9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=5c91087c-9630-496c-abab-a12cddfb9bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f7:d0:b0:c3:68:d9:7d:68:cc:a0:9e:8d:be: 57:2d:13:f3:a6:95:42:c2:95:fd:c3:8b:ee:d9:04: 8b:66:a6:47:a1:7b:07:7e:2e:8a:06:ed:cf:66:b3: 14:11:89:b4:f9:cb:b0:c0:c1:90:e7:79:bb:9d:be: 95:53:f4:4a:07:2b:00:0f:ad:e4:76:a9:d8:46:bb: 7e:af:95:43:9c:aa:74:10:a4:f9:59:06:eb:5d:a6: 4f:09:d4:44:e6:0f:8c:1f:6a:9d:3b:7b:37:71:36: 1e:a6:21:3b:1d:39:73:c1:06:a4:d0:c5:7b:04:86: cc:7f:ae:44:73:99:82:cc:b2:39:03:d3:2a:6e:3e: 72:0b:71:5a:aa:74:de:98:40:22:fb:03:34:fd:27: 92:bf:62:58:48:a0:9f:d6:1d:78:43:80:06:fc:2a: 6a:cd:50:73:77:13:e4:e5:7b:a7:61:a5:03:b9:e6: 4c:77:f6:da:e2:ba:ff:79:80:21:a0:71:c5:9e:2e: 46:de:00:1a:bf:7f:e9:cb:b7:32:90:09:8e:bd:6b: 40:15:f8:ed:70:4f:2a:a5:20:d2:cd:b1:85:1c:f4: 15:75:ff:4a:32:99:cb:2d:5e:a5:75:f8:fa:7b:cc: 60:0e:80:dc:4f:e1:25:1f:45:7c:66:d1:76:86:d5: f2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:20:FE:A1:89:17:C3:84:C2:88:94:84:74:5F:33:B1:C5:B6:90:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57f10b5c-0b6a-3c05-ab63-1de8b1a40ac1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:f9:e3:b5:7b:5d:50:8a:be:3a:2c:94:95:7d:45:0d:ea:93: 98:bb:09:dd:e9:00:94:ba:8d:63:36:63:c4:f7:48:c8:49:ac: d0:91:e6:21:e6:bc:59:60:e5:3e:31:d9:82:0f:d0:c6:b8:7c: 1d:d9:91:4e:76:a2:bf:5d:93:6c:71:a8:0c:ac:49:fd:c0:e2: 4c:6c:ae:4b:06:a5:b9:97:08:d1:62:44:0a:f8:3a:7d:56:b3: 13:e4:e4:75:71:c3:ce:bc:52:47:7a:3b:11:da:b4:a0:4a:64: 31:32:03:31:fd:a9:a6:4c:f4:a4:68:e2:af:e2:2b:ec:ff:48: c6:4b:46:27:8d:5d:90:5a:c7:c1:28:d2:75:51:6b:75:48:8d: c9:df:f9:cd:45:01:bf:c4:82:6a:b9:79:f0:a8:a1:a6:08:05: c2:ec:f1:d7:2f:9c:4f:55:c5:25:85:e7:f2:9d:be:ad:95:bd: 10:77:ce:cb:0b:ff:74:e6:e1:57:16:ca:46:df:07:66:5f:62: f1:20:96:1a:cf:b5:be:77:3a:23:35:5e:b2:40:40:fb:b2:6e: dc:70:0b:02:e4:4e:a9:a9:02:65:f0:73:10:85:a2:b7:b7:c4: 17:6d:de:9b:bf:19:4b:14:3b:17:ab:35:a8:fd:18:31:83:d5: 05:77:da:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavtESYvT9V7J06VAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NWM5MTA4N2MtOTYzMC00OTZjLWFiYWItYTEyY2RkZmI5YmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/fQsMNo2X1ozKCejb5XLRPzppVCwpX9w4vu 2QSLZqZHoXsHfi6KBu3PZrMUEYm0+cuwwMGQ53m7nb6VU/RKBysAD63kdqnYRrt+ r5VDnKp0EKT5WQbrXaZPCdRE5g+MH2qdO3s3cTYepiE7HTlzwQak0MV7BIbMf65E c5mCzLI5A9Mqbj5yC3FaqnTemEAi+wM0/SeSv2JYSKCf1h14Q4AG/CpqzVBzdxPk 5XunYaUDueZMd/ba4rr/eYAhoHHFni5G3gAav3/py7cykAmOvWtAFfjtcE8qpSDS zbGFHPQVdf9KMpnLLV6ldfj6e8xgDoDcT+ElH0V8ZtF2htXyrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcg/qGJF8OEwoiUhHRfM7HFtpA6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTdmMTBiNWMtMGI2YS0z YzA1LWFiNjMtMWRlOGIxYTQwYWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyZUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFz547V7XVCKvjoslJV9RQ3qk5i7Cd3pAJS6jWM2Y8T3SMhJrNCR5iHm vFlg5T4x2YIP0Ma4fB3ZkU52or9dk2xxqAysSf3A4kxsrksGpbmXCNFiRAr4On1W sxPk5HVxw868Ukd6OxHatKBKZDEyAzH9qaZM9KRo4q/iK+z/SMZLRieNXZBax8Eo 0nVRa3VIjcnf+c1FAb/Egmq5efCooaYIBcLs8dcvnE9VxSWF5/Kdvq2VvRB3zssL /3Tm4VcWykbfB2ZfYvEglhrPtb53OiM1XrJAQPuybtxwCwLkTqmpAmXwcxCFore3 xBdt3pu/GUsUOxerNaj9GDGD1QV32uw= -----END CERTIFICATE-----Generated at Sat Apr 5 10:52:25 2025 by rpki-client