$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68034935-a1e3-39b8-b6a8-49dedadd873a.roa File: 68034935-a1e3-39b8-b6a8-49dedadd873a.roa (raw, json) Hash identifier: ng5GgWHzS+L4JwzZ9CYdFFAJhmFV3mNd2GNB7WhFqWM= Subject key identifier: D5:CB:EF:E4:15:6D:87:A2:D6:F8:8F:FB:E0:1B:E9:91:AF:59:88:29 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858491ED6D3CDB82194C18C54DD80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68034935-a1e3-39b8-b6a8-49dedadd873a.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.40.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:d3:cd:b8:21:94:c1:8c:54:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=572fd34c-3cfd-4965-89b3-b1e358185fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:98:99:44:21:b5:47:98:44:26:6e:1b:7d:29: c2:93:37:2a:95:93:ff:50:d3:10:7c:d6:88:ee:0e: 16:50:11:c4:e7:b4:ea:76:f0:51:a9:28:b9:75:2f: b8:d9:9b:6a:ca:dc:75:ee:44:21:1f:22:c9:e6:bc: de:3c:3d:9c:c0:ce:ff:9c:65:b8:9a:56:7a:ae:6c: f0:0e:af:ad:a9:13:f6:18:12:da:30:c8:68:d1:f0: fa:57:19:f5:f0:36:66:2f:c5:22:04:b0:b3:55:33: 01:f2:62:94:b7:af:a9:a4:29:65:83:25:33:29:ee: b7:74:5f:1c:7c:56:01:a3:71:3c:f6:e1:42:3a:12: 01:42:b3:2d:48:53:d0:98:80:08:fe:89:3d:64:3f: 25:ee:04:05:b0:1b:d8:3b:ff:96:4f:70:8c:56:9d: 0a:cd:f0:ce:ad:0a:32:5e:3f:79:ab:e9:48:16:db: a0:7c:bc:e4:af:0b:18:62:6c:f6:95:9c:07:02:8c: c9:63:e1:a2:a6:88:06:eb:c6:40:0e:85:bb:0c:4e: c4:78:24:3a:d5:1f:16:e2:5a:63:97:b9:38:bb:4a: 88:25:fb:64:97:1a:ce:c3:b0:8f:41:5c:48:e5:dd: 59:47:3a:fb:c5:88:28:aa:2b:39:6e:00:39:44:7a: e1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CB:EF:E4:15:6D:87:A2:D6:F8:8F:FB:E0:1B:E9:91:AF:59:88:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68034935-a1e3-39b8-b6a8-49dedadd873a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:8b:b1:15:9b:eb:5e:cb:cb:13:a1:9e:47:d6:fb:f4:0c:ed: 27:55:b5:80:f0:f6:54:8b:48:9b:98:c6:cc:f4:49:e2:17:bc: 0c:d9:58:bc:13:70:0e:7c:0c:33:e7:0f:a0:c5:fe:5b:bf:ea: d7:0f:cf:94:20:de:7e:b7:99:7c:96:fd:cd:26:56:97:90:41: 88:66:4a:8c:8a:3b:e6:7b:4d:d6:58:2a:de:41:59:76:8a:c7: d5:72:6e:af:70:4e:bb:db:2a:5b:13:80:54:37:16:c9:98:7e: 2b:45:37:c8:35:81:e1:6a:51:3f:3b:98:9c:50:55:4d:76:ba: 93:44:c5:f5:3a:b6:e7:78:64:52:6b:a8:9f:9c:ea:37:17:ae: c3:d9:81:ee:2a:48:c3:e0:f3:e0:ae:98:58:f1:ce:ff:62:72: b2:ec:00:bb:a8:52:96:38:47:17:a8:ad:c9:1d:a4:b8:22:f4: e9:15:49:01:d4:6e:5b:69:13:10:77:02:55:c5:8d:eb:be:da: ff:94:b2:c7:20:d5:5c:56:bd:5c:a1:a5:31:19:16:94:50:ee: 05:6f:ba:43:e0:52:4c:ce:89:5f:bd:6a:7f:a7:33:66:39:1f: 47:9c:4d:6d:d8:82:ea:a7:7c:64:ac:92:c1:f3:b7:40:d7:82: ad:f0:b7:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1tPNuCGUwYxU3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk NTcyZmQzNGMtM2NmZC00OTY1LTg5YjMtYjFlMzU4MTg1ZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpiZRCG1R5hEJm4bfSnCkzcqlZP/UNMQfNaI 7g4WUBHE57TqdvBRqSi5dS+42Ztqytx17kQhHyLJ5rzePD2cwM7/nGW4mlZ6rmzw Dq+tqRP2GBLaMMho0fD6Vxn18DZmL8UiBLCzVTMB8mKUt6+ppCllgyUzKe63dF8c fFYBo3E89uFCOhIBQrMtSFPQmIAI/ok9ZD8l7gQFsBvYO/+WT3CMVp0KzfDOrQoy Xj95q+lIFtugfLzkrwsYYmz2lZwHAozJY+GipogG68ZADoW7DE7EeCQ61R8W4lpj l7k4u0qIJftklxrOw7CPQVxI5d1ZRzr7xYgoqis5bgA5RHrh7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXL7+QVbYei1viP++Ab6ZGvWYgpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjgwMzQ5MzUtYTFlMy0z OWI4LWI2YTgtNDlkZWRhZGQ4NzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFygwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECLsRWb617LyxOhnkfW+/QM7SdVtYDw9lSLSJuYxsz0SeIXvAzZWLwT cA58DDPnD6DF/lu/6tcPz5Qg3n63mXyW/c0mVpeQQYhmSoyKO+Z7TdZYKt5BWXaK x9Vybq9wTrvbKlsTgFQ3FsmYfitFN8g1geFqUT87mJxQVU12upNExfU6tud4ZFJr qJ+c6jcXrsPZge4qSMPg8+CumFjxzv9icrLsALuoUpY4RxeorckdpLgi9OkVSQHU bltpExB3AlXFjeu+2v+Usscg1VxWvVyhpTEZFpRQ7gVvukPgUkzOiV+9an+nM2Y5 H0ecTW3YguqnfGSsksHzt0DXgq3wtyI= -----END CERTIFICATE-----Generated at Fri Mar 14 15:03:25 2025 by rpki-client