$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b975893-2bce-3ec1-a86f-eaabd8872642.roa File: 9b975893-2bce-3ec1-a86f-eaabd8872642.roa (raw, json) Hash identifier: Hc3euSwgpQZG4+W2WIjOoX6jYtpAI5Q6D7FpDR3YaLU= Subject key identifier: A8:D9:27:2A:49:EF:68:03:24:97:04:9C:2F:57:B7:66:A6:24:21:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584960541EAC714BE36D661CC100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b975893-2bce-3ec1-a86f-eaabd8872642.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.49.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:1e:ac:71:4b:e3:6d:66:1c:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=4582ff3b-3a51-499d-918b-ea4a17d936d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5f:00:5f:79:67:84:08:56:fa:2f:33:b7:41: 3d:56:c5:aa:0e:50:75:d6:78:eb:3b:2e:e9:7b:98: c6:38:f8:94:a0:45:f8:5f:c8:12:2c:34:f3:81:77: 70:09:91:a4:48:85:4f:3c:5e:6a:47:6a:68:96:22: 15:fc:bb:0a:b1:27:67:12:a0:fa:e0:ee:03:df:ad: 8c:42:04:f6:0a:72:99:2b:6f:0a:14:30:d4:36:69: 7f:7e:0f:1f:d1:53:47:19:0d:27:3b:07:29:ef:84: c4:4b:a6:df:98:6d:5d:86:cd:c6:09:d6:68:1d:71: fd:2a:21:cf:50:12:95:bd:c9:14:5a:24:3d:3e:37: 85:38:ca:83:00:00:6e:0c:3c:e5:72:63:8d:33:b1: 10:f2:f4:09:90:99:36:31:24:4e:86:e0:73:b9:63: 9f:ac:e3:6b:31:2f:5d:42:1e:27:81:23:df:2e:be: 8d:e8:58:e7:12:09:98:48:30:8e:e3:65:c1:49:d5: e4:63:5b:39:97:c9:22:fd:e4:81:11:75:b2:f6:e1: 52:37:c4:b4:ba:6d:53:bb:1b:4f:7b:9f:3f:56:68: a7:bf:12:02:37:99:37:93:c8:47:93:b1:62:2d:b3: 53:1d:e0:30:d1:36:62:47:c3:f5:c8:66:e6:79:03: 64:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D9:27:2A:49:EF:68:03:24:97:04:9C:2F:57:B7:66:A6:24:21:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b975893-2bce-3ec1-a86f-eaabd8872642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.49.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:a9:78:a5:b6:59:f7:52:38:cf:07:c8:62:cc:46:9d:00:fa: 51:d8:6b:e0:57:72:19:0a:c0:86:fb:fb:cd:00:b0:00:1f:16: 8e:df:b2:ba:30:51:94:e3:74:50:5a:23:6b:53:89:43:f0:6e: 66:e4:3d:c2:58:c0:9c:40:89:b5:a5:46:1d:9f:3e:57:d3:22: 3c:b2:08:60:ce:10:f8:4f:96:d5:f5:bf:a5:3e:4a:6b:a3:bd: dc:1f:80:a8:68:dc:3f:8c:13:14:69:1d:4d:69:a8:d8:d6:e9: 61:f8:41:a2:df:9b:ba:fe:da:13:67:79:7c:94:a7:a9:47:d3: 15:a6:c5:34:a1:03:59:e9:e5:56:cb:22:ea:45:fb:65:b1:67: a1:d3:5a:6e:48:b5:f7:23:22:23:48:6d:fe:0e:29:cf:c8:62: a6:6b:16:44:d5:70:5c:f2:63:1c:e4:46:8b:17:a5:b9:48:da: 81:9e:6b:3c:a6:bb:cd:31:53:6a:23:f6:c2:cb:13:38:34:00: 06:91:ba:d4:db:d9:e6:92:79:12:f2:c2:f8:f9:eb:7f:18:b5: c5:51:2d:df:6a:e2:7b:82:75:e0:36:84:6a:c4:96:df:87:44: cc:31:0b:20:02:b9:1c:40:71:76:a4:a8:dd:d3:19:e7:b9:48: 67:2d:d4:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgVB6scUvjbWYcwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk NDU4MmZmM2ItM2E1MS00OTlkLTkxOGItZWE0YTE3ZDkzNmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk18AX3lnhAhW+i8zt0E9VsWqDlB11njrOy7p e5jGOPiUoEX4X8gSLDTzgXdwCZGkSIVPPF5qR2poliIV/LsKsSdnEqD64O4D362M QgT2CnKZK28KFDDUNml/fg8f0VNHGQ0nOwcp74TES6bfmG1dhs3GCdZoHXH9KiHP UBKVvckUWiQ9PjeFOMqDAABuDDzlcmONM7EQ8vQJkJk2MSROhuBzuWOfrONrMS9d Qh4ngSPfLr6N6FjnEgmYSDCO42XBSdXkY1s5l8ki/eSBEXWy9uFSN8S0um1TuxtP e58/VminvxICN5k3k8hHk7FiLbNTHeAw0TZiR8P1yGbmeQNk8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjZJypJ72gDJJcEnC9Xt2amJCH7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWI5NzU4OTMtMmJjZS0z ZWMxLWE4NmYtZWFhYmQ4ODcyNjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGypeKW2WfdSOM8HyGLMRp0A+lHYa+BXchkKwIb7+80AsAAfFo7fsrow UZTjdFBaI2tTiUPwbmbkPcJYwJxAibWlRh2fPlfTIjyyCGDOEPhPltX1v6U+Smuj vdwfgKho3D+MExRpHU1pqNjW6WH4QaLfm7r+2hNneXyUp6lH0xWmxTShA1np5VbL IupF+2WxZ6HTWm5ItfcjIiNIbf4OKc/IYqZrFkTVcFzyYxzkRosXpblI2oGeazym u80xU2oj9sLLEzg0AAaRutTb2eaSeRLywvj5638YtcVRLd9q4nuCdeA2hGrElt+H RMwxCyACuRxAcXakqN3TGee5SGct1Jo= -----END CERTIFICATE-----Generated at Sat Apr 5 11:03:40 2025 by rpki-client