$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65ddbd56-d4ff-3d20-aeed-29e152d0d9df.roa File: 65ddbd56-d4ff-3d20-aeed-29e152d0d9df.roa (raw, json) Hash identifier: hHr3MvzKQlksjsoS5Q3vxEBNJRsJg1bqoiXXYStSZS0= Subject key identifier: 79:26:49:7A:7B:BB:B5:65:67:AB:AF:54:AB:C6:D0:84:45:2B:AD:D2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849631EC92012BDE8BA7A4D7E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65ddbd56-d4ff-3d20-aeed-29e152d0d9df.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.50.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:c9:20:12:bd:e8:ba:7a:4d:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=37555a00-f170-4959-b45e-2ada92871324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:76:c4:2d:37:c3:1e:7d:08:f5:94:97:e6:66: f3:ad:da:cd:b2:44:c5:b4:dd:18:87:a6:d4:27:b2: 71:fc:8c:03:43:43:31:46:6e:63:e0:eb:54:19:30: f3:ae:5e:dc:e9:d9:76:fe:0f:24:59:0e:11:5e:f3: 5f:3c:66:9c:0d:5c:ef:c0:2c:e4:a0:cb:11:cd:86: 32:cc:bf:d3:98:26:97:19:f1:72:f1:43:7a:20:42: 6d:0c:f3:38:e6:e4:f8:3d:69:81:a0:a7:e5:57:c4: 86:09:72:8a:ef:24:70:a5:68:18:3a:3e:5c:d8:4d: 8e:8f:12:25:a6:6f:c2:63:a7:71:cb:21:14:84:6b: 05:c8:ee:31:73:3b:11:a8:64:5c:24:2a:77:3b:ab: 02:47:50:28:ba:b4:10:eb:92:94:69:22:2c:4b:e4: 82:36:6a:aa:08:a8:be:9f:53:ea:f1:a0:57:72:08: d6:54:d2:67:02:d3:b9:e6:c3:6b:f8:66:6a:ae:4a: cc:84:b0:18:58:9d:14:30:a0:ba:43:8c:5e:16:e2: 07:8f:ee:c9:1d:9e:42:0c:07:38:d8:d5:4e:de:41: bb:9e:6d:dc:32:99:da:70:a3:5b:02:71:2e:94:bc: 3d:26:12:84:a5:49:53:b6:e6:b6:2a:a4:80:82:26: 2b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:26:49:7A:7B:BB:B5:65:67:AB:AF:54:AB:C6:D0:84:45:2B:AD:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65ddbd56-d4ff-3d20-aeed-29e152d0d9df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.50.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:de:13:57:12:f9:5e:ac:ee:af:a1:1f:b9:f0:41:ef:96:ac: a0:7f:55:9f:ad:5e:00:a0:79:f0:98:d0:b0:27:1a:0e:25:49: f0:47:ab:14:b5:eb:ae:75:96:60:9e:a8:aa:91:a8:4a:05:6a: d1:5e:02:6d:ca:e1:8f:dd:82:03:fb:55:57:26:60:9f:ec:99: 70:bc:64:72:6f:bf:d5:36:d1:9b:8f:3c:14:35:2b:d2:d6:7f: 96:e9:a4:0c:d5:a3:71:8b:03:62:12:92:ec:bb:27:02:f5:68: 87:91:f4:3c:66:27:ec:47:08:af:e3:f7:5d:dc:58:e0:0b:72: 68:85:a4:cc:c1:48:51:fe:8c:1f:f7:15:bc:9a:17:ae:04:e6: 70:f4:86:d7:cc:ae:08:2a:51:0f:d7:d7:51:61:6f:1f:d1:21: ab:9b:28:d6:ee:17:f1:72:f1:7e:04:ff:a6:96:7c:e1:ed:ba: 2e:1e:bc:61:49:2a:5d:ef:f7:53:cd:8b:02:4c:75:a0:d3:74: ce:87:b4:c4:c4:3a:09:d6:3f:3b:4f:44:ed:82:1f:37:a7:b9: 7e:85:1a:60:ad:7c:6b:2f:0b:d9:da:f9:40:7b:8a:85:a0:80: f3:ff:fa:b4:48:65:83:f3:40:b9:8e:9e:ff:4c:17:9d:f8:94: ba:73:64:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHskgEr3ounpNfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk Mzc1NTVhMDAtZjE3MC00OTU5LWI0NWUtMmFkYTkyODcxMzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3bELTfDHn0I9ZSX5mbzrdrNskTFtN0Yh6bU J7Jx/IwDQ0MxRm5j4OtUGTDzrl7c6dl2/g8kWQ4RXvNfPGacDVzvwCzkoMsRzYYy zL/TmCaXGfFy8UN6IEJtDPM45uT4PWmBoKflV8SGCXKK7yRwpWgYOj5c2E2OjxIl pm/CY6dxyyEUhGsFyO4xczsRqGRcJCp3O6sCR1AourQQ65KUaSIsS+SCNmqqCKi+ n1Pq8aBXcgjWVNJnAtO55sNr+GZqrkrMhLAYWJ0UMKC6Q4xeFuIHj+7JHZ5CDAc4 2NVO3kG7nm3cMpnacKNbAnEulLw9JhKEpUlTtua2KqSAgiYrCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkmSXp7u7VlZ6uvVKvG0IRFK63SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjVkZGJkNTYtZDRmZi0z ZDIwLWFlZWQtMjllMTUyZDBkOWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzJyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/eE1cS+V6s7q+hH7nwQe+WrKB/VZ+tXgCgefCY0LAnGg4lSfBHqxS1 6651lmCeqKqRqEoFatFeAm3K4Y/dggP7VVcmYJ/smXC8ZHJvv9U20ZuPPBQ1K9LW f5bppAzVo3GLA2ISkuy7JwL1aIeR9DxmJ+xHCK/j913cWOALcmiFpMzBSFH+jB/3 FbyaF64E5nD0htfMrggqUQ/X11Fhbx/RIaubKNbuF/Fy8X4E/6aWfOHtui4evGFJ Kl3v91PNiwJMdaDTdM6HtMTEOgnWPztPRO2CHzenuX6FGmCtfGsvC9na+UB7ioWg gPP/+rRIZYPzQLmOnv9MF534lLpzZCY= -----END CERTIFICATE-----Generated at Sat Apr 5 10:58:54 2025 by rpki-client