$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/657b15c9-e350-3e2a-8c00-5a6fa2d88955.roa File: 657b15c9-e350-3e2a-8c00-5a6fa2d88955.roa (raw, json) Hash identifier: dNN5oSpbhrnHiJkN3/C40zbzSWdh9m0V9y4xGz1iUy8= Subject key identifier: D8:E9:7F:D5:49:4D:31:69:32:0B:FF:42:12:0C:01:80:3E:01:AC:A6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BFEBA87715FEE28255F721A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/657b15c9-e350-3e2a-8c00-5a6fa2d88955.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 45899 IP address blocks: 23.48.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:a8:77:15:fe:e2:82:55:f7:21:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=b6f1f367-3b8c-4d33-861e-c364f846147e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a7:82:36:f6:ec:11:bf:6b:bc:c8:28:03:92: ee:64:45:0a:5f:5e:54:3e:f6:d5:ee:44:bf:d2:af: 9e:7b:e4:dc:d2:29:07:2d:53:90:0e:8b:b1:a8:f0: 20:67:05:ff:3c:ed:74:72:85:4b:30:96:78:45:1a: 01:4c:93:20:c8:49:72:a3:43:b8:5c:dd:93:fe:41: 63:38:5b:ec:9d:47:01:35:43:60:1b:e1:13:e1:7b: 18:77:44:36:6c:54:4a:7d:ed:78:25:0c:eb:e3:50: db:03:07:c0:2f:ec:7b:a5:d3:fe:2f:56:0a:8d:98: 6f:96:cd:f1:0b:b5:0e:d7:92:02:c3:41:01:50:91: d4:c4:47:d3:8b:7a:3a:f1:25:c8:5d:bc:87:3e:c4: 64:18:0a:a6:a8:57:1c:5c:21:8c:9b:88:6f:44:52: 53:f9:1e:e2:6b:2b:ba:2a:bf:03:9c:b3:9f:e2:f7: 9d:2d:c2:24:55:21:5c:34:d8:a1:56:a3:be:7d:0c: 2f:43:eb:65:e7:a2:eb:f3:6e:f1:46:5e:fc:66:f1: d7:5c:84:4c:27:49:16:59:6b:78:a5:63:5c:36:69: 4a:80:1a:38:67:35:df:8a:68:b7:05:6f:64:1b:2b: 3b:40:c6:87:e6:a2:ac:30:41:44:31:88:8d:ee:8e: 7f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E9:7F:D5:49:4D:31:69:32:0B:FF:42:12:0C:01:80:3E:01:AC:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/657b15c9-e350-3e2a-8c00-5a6fa2d88955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:7c:2e:28:98:a2:6e:da:34:6c:6f:e9:0f:ec:ed:e8:9e:af: 77:f6:f1:35:b0:85:e1:fd:f5:f1:36:e7:a9:83:ec:29:ba:df: 4b:a0:f1:8b:cb:37:cc:8b:8b:0e:cc:08:4c:0d:f6:be:8f:e0: 08:77:af:b6:cf:b8:29:d3:f2:fb:bc:55:73:e0:f5:fc:c6:54: 7d:89:12:ea:6f:81:55:37:39:1d:8e:ce:d0:bd:1f:45:b9:f6: 13:79:bc:11:4e:f0:58:1a:0d:ba:f7:c1:3a:cc:ef:09:f2:61: fb:98:31:3a:cb:a9:cc:c3:62:03:54:0d:2f:38:51:50:01:67: 7f:e5:05:8e:70:8b:db:c1:4d:4f:14:85:32:f1:f8:dd:47:8b: 52:35:e9:0d:91:6b:70:74:e3:a3:a6:48:95:99:2e:3b:39:af: 58:c2:74:6c:10:c4:9d:6c:2d:a1:6e:e5:29:a5:4c:42:51:69: 16:de:d5:7e:03:18:6f:07:91:38:a7:16:7e:d4:bd:9e:1e:29: 7f:46:3c:05:1a:e2:02:06:8a:3d:97:7f:2a:5e:0b:d5:b8:14: c3:ee:f4:3a:1f:dc:4d:ff:44:3a:48:3a:85:56:be:6b:ed:96: 53:9c:bb:70:a1:6f:96:30:72:4c:39:51:cc:77:58:97:a1:b2: 50:c2:f9:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/66h3Ff7iglX3IaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk YjZmMWYzNjctM2I4Yy00ZDMzLTg2MWUtYzM2NGY4NDYxNDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqeCNvbsEb9rvMgoA5LuZEUKX15UPvbV7kS/ 0q+ee+Tc0ikHLVOQDouxqPAgZwX/PO10coVLMJZ4RRoBTJMgyElyo0O4XN2T/kFj OFvsnUcBNUNgG+ET4XsYd0Q2bFRKfe14JQzr41DbAwfAL+x7pdP+L1YKjZhvls3x C7UO15ICw0EBUJHUxEfTi3o68SXIXbyHPsRkGAqmqFccXCGMm4hvRFJT+R7iayu6 Kr8DnLOf4vedLcIkVSFcNNihVqO+fQwvQ+tl56Lr827xRl78ZvHXXIRMJ0kWWWt4 pWNcNmlKgBo4ZzXfimi3BW9kGys7QMaH5qKsMEFEMYiN7o5/RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjpf9VJTTFpMgv/QhIMAYA+AaymMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjU3YjE1YzktZTM1MC0z ZTJhLThjMDAtNWE2ZmEyZDg4OTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzA4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJ8LiiYom7aNGxv6Q/s7eier3f28TWwheH99fE256mD7Cm630ug8YvL N8yLiw7MCEwN9r6P4Ah3r7bPuCnT8vu8VXPg9fzGVH2JEupvgVU3OR2OztC9H0W5 9hN5vBFO8FgaDbr3wTrM7wnyYfuYMTrLqczDYgNUDS84UVABZ3/lBY5wi9vBTU8U hTLx+N1Hi1I16Q2Ra3B046OmSJWZLjs5r1jCdGwQxJ1sLaFu5SmlTEJRaRbe1X4D GG8HkTinFn7UvZ4eKX9GPAUa4gIGij2XfypeC9W4FMPu9Dof3E3/RDpIOoVWvmvt llOcu3Chb5Ywckw5Ucx3WJehslDC+dg= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:39 2025 by rpki-client