$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c31a468-e60d-3d1c-9a08-c18714e05b79.roa File: 6c31a468-e60d-3d1c-9a08-c18714e05b79.roa (raw, json) Hash identifier: VeX+LzjgMCVn3DsJPkpMGr2B6WnlQ8rFd6wFWcXjQJQ= Subject key identifier: 82:64:8E:74:6F:6E:E0:F4:5D:3B:72:DA:F4:46:BA:24:7A:DC:1D:12 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858491ED6F2C086BCCA632B89EF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c31a468-e60d-3d1c-9a08-c18714e05b79.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.72.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:f2:c0:86:bc:ca:63:2b:89:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=5f4e0422-3036-4b9d-aa35-72be9de160f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:79:e1:1c:d4:1d:49:f2:aa:9d:5e:95:d9:ad: 39:de:b1:36:ba:16:7e:08:92:95:84:07:fd:f6:c3: de:c3:68:1d:05:4a:b1:eb:f8:89:8c:1c:57:97:60: b5:be:41:df:42:f9:2a:fd:67:a1:85:52:54:27:26: 69:6f:bb:0c:76:f3:f2:00:48:e4:90:26:26:1a:88: 99:9f:51:52:21:0c:03:45:a1:18:65:87:71:76:7c: f9:49:0f:0a:ca:ba:53:03:cf:ae:00:03:9d:f2:31: 4c:42:72:b7:1a:6e:45:76:5e:6d:a7:66:c7:10:b7: f1:e9:fb:06:4c:a1:44:0c:9c:d6:b1:1b:a1:4d:97: ff:78:91:c1:1d:f1:9a:4b:e5:c4:11:52:fc:a5:e6: 3f:f3:f2:54:a4:0f:ff:99:60:e7:19:53:a1:3f:42: 28:81:44:0a:20:12:1e:de:09:de:95:8e:3f:3c:64: f7:c1:7e:74:be:ac:3d:fe:7e:27:0e:4f:1f:ce:58: 27:bd:02:30:bf:33:81:b9:ea:d2:8a:e4:09:da:c1: 12:42:f5:86:4e:a7:4e:36:59:23:cf:26:31:f5:cc: b2:6c:88:d9:82:36:68:c7:4e:e4:4a:8c:97:62:ce: fb:65:d1:c3:c7:94:06:18:13:e8:b1:06:11:24:ab: f4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:64:8E:74:6F:6E:E0:F4:5D:3B:72:DA:F4:46:BA:24:7A:DC:1D:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c31a468-e60d-3d1c-9a08-c18714e05b79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.72.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:05:99:cc:cc:46:1b:24:67:3d:ed:cd:a9:ec:3b:64:ed:44: 19:9f:89:70:02:6e:03:56:d4:af:2c:22:65:fd:af:d7:5a:73: 36:12:c0:2e:4b:ad:f7:e8:9f:85:d9:83:6f:a0:ba:7a:fc:f2: 78:36:a9:59:bc:a9:c2:f8:83:8b:2d:e7:91:dd:85:94:2b:7c: 84:c6:0e:d3:8e:86:89:4c:07:09:f3:f7:8f:3b:aa:b1:fb:ed: bb:ef:75:28:06:8d:75:7d:08:4e:d2:9c:ed:78:50:f7:cf:8d: 3c:aa:b3:45:26:e6:e2:94:bd:41:aa:6a:5b:00:84:fb:e7:a4: 5c:67:f4:60:76:8c:8e:fe:21:aa:bf:47:b5:56:b0:14:d9:64: c3:69:79:f3:ae:30:c0:80:df:84:79:10:b5:a0:8b:90:19:9a: d3:c3:32:83:a3:c4:f6:39:e9:b0:61:42:b1:34:84:93:bd:30: 0c:60:98:cc:f0:14:26:0c:05:67:19:ab:62:68:78:74:96:7f: 13:e0:73:bb:1e:18:ac:a7:6c:d2:94:b0:b6:35:a0:75:cf:11: a5:ea:ed:49:eb:a2:e0:c9:73:84:8b:a7:ed:b0:36:9a:45:5e: 79:4f:da:d2:d6:76:08:e4:90:27:4a:b4:b2:bc:eb:4e:4f:0c: d3:0c:fa:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1vLAhrzKYyuJ74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk NWY0ZTA0MjItMzAzNi00YjlkLWFhMzUtNzJiZTlkZTE2MGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3nhHNQdSfKqnV6V2a053rE2uhZ+CJKVhAf9 9sPew2gdBUqx6/iJjBxXl2C1vkHfQvkq/WehhVJUJyZpb7sMdvPyAEjkkCYmGoiZ n1FSIQwDRaEYZYdxdnz5SQ8KyrpTA8+uAAOd8jFMQnK3Gm5Fdl5tp2bHELfx6fsG TKFEDJzWsRuhTZf/eJHBHfGaS+XEEVL8peY/8/JUpA//mWDnGVOhP0IogUQKIBIe 3gnelY4/PGT3wX50vqw9/n4nDk8fzlgnvQIwvzOBuerSiuQJ2sESQvWGTqdONlkj zyYx9cyybIjZgjZox07kSoyXYs77ZdHDx5QGGBPosQYRJKv0uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJkjnRvbuD0XTty2vRGuiR63B0SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmMzMWE0NjgtZTYwZC0z ZDFjLTlhMDgtYzE4NzE0ZTA1Yjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0gkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0FmczMRhskZz3tzansO2TtRBmfiXACbgNW1K8sImX9r9daczYSwC5L rffon4XZg2+gunr88ng2qVm8qcL4g4st55HdhZQrfITGDtOOholMBwnz9487qrH7 7bvvdSgGjXV9CE7SnO14UPfPjTyqs0Um5uKUvUGqalsAhPvnpFxn9GB2jI7+Iaq/ R7VWsBTZZMNpefOuMMCA34R5ELWgi5AZmtPDMoOjxPY56bBhQrE0hJO9MAxgmMzw FCYMBWcZq2JoeHSWfxPgc7seGKynbNKUsLY1oHXPEaXq7UnrouDJc4SLp+2wNppF XnlP2tLWdgjkkCdKtLK8605PDNMM+sQ= -----END CERTIFICATE-----Generated at Sat Apr 5 10:53:31 2025 by rpki-client