$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91f560b1-be0b-300a-9c3f-71da8213ce60.roa File: 91f560b1-be0b-300a-9c3f-71da8213ce60.roa (raw, json) Hash identifier: K+PLWH8we5qB4+EWnlWFHoDXBVkdfwvkXnET+ko2iJA= Subject key identifier: 61:07:B8:AB:BE:B8:B7:B7:BE:97:64:3E:F5:76:05:E3:CA:DB:D0:A4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849244E8DA1B5D48E312C3D7080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91f560b1-be0b-300a-9c3f-71da8213ce60.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.3.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:8d:a1:b5:d4:8e:31:2c:3d:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=663f3567-47f2-46a6-aebf-21e53ff3388f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ea:44:e6:d0:19:14:a2:13:fc:6a:e4:64:b1: 27:5c:f5:76:1b:12:13:34:61:e8:f8:bf:b5:d3:76: 1e:d7:49:41:ac:de:65:f2:12:08:38:dd:cd:79:62: bb:28:10:14:ac:da:57:da:a1:44:b1:f0:7a:67:78: 68:37:17:4a:59:6b:e4:ed:f2:83:d1:79:b7:d9:58: c1:64:5d:8a:61:c9:71:74:64:19:38:fd:90:03:ac: f4:a7:3e:60:dc:39:45:45:84:c9:3f:79:6b:c9:13: 0f:8a:dc:02:82:6d:ac:de:68:95:64:de:14:b1:6a: e1:e7:97:a8:f7:d5:c3:25:40:9f:d1:67:d1:a9:b4: d6:35:8c:15:57:73:ae:a2:08:c0:f9:32:39:83:64: 2b:fe:7e:6e:d6:9f:97:df:4c:93:e8:39:30:d7:dd: 87:08:22:dd:67:08:cc:56:cc:4b:8a:f4:a1:7b:f8: 33:bb:c7:4d:f8:f9:58:1d:13:93:f0:29:ed:d9:e0: be:04:42:57:a0:87:70:24:99:de:99:5a:b0:43:3f: 8c:fc:b7:6b:90:e8:80:f2:f8:b1:32:ba:7c:13:da: 00:2f:98:4c:03:86:45:ae:8b:f3:e4:be:11:46:24: 6a:d7:07:9c:24:d5:4d:d9:45:8e:ec:fe:ff:ea:d6: 6c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:07:B8:AB:BE:B8:B7:B7:BE:97:64:3E:F5:76:05:E3:CA:DB:D0:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91f560b1-be0b-300a-9c3f-71da8213ce60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:81:fd:38:8e:29:b2:7e:18:1f:02:09:d3:7d:d0:c1:f0:91: 7a:25:8f:a6:2e:a3:7f:3b:e6:04:eb:40:85:5a:f9:d3:fe:c7: 9b:ce:88:d4:ce:97:d1:63:4f:af:3a:e8:46:5d:9a:15:1c:f2: b6:2b:4a:73:5d:ac:6e:46:19:f3:2f:20:c6:ee:c7:54:31:e3: d1:4c:51:19:22:5d:48:27:48:ec:22:9a:2c:41:71:29:d5:10: 25:57:52:d7:a4:92:8c:85:fd:4e:44:39:ec:a3:36:2a:21:d2: d9:4e:92:22:e8:77:0b:5c:75:04:8e:36:cb:61:84:88:e1:e5: 55:fc:03:72:bf:5e:ec:b5:d8:0b:81:61:d2:ab:cb:68:93:35: 08:2c:c0:c7:3b:6c:01:49:3e:8a:53:8f:79:4c:b5:d9:54:eb: 24:c7:a5:4c:87:ee:1a:88:36:aa:26:27:e8:44:52:01:d9:b2: 3e:fe:ca:00:7f:27:04:2e:2c:9b:1a:7e:eb:f3:44:b2:49:27: 40:bc:10:a6:0d:39:98:9c:6d:59:d1:ef:ff:8b:b0:f5:a5:4b: c9:08:10:70:35:33:43:59:96:53:89:25:83:df:ea:e8:b3:86: f2:02:cb:e6:c2:b5:57:f2:64:f4:d3:7b:38:99:bc:cf:e3:be: b2:40:38:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTo2htdSOMSw9cIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NjYzZjM1NjctNDdmMi00NmE2LWFlYmYtMjFlNTNmZjMzODhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOpE5tAZFKIT/GrkZLEnXPV2GxITNGHo+L+1 03Ye10lBrN5l8hIION3NeWK7KBAUrNpX2qFEsfB6Z3hoNxdKWWvk7fKD0Xm32VjB ZF2KYclxdGQZOP2QA6z0pz5g3DlFRYTJP3lryRMPitwCgm2s3miVZN4UsWrh55eo 99XDJUCf0WfRqbTWNYwVV3OuogjA+TI5g2Qr/n5u1p+X30yT6Dkw192HCCLdZwjM VsxLivShe/gzu8dN+PlYHROT8Cnt2eC+BEJXoIdwJJnemVqwQz+M/LdrkOiA8vix Mrp8E9oAL5hMA4ZFrovz5L4RRiRq1wecJNVN2UWO7P7/6tZsZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEHuKu+uLe3vpdkPvV2BePK29CkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTFmNTYwYjEtYmUwYi0z MDBhLTljM2YtNzFkYTgyMTNjZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwNHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuB/TiOKbJ+GB8CCdN90MHwkXolj6Yuo3875gTrQIVa+dP+x5vOiNTO l9FjT6866EZdmhUc8rYrSnNdrG5GGfMvIMbux1Qx49FMURkiXUgnSOwimixBcSnV ECVXUtekkoyF/U5EOeyjNioh0tlOkiLodwtcdQSONsthhIjh5VX8A3K/Xuy12AuB YdKry2iTNQgswMc7bAFJPopTj3lMtdlU6yTHpUyH7hqINqomJ+hEUgHZsj7+ygB/ JwQuLJsafuvzRLJJJ0C8EKYNOZicbVnR7/+LsPWlS8kIEHA1M0NZllOJJYPf6uiz hvICy+bCtVfyZPTTeziZvM/jvrJAOOY= -----END CERTIFICATE-----Generated at Sat Apr 5 12:33:20 2025 by rpki-client