$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/811df8d9-830b-37d6-bc85-2b6ea1514864.roa File: 811df8d9-830b-37d6-bc85-2b6ea1514864.roa (raw, json) Hash identifier: Wvr4++f0DVuZMVyMpMt6c0jWylPnkvy5AkEUwgbzQaM= Subject key identifier: EC:7B:1B:B9:BA:09:E1:CD:D1:6E:22:31:13:2B:E4:FC:13:26:D9:87 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495EEEF86800A5EB9F7E7F2380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/811df8d9-830b-37d6-bc85-2b6ea1514864.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 16625 IP address blocks: 23.48.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:f8:68:00:a5:eb:9f:7e:7f:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=27c5331f-158f-434b-91c5-b19302131c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a0:74:53:cf:9d:0b:f7:8d:dc:3c:08:98:21: d4:5d:bf:9a:80:d1:a8:17:0e:d8:d5:49:52:57:c8: 56:bf:cd:92:51:83:30:51:f5:49:3e:93:8f:91:49: 9f:5d:9a:43:20:e3:c6:68:60:5e:68:e7:d1:d7:b0: d3:0f:b9:ad:05:c3:6a:f6:18:07:9a:8b:9f:9b:ff: ce:b2:52:d7:1d:70:bc:ec:11:5f:2c:06:49:67:30: 86:47:79:d7:c5:a2:d6:dd:78:84:1b:e7:37:a6:b8: a6:68:b1:8e:0b:ae:91:0e:22:e9:56:e4:cd:15:75: 22:db:35:cf:f2:a5:d1:76:02:99:9e:61:8e:76:c4: 11:d9:5e:08:0f:3f:ed:41:06:31:f5:ae:8e:0d:32: 20:41:24:de:12:49:7f:8a:96:1a:9c:a8:9e:14:dd: 05:c9:51:c9:69:5c:56:11:85:68:ff:9e:f2:07:c8: 41:e6:83:64:96:42:11:c6:e0:fd:84:1b:01:11:63: 0b:fa:7a:1a:db:3d:16:1d:dc:dd:f8:19:81:40:10: 36:1d:e9:ef:f8:f3:09:4a:0e:b4:c1:52:44:27:4a: 79:3f:2f:1a:b5:25:7d:3b:98:fd:48:7d:48:36:11: d8:20:b4:47:ff:8b:e2:01:31:0a:3a:74:66:89:7a: 0b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:7B:1B:B9:BA:09:E1:CD:D1:6E:22:31:13:2B:E4:FC:13:26:D9:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/811df8d9-830b-37d6-bc85-2b6ea1514864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:32:3d:26:f7:67:f6:a5:bc:1a:6d:67:97:73:ed:37:20:14: 68:36:66:0a:54:d9:4a:24:9b:12:28:5d:3d:96:26:2e:6f:b7: c3:57:e8:42:15:71:d5:00:75:7d:cc:73:7c:d5:22:a5:eb:56: 75:f4:59:61:13:43:e3:20:a9:07:f1:f2:d7:4a:18:69:dd:ca: 5c:8d:85:0a:25:d1:0e:f4:24:a8:f5:84:9b:56:84:e5:2d:f1: 38:f1:23:6d:82:f1:c8:52:45:04:00:82:e2:b0:4f:2f:9c:fe: e3:32:5e:b7:35:58:d1:18:ba:ef:66:03:59:f6:97:62:35:6a: 00:ec:eb:a1:7b:d0:76:bf:f9:f2:1e:8a:be:33:ca:93:2a:d0: d6:47:e9:7d:92:b8:a9:52:25:8a:81:39:ea:9d:56:a3:62:6c: 31:d9:08:a0:f4:5a:2f:77:3b:61:a4:57:c5:be:9a:ba:03:93: cd:e2:f5:a3:1a:f9:7f:f0:a2:a4:40:6d:18:6e:f9:85:9b:55: 95:6e:2c:1d:4e:d9:dd:ef:9b:64:6b:c9:b4:c3:cc:76:3d:a9: a6:31:83:5b:50:56:e1:62:67:5d:0c:5d:e8:54:19:ab:43:16: 13:8e:ac:68:90:49:e0:34:8c:d9:37:75:0b:12:40:20:37:f8: 14:d9:50:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7vhoAKXrn35/I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk MjdjNTMzMWYtMTU4Zi00MzRiLTkxYzUtYjE5MzAyMTMxYzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6B0U8+dC/eN3DwImCHUXb+agNGoFw7Y1UlS V8hWv82SUYMwUfVJPpOPkUmfXZpDIOPGaGBeaOfR17DTD7mtBcNq9hgHmoufm//O slLXHXC87BFfLAZJZzCGR3nXxaLW3XiEG+c3primaLGOC66RDiLpVuTNFXUi2zXP 8qXRdgKZnmGOdsQR2V4IDz/tQQYx9a6ODTIgQSTeEkl/ipYanKieFN0FyVHJaVxW EYVo/57yB8hB5oNklkIRxuD9hBsBEWML+noa2z0WHdzd+BmBQBA2Henv+PMJSg60 wVJEJ0p5Py8atSV9O5j9SH1INhHYILRH/4viATEKOnRmiXoLEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOx7G7m6CeHN0W4iMRMr5PwTJtmHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODExZGY4ZDktODMwYi0z N2Q2LWJjODUtMmI2ZWExNTE0ODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzDsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoyPSb3Z/alvBptZ5dz7TcgFGg2ZgpU2UokmxIoXT2WJi5vt8NX6EIV cdUAdX3Mc3zVIqXrVnX0WWETQ+MgqQfx8tdKGGndylyNhQol0Q70JKj1hJtWhOUt 8TjxI22C8chSRQQAguKwTy+c/uMyXrc1WNEYuu9mA1n2l2I1agDs66F70Ha/+fIe ir4zypMq0NZH6X2SuKlSJYqBOeqdVqNibDHZCKD0Wi93O2GkV8W+mroDk83i9aMa +X/woqRAbRhu+YWbVZVuLB1O2d3vm2RrybTDzHY9qaYxg1tQVuFiZ10MXehUGatD FhOOrGiQSeA0jNk3dQsSQCA3+BTZUD0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:07:31 2025 by rpki-client