$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4611fa4-db3d-368c-a965-2c7686c173ba.roa File: a4611fa4-db3d-368c-a965-2c7686c173ba.roa (raw, json) Hash identifier: 3fwCK9IDIFkjGLbD+MHWig+unXYl5HFhgaQrVO6q3FE= Subject key identifier: C3:46:25:9E:46:41:59:9B:A5:E9:42:83:54:8E:E9:4E:91:71:BA:6A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858491D716441DD68AB13E6B72580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4611fa4-db3d-368c-a965-2c7686c173ba.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.56.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:64:41:dd:68:ab:13:e6:b7:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=069340fb-ae5d-4bbf-9ce7-3acddf7c52a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c9:33:4d:df:b7:6c:4f:1a:d9:0f:1d:9b:bd: 53:84:d6:4e:db:f8:8b:6e:05:ab:87:00:56:ef:fc: 47:50:7e:0c:3a:c2:12:fe:0c:02:15:6e:78:0c:dd: db:20:85:3f:24:2c:c2:f4:28:f6:0a:47:c9:4d:c6: 06:a6:b4:81:80:e6:34:36:28:f5:e7:8f:b6:e2:ea: 3f:dd:e9:a2:7d:0b:a4:de:ae:f6:b0:43:16:99:90: 55:46:9f:2c:79:2e:3d:8d:0f:13:5b:8c:2d:2d:36: 88:b7:e8:ab:5e:c8:c0:37:c9:60:24:13:6c:6c:a2: 83:26:14:86:7f:a9:d8:95:92:6f:da:82:dc:a9:77: ab:d0:7a:14:5a:b6:ce:1c:a5:4d:6d:ac:89:ef:8c: e4:75:c1:52:c4:30:a1:1c:da:c2:3d:4c:6a:5f:c1: 25:ee:83:39:6c:24:13:88:39:56:83:a3:7d:8f:62: 56:82:6c:45:60:1c:0f:ce:dd:43:17:d9:14:a6:e5: 50:d9:db:89:c8:61:a2:c0:e7:33:03:1d:0f:63:fd: 54:e8:7c:87:18:6c:4c:93:5e:5a:95:82:20:f9:09: ef:c1:c0:0e:73:4b:62:ef:7c:0e:e5:75:3c:af:17: 5e:0d:62:2c:30:ab:c3:20:52:ad:b1:38:7f:a5:11: d4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:46:25:9E:46:41:59:9B:A5:E9:42:83:54:8E:E9:4E:91:71:BA:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4611fa4-db3d-368c-a965-2c7686c173ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.56.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:23:6c:a0:9e:b2:23:00:8d:6c:0c:ae:f6:cc:75:97:4a:90: a2:3e:a4:77:63:34:01:d3:e6:25:be:5a:aa:bc:36:54:34:f5: 54:4b:b2:5b:fc:3c:19:ea:15:96:92:66:3d:85:38:46:ee:86: f5:0c:b5:60:3f:36:61:d3:e2:7e:26:39:cb:ef:fe:66:18:9c: a9:4a:6e:56:e2:f5:20:68:aa:c2:dc:fd:3a:ec:ef:45:95:e1: 70:ea:31:fc:94:82:f5:26:88:b6:f3:95:cd:4e:7b:3a:f7:6b: f7:df:42:08:3b:dc:ea:84:92:ff:41:a1:82:81:5c:37:ae:ea: 1d:1e:8f:59:9d:77:45:38:1d:5b:be:89:80:32:be:c3:75:4a: 19:e9:35:35:b5:b1:6d:f4:3b:bb:05:ac:87:1a:bd:29:14:c4: 85:ad:e6:78:30:9d:7d:8a:82:65:2c:0b:5a:6e:22:52:b4:fc: 19:6b:2c:82:12:bb:3f:f9:e9:18:f6:c6:6a:e9:9c:c8:75:fd: 11:61:f1:78:d7:1a:1e:98:16:a1:c5:04:73:63:c6:ba:8a:0d: 8b:55:d2:d5:6e:4b:d8:56:e9:33:91:ae:06:8e:62:e6:8b:9e: cf:03:94:53:51:4e:97:33:1a:df:b5:9c:97:a8:3d:53:9b:30: ef:4a:c3:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWRB3WirE+a3JYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MDY5MzQwZmItYWU1ZC00YmJmLTljZTctM2FjZGRmN2M1MmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMkzTd+3bE8a2Q8dm71ThNZO2/iLbgWrhwBW 7/xHUH4MOsIS/gwCFW54DN3bIIU/JCzC9Cj2CkfJTcYGprSBgOY0Nij154+24uo/ 3emifQuk3q72sEMWmZBVRp8seS49jQ8TW4wtLTaIt+irXsjAN8lgJBNsbKKDJhSG f6nYlZJv2oLcqXer0HoUWrbOHKVNbayJ74zkdcFSxDChHNrCPUxqX8El7oM5bCQT iDlWg6N9j2JWgmxFYBwPzt1DF9kUpuVQ2duJyGGiwOczAx0PY/1U6HyHGGxMk15a lYIg+QnvwcAOc0ti73wO5XU8rxdeDWIsMKvDIFKtsTh/pRHUWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNGJZ5GQVmbpelCg1SO6U6RcbpqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTQ2MTFmYTQtZGIzZC0z NjhjLWE5NjUtMmM3Njg2YzE3M2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwjbKCesiMAjWwMrvbMdZdKkKI+pHdjNAHT5iW+Wqq8NlQ09VRLslv8 PBnqFZaSZj2FOEbuhvUMtWA/NmHT4n4mOcvv/mYYnKlKblbi9SBoqsLc/Trs70WV 4XDqMfyUgvUmiLbzlc1Oezr3a/ffQgg73OqEkv9BoYKBXDeu6h0ej1mdd0U4HVu+ iYAyvsN1ShnpNTW1sW30O7sFrIcavSkUxIWt5ngwnX2KgmUsC1puIlK0/BlrLIIS uz/56Rj2xmrpnMh1/RFh8XjXGh6YFqHFBHNjxrqKDYtV0tVuS9hW6TORrgaOYuaL ns8DlFNRTpczGt+1nJeoPVObMO9Kwxc= -----END CERTIFICATE-----Generated at Sat Apr 5 12:10:02 2025 by rpki-client