$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9bf1a458-11ce-3109-8fc4-7b138686f4b9.roa File: 9bf1a458-11ce-3109-8fc4-7b138686f4b9.roa (raw, json) Hash identifier: y6DOXnkd7yF/6NSWVZFPy0Gdtf7wgiQR1+EOh7hM6y8= Subject key identifier: A2:50:45:69:78:13:DD:B4:DD:D7:BE:27:7E:E7:0B:4F:C6:CF:6C:B7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABEEA6B5760F7E5CD66AB20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9bf1a458-11ce-3109-8fc4-7b138686f4b9.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.41.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:ea:6b:57:60:f7:e5:cd:66:ab:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=9a74e7cf-e8d6-4cce-8608-9bfea6e1f8c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9a:98:91:fa:56:62:c8:5b:d6:9d:37:d0:ba: 86:4d:de:00:b8:99:6b:45:1e:f9:ec:33:23:8d:c3: 37:8d:9c:15:ea:67:82:4e:75:9f:fe:c1:5e:d2:48: c2:32:22:cc:4d:a5:4f:ad:1d:4a:07:df:07:f9:ba: e1:4b:4b:b8:b3:10:ad:0f:a8:5f:aa:f1:21:39:21: 1c:71:4a:15:b5:e1:b7:03:18:cd:0a:2d:89:10:f1: f9:57:1f:cc:cb:eb:64:b8:52:5b:59:f0:18:2e:2d: 26:87:3e:73:90:e3:00:e7:85:8a:37:85:29:3c:4d: e4:c8:ee:9d:de:4f:d7:7d:5e:06:80:9f:e6:e0:df: 3d:f9:44:ff:b6:d9:c7:fc:92:ce:96:20:1a:3f:a1: 61:d8:26:a1:83:32:be:37:41:46:a2:e6:88:90:1a: ba:7c:ca:08:e4:a5:34:94:40:d8:27:ba:e5:29:b3: 64:66:2b:73:c6:6c:b7:db:c9:9f:58:b8:42:d3:48: 72:fd:d2:80:52:59:3c:0f:06:c1:43:75:35:82:f8: 24:b3:eb:3b:22:d8:5e:b6:0f:46:9d:86:4a:32:5b: 6b:3d:ac:9c:ed:46:27:83:95:de:0a:46:ff:e3:c2: ba:df:14:e6:d4:96:76:ee:d6:ea:b6:0f:b5:23:aa: a5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:50:45:69:78:13:DD:B4:DD:D7:BE:27:7E:E7:0B:4F:C6:CF:6C:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9bf1a458-11ce-3109-8fc4-7b138686f4b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:94:fe:b5:e4:20:e6:b7:81:cc:b9:b6:fb:b6:bd:4a:34:eb: 74:89:be:f5:ff:58:9c:ae:27:7a:55:68:65:ef:ca:59:64:53: 21:12:32:19:00:19:88:ba:53:a8:28:f2:14:4e:89:90:a0:35: ea:09:40:6c:0d:d7:9a:1e:f9:0e:80:12:08:71:1a:57:11:9a: 40:a1:46:a5:7f:ba:37:d8:f6:0e:df:af:47:07:4e:3e:e4:11: ec:b2:32:6b:8c:a8:10:c4:b5:07:fc:87:29:4b:de:a5:98:a9: fb:d7:ed:1b:d6:52:13:da:f0:30:95:e9:05:f7:d5:21:e0:ae: 91:58:ad:b7:f3:75:e9:9d:93:9d:72:a7:3c:0c:79:bb:6b:e4: 06:dd:8c:8b:7f:21:f6:2e:0e:c2:82:dd:b1:5a:8c:1c:89:4f: 3a:a2:33:da:e6:5d:43:81:e9:5f:e5:bf:f8:18:fd:e8:9d:75: 8c:e9:39:f7:af:2c:32:e7:fb:22:0f:ae:66:ab:7d:e0:68:ef: 57:96:8c:89:41:4d:99:12:e9:e3:ed:82:0b:8d:f8:30:2e:66: 14:7a:1d:6f:40:d7:ca:af:76:23:11:49:65:b4:f1:06:0a:55: d8:1b:21:01:44:bb:1c:c1:47:8c:28:31:6f:24:27:93:2d:a2: ca:93:ba:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuprV2D35c1mqyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk OWE3NGU3Y2YtZThkNi00Y2NlLTg2MDgtOWJmZWE2ZTFmOGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJqYkfpWYshb1p030LqGTd4AuJlrRR757DMj jcM3jZwV6meCTnWf/sFe0kjCMiLMTaVPrR1KB98H+brhS0u4sxCtD6hfqvEhOSEc cUoVteG3AxjNCi2JEPH5Vx/My+tkuFJbWfAYLi0mhz5zkOMA54WKN4UpPE3kyO6d 3k/XfV4GgJ/m4N89+UT/ttnH/JLOliAaP6Fh2CahgzK+N0FGouaIkBq6fMoI5KU0 lEDYJ7rlKbNkZitzxmy328mfWLhC00hy/dKAUlk8DwbBQ3U1gvgks+s7Ithetg9G nYZKMltrPayc7UYng5XeCkb/48K63xTm1JZ27tbqtg+1I6qlBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJQRWl4E9203de+J37nC0/Gz2y3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWJmMWE0NTgtMTFjZS0z MTA5LThmYzQtN2IxMzg2ODZmNGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFylkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyU/rXkIOa3gcy5tvu2vUo063SJvvX/WJyuJ3pVaGXvyllkUyESMhkA GYi6U6go8hROiZCgNeoJQGwN15oe+Q6AEghxGlcRmkChRqV/ujfY9g7fr0cHTj7k EeyyMmuMqBDEtQf8hylL3qWYqfvX7RvWUhPa8DCV6QX31SHgrpFYrbfzdemdk51y pzwMebtr5AbdjIt/IfYuDsKC3bFajByJTzqiM9rmXUOB6V/lv/gY/eiddYzpOfev LDLn+yIPrmarfeBo71eWjIlBTZkS6ePtgguN+DAuZhR6HW9A18qvdiMRSWW08QYK VdgbIQFEuxzBR4woMW8kJ5MtosqTupI= -----END CERTIFICATE-----Generated at Sat Apr 5 12:32:46 2025 by rpki-client