$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/861ccb56-bcc5-31e3-b2a3-420b4c0b32b2.roa File: 861ccb56-bcc5-31e3-b2a3-420b4c0b32b2.roa (raw, json) Hash identifier: Y6yeyLvXHtuMdc4MloMyjWneG/eObMdPwym6av9WSwE= Subject key identifier: 94:B9:A1:7A:54:F7:BE:B4:AE:4F:8D:4A:92:5F:5D:26:D6:86:40:04 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848D2114503F3B89D5A8505FBF8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/861ccb56-bcc5-31e3-b2a3-420b4c0b32b2.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.43.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:45:03:f3:b8:9d:5a:85:05:fb:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=1fb928f0-b10a-412f-a072-e30959f09b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5f:bc:4a:52:f1:a2:5a:62:14:52:c7:71:42: 9e:80:c3:93:fb:47:1d:ec:e3:5a:3d:ed:2d:3e:3d: e5:2f:26:e9:00:66:5d:35:7d:d3:38:4f:18:c2:86: c4:19:85:72:70:02:c5:50:83:c6:01:31:6b:d5:6c: 0f:e4:30:a3:50:ba:1b:36:2f:1e:49:0b:2a:ad:a4: 72:ce:0c:cd:88:b0:c8:6b:41:f6:c3:81:71:38:be: 60:f8:23:ef:0f:8b:26:eb:19:da:da:4f:d6:f4:a5: ab:fb:d3:a3:f8:27:8e:a9:16:2d:1d:cd:bf:2a:0d: dc:53:39:56:2a:a2:5e:e3:60:15:cc:ba:11:6a:af: 5a:21:47:73:79:e4:bc:b4:02:c2:60:5e:17:07:80: 0d:1f:7f:83:e5:37:75:5c:3f:b3:10:83:5b:9c:b7: 1a:71:1c:4a:e7:29:d0:dc:41:37:de:5a:3b:3a:76: ec:90:fe:81:57:c3:e7:aa:f4:9b:29:6b:0b:c2:37: 20:08:8c:38:a0:d0:04:81:9a:be:ed:a5:cc:1e:64: d8:60:9e:5a:ea:94:56:09:94:d0:2e:55:bd:b2:08: 06:b6:d2:a8:5b:c1:59:17:01:b5:5d:65:86:4b:7f: c7:ba:9e:b1:67:04:bf:ad:be:8f:4f:ed:d8:2b:88: 5c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B9:A1:7A:54:F7:BE:B4:AE:4F:8D:4A:92:5F:5D:26:D6:86:40:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/861ccb56-bcc5-31e3-b2a3-420b4c0b32b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:e4:82:f9:04:0d:5b:fd:70:68:4f:14:e4:02:e7:c9:cc:d0: f0:a0:c2:b0:76:5d:fe:ce:36:cc:22:74:97:72:a2:17:c1:de: b9:48:b4:af:78:30:63:fc:bc:7c:1e:3e:f3:5f:c8:3e:b1:ef: 7c:f8:0b:31:01:35:73:e8:dc:ff:70:cb:81:75:78:51:20:65: c6:94:47:f1:78:04:67:35:09:32:39:44:35:0e:94:0b:0d:b0: f4:e0:34:b8:92:0e:81:0c:37:db:05:20:85:b3:df:a2:fe:31: dc:69:a4:4d:d8:47:23:25:67:55:5f:4b:62:54:1a:88:da:cf: 97:04:4d:9e:89:db:97:1f:b4:83:c9:c5:a9:4a:98:39:de:29: 0d:04:37:e7:4f:cb:c0:b7:63:79:17:ab:bc:fa:e9:d7:6e:e3: db:7b:97:41:ad:30:b0:9f:c5:f7:17:9c:52:15:e2:e0:7c:a4: 60:07:fa:e3:63:c8:14:f3:fd:ee:f7:a4:6a:37:6f:04:6c:19: 4d:b5:54:76:42:10:77:87:c8:e1:b2:1b:12:69:fc:4c:5f:58: 73:cd:26:49:f6:39:be:9a:50:9d:04:05:3c:9f:22:3f:1f:a4: 16:13:2c:20:fc:ff:cc:a3:c9:90:24:8a:76:f8:a7:35:1c:f2: 9b:50:28:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEUUD87idWoUF+/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MWZiOTI4ZjAtYjEwYS00MTJmLWEwNzItZTMwOTU5ZjA5YjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF+8SlLxolpiFFLHcUKegMOT+0cd7ONaPe0t Pj3lLybpAGZdNX3TOE8YwobEGYVycALFUIPGATFr1WwP5DCjULobNi8eSQsqraRy zgzNiLDIa0H2w4FxOL5g+CPvD4sm6xna2k/W9KWr+9Oj+CeOqRYtHc2/Kg3cUzlW KqJe42AVzLoRaq9aIUdzeeS8tALCYF4XB4ANH3+D5Td1XD+zEINbnLcacRxK5ynQ 3EE33lo7OnbskP6BV8PnqvSbKWsLwjcgCIw4oNAEgZq+7aXMHmTYYJ5a6pRWCZTQ LlW9sggGttKoW8FZFwG1XWWGS3/Hup6xZwS/rb6PT+3YK4hccQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJS5oXpU9760rk+NSpJfXSbWhkAEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODYxY2NiNTYtYmNjNS0z MWUzLWIyYTMtNDIwYjRjMGIzMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFysAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnkgvkEDVv9cGhPFOQC58nM0PCgwrB2Xf7ONswidJdyohfB3rlItK94 MGP8vHwePvNfyD6x73z4CzEBNXPo3P9wy4F1eFEgZcaUR/F4BGc1CTI5RDUOlAsN sPTgNLiSDoEMN9sFIIWz36L+MdxppE3YRyMlZ1VfS2JUGojaz5cETZ6J25cftIPJ xalKmDneKQ0EN+dPy8C3Y3kXq7z66ddu49t7l0GtMLCfxfcXnFIV4uB8pGAH+uNj yBTz/e73pGo3bwRsGU21VHZCEHeHyOGyGxJp/ExfWHPNJkn2Ob6aUJ0EBTyfIj8f pBYTLCD8/8yjyZAkinb4pzUc8ptQKFk= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:39 2025 by rpki-client