$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66d5de12-1b28-30ff-94c3-30e52d093117.roa File: 66d5de12-1b28-30ff-94c3-30e52d093117.roa (raw, json) Hash identifier: opRuCgHR89T2VwuY/hoGkyAfkxx6BoxViKLkYtlPS/w= Subject key identifier: 66:65:CE:8C:FA:84:9D:77:7B:DE:66:4E:E9:06:F6:F2:49:7B:3A:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849244E8F6F8F23F081BEE9DD00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66d5de12-1b28-30ff-94c3-30e52d093117.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.12.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:8f:6f:8f:23:f0:81:be:e9:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=eec073a7-dd30-4c23-8072-2346579ecccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e2:f2:e0:a8:43:97:72:37:7b:e9:8f:61:23: 15:35:45:e2:9e:7d:df:fc:fb:37:9b:20:d8:e7:06: a7:a0:55:d6:2f:af:7a:cd:1b:80:a0:e8:e4:9c:35: 20:b3:42:06:38:f7:fd:e9:d8:ea:52:73:ae:b9:b2: 9f:3b:7c:9a:19:6e:23:b3:ef:9e:5b:ec:db:d7:a2: ae:91:6e:86:74:30:a0:8b:bf:a3:8d:b6:95:b3:46: 29:31:2b:4c:09:c0:0b:df:0b:25:b1:b1:ae:70:d5: e8:d9:21:10:44:f5:f4:35:19:9a:3d:70:e9:60:ff: 97:29:28:a8:1e:80:d7:65:fe:14:28:df:56:67:35: 99:29:8c:39:10:7b:6c:05:53:94:df:be:5b:63:7c: a8:67:1d:f5:2d:31:cb:b3:b1:81:c4:70:de:ff:d3: c9:18:df:d1:67:db:f5:dc:ea:69:62:0d:fd:4e:cd: 0b:e2:dd:68:10:4d:3d:60:37:05:3d:c6:aa:be:db: 9e:31:63:d4:37:9e:d3:26:2a:1d:d0:74:11:16:aa: 93:75:1e:3d:e7:e3:ad:2e:42:f9:32:97:8f:58:fa: db:6d:89:77:da:3a:13:9f:d0:28:e1:d7:6e:e0:ff: c6:8b:fe:1d:d3:34:7c:be:d5:94:37:04:9a:19:d1: 5e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:65:CE:8C:FA:84:9D:77:7B:DE:66:4E:E9:06:F6:F2:49:7B:3A:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66d5de12-1b28-30ff-94c3-30e52d093117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.12.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:39:ed:3e:48:1e:4b:63:4f:29:5d:68:b8:9d:e7:45:f6:2e: 1f:ac:7f:80:41:b3:5c:2b:07:48:a0:22:a7:93:41:08:80:09: 5a:78:e9:ff:4e:4b:3c:76:2a:db:6e:1b:c1:a0:a1:9c:b5:12: e5:4e:10:a8:a8:72:d6:4b:36:cd:e5:67:78:5f:09:40:b5:e0: d2:fc:e5:de:a2:fd:6c:78:e7:46:41:60:36:20:54:e8:5d:60: 6e:77:c9:b8:0b:68:6c:0f:7f:65:9d:85:35:40:0d:b5:be:6e: a5:97:1f:aa:af:ea:db:97:c2:02:5c:d3:76:ba:a9:54:d3:2d: 94:ab:67:51:d4:01:2d:43:ef:cc:95:8a:43:a8:0f:b4:df:3d: 9e:ab:54:ac:cf:73:f9:d0:0b:b4:ae:f9:77:e8:e2:0d:3f:d3: d2:85:a0:3e:b1:69:01:ac:52:2d:af:a3:6f:88:26:6c:8f:fe: b9:66:28:85:b2:08:81:36:48:d5:11:d3:bc:74:bf:bc:65:ea: 45:81:4a:09:e7:02:f3:7d:1c:74:b5:86:82:66:53:9c:73:2b: 42:a8:9f:a7:4c:85:c5:7c:ac:73:cf:02:36:70:59:cb:35:94: 95:39:e1:23:43:76:cb:da:85:96:86:91:58:42:7c:50:4c:78: 6b:48:b9:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTo9vjyPwgb7p3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk ZWVjMDczYTctZGQzMC00YzIzLTgwNzItMjM0NjU3OWVjY2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveLy4KhDl3I3e+mPYSMVNUXinn3f/Ps3myDY 5wanoFXWL696zRuAoOjknDUgs0IGOPf96djqUnOuubKfO3yaGW4js++eW+zb16Ku kW6GdDCgi7+jjbaVs0YpMStMCcAL3wslsbGucNXo2SEQRPX0NRmaPXDpYP+XKSio HoDXZf4UKN9WZzWZKYw5EHtsBVOU375bY3yoZx31LTHLs7GBxHDe/9PJGN/RZ9v1 3OppYg39Ts0L4t1oEE09YDcFPcaqvtueMWPUN57TJiod0HQRFqqTdR495+OtLkL5 MpePWPrbbYl32joTn9Ao4ddu4P/Gi/4d0zR8vtWUNwSaGdFe0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZlzoz6hJ13e95mTukG9vJJezr7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjZkNWRlMTItMWIyOC0z MGZmLTk0YzMtMzBlNTJkMDkzMTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwwoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACU57T5IHktjTyldaLid50X2Lh+sf4BBs1wrB0igIqeTQQiACVp46f9O Szx2KttuG8GgoZy1EuVOEKioctZLNs3lZ3hfCUC14NL85d6i/Wx450ZBYDYgVOhd YG53ybgLaGwPf2WdhTVADbW+bqWXH6qv6tuXwgJc03a6qVTTLZSrZ1HUAS1D78yV ikOoD7TfPZ6rVKzPc/nQC7Su+Xfo4g0/09KFoD6xaQGsUi2vo2+IJmyP/rlmKIWy CIE2SNUR07x0v7xl6kWBSgnnAvN9HHS1hoJmU5xzK0Kon6dMhcV8rHPPAjZwWcs1 lJU54SNDdsvahZaGkVhCfFBMeGtIuZo= -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:59 2025 by rpki-client