$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99040fbd-052b-3815-9f8d-3f48368c2a90.roa File: 99040fbd-052b-3815-9f8d-3f48368c2a90.roa (raw, json) Hash identifier: leZeEm+bSDt/XuUyM8Fa/BA8SeL3oF3oXjzj/3osuTo= Subject key identifier: 93:FA:4C:FD:F6:D1:D0:85:D0:56:EB:98:AF:43:AA:C7:33:78:B4:EA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584926CFF7BDD029D890F2AF7C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99040fbd-052b-3815-9f8d-3f48368c2a90.roa Signing time: Tue 11 Mar 2025 10:33:34 +0000 ROA not before: Tue 11 Mar 2025 10:33:34 +0000 ROA not after: Mon 09 Jun 2025 10:33:34 +0000 asID: 16625 IP address blocks: 23.1.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:26:cf:f7:bd:d0:29:d8:90:f2:af:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 11 10:33:34 2025 GMT Not After : Jun 9 10:33:34 2025 GMT Subject: CN=6005ab24-9f58-4502-8de6-f3cf75e33a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9d:51:a6:5d:1b:af:98:08:43:0e:7b:d1:2a: cd:8f:2b:b9:42:07:46:1a:c8:30:2c:d3:88:d1:2c: c5:0d:88:8b:38:9a:87:07:35:e8:75:a3:82:a7:8e: 73:4e:e7:db:60:9d:6e:9c:e6:3c:50:3e:0b:a2:ee: 0c:44:98:9e:6c:b9:cc:7a:a0:e5:18:a6:08:d6:c5: 7c:d3:82:30:aa:3b:ec:52:0d:e8:48:5d:83:12:66: 20:fd:a9:36:d1:e0:ab:b8:9b:7d:50:79:ee:6e:c5: ac:b6:ba:0f:1c:f7:07:cb:dd:bf:35:dc:77:96:c6: 2f:5a:48:44:d0:50:aa:6e:8d:ed:89:bc:41:36:ed: 4d:37:f9:6b:76:80:3b:6a:6b:77:3a:68:02:3f:19: 54:f4:80:a4:5a:7b:94:bd:40:dc:02:65:22:b4:af: 8b:3b:c3:2a:d7:8f:16:d8:9f:5e:16:a8:fd:5e:ea: 8f:5b:84:4f:06:be:3f:b6:ed:71:ab:03:f4:22:40: 02:26:9a:a2:6f:b4:f1:c5:f0:5a:37:61:f6:6c:51: 41:9f:a4:db:bc:c1:34:48:46:90:68:74:4f:d5:ef: 89:a2:bb:03:c8:cf:3e:ee:2f:9b:e4:db:82:56:1f: 22:28:d0:2c:46:82:b7:12:d0:a4:77:bf:48:a9:0b: b7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FA:4C:FD:F6:D1:D0:85:D0:56:EB:98:AF:43:AA:C7:33:78:B4:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99040fbd-052b-3815-9f8d-3f48368c2a90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:06:6e:61:6d:99:24:0f:cf:e5:89:e0:17:e3:3c:8e:c5:0d: d7:57:8d:66:7b:94:af:cd:e5:c5:08:46:26:0a:80:71:86:95: b8:1b:16:f4:b4:ab:a0:df:ea:11:3f:3e:9a:74:96:85:91:77: cc:97:b4:e0:ea:a4:3f:d3:c0:d6:a3:81:37:d1:5f:b1:91:7d: ab:73:db:08:24:fe:75:67:6b:55:3e:98:0f:b2:df:3a:20:9e: 13:4f:80:4d:ca:bc:87:5e:cb:ca:d7:9d:ac:58:ca:8b:66:9b: 66:26:f9:31:7c:64:21:23:b0:cc:d5:55:16:eb:71:9f:5f:e0: 7f:e7:0b:5d:91:18:e6:15:cf:83:36:66:8b:37:10:8e:db:b4: 28:a4:47:6a:8d:78:48:e6:d2:92:6b:a6:c4:e4:16:56:c0:4a: 55:68:fa:7c:17:0a:5b:80:89:c9:cf:5d:23:4a:f1:b8:34:98: 7d:0c:ff:ae:ad:98:26:6d:ed:a2:a2:f5:40:b8:bd:0d:e2:bb: a9:63:40:8f:8b:f9:7b:93:d6:1c:95:7b:d1:33:96:47:91:9e: 21:79:c8:bc:d0:ae:a3:d3:b2:a7:17:6d:b1:c1:f7:80:32:65: 72:3a:3b:dc:39:45:7f:26:6c:17:eb:ad:a9:6b:55:d6:83:f6: 63:7d:41:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkmz/e90CnYkPKvfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMTEwMzMzNFoXDTI1MDYwOTEwMzMzNFowLzEtMCsGA1UEAxMk NjAwNWFiMjQtOWY1OC00NTAyLThkZTYtZjNjZjc1ZTMzYTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ1Rpl0br5gIQw570SrNjyu5QgdGGsgwLNOI 0SzFDYiLOJqHBzXodaOCp45zTufbYJ1unOY8UD4Lou4MRJiebLnMeqDlGKYI1sV8 04IwqjvsUg3oSF2DEmYg/ak20eCruJt9UHnubsWstroPHPcHy92/Ndx3lsYvWkhE 0FCqbo3tibxBNu1NN/lrdoA7amt3OmgCPxlU9ICkWnuUvUDcAmUitK+LO8Mq148W 2J9eFqj9XuqPW4RPBr4/tu1xqwP0IkACJpqib7TxxfBaN2H2bFFBn6TbvME0SEaQ aHRP1e+JorsDyM8+7i+b5NuCVh8iKNAsRoK3EtCkd79IqQu3SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJP6TP320dCF0FbrmK9DqsczeLTqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTkwNDBmYmQtMDUyYi0z ODE1LTlmOGQtM2Y0ODM2OGMyYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYGbmFtmSQPz+WJ4BfjPI7FDddXjWZ7lK/N5cUIRiYKgHGGlbgbFvS0 q6Df6hE/Ppp0loWRd8yXtODqpD/TwNajgTfRX7GRfatz2wgk/nVna1U+mA+y3zog nhNPgE3KvIdey8rXnaxYyotmm2Ym+TF8ZCEjsMzVVRbrcZ9f4H/nC12RGOYVz4M2 Zos3EI7btCikR2qNeEjm0pJrpsTkFlbASlVo+nwXCluAicnPXSNK8bg0mH0M/66t mCZt7aKi9UC4vQ3iu6ljQI+L+XuT1hyVe9EzlkeRniF5yLzQrqPTsqcXbbHB94Ay ZXI6O9w5RX8mbBfrralrVdaD9mN9QdA= -----END CERTIFICATE-----Generated at Fri Mar 14 15:06:01 2025 by rpki-client