$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4ad938e-5c97-3b57-a7cf-a006bd1824c1.roa File: a4ad938e-5c97-3b57-a7cf-a006bd1824c1.roa (raw, json) Hash identifier: Vdei3d3P6GUqPIbFk7vZkwoNQNuzaTrJykCnYVMTQ1o= Subject key identifier: C2:42:86:C8:96:17:F0:A7:9E:0D:9F:85:61:EC:D5:ED:16:9D:7B:E5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584960541CD5E9BBE998B6E1F780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4ad938e-5c97-3b57-a7cf-a006bd1824c1.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.49.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:1c:d5:e9:bb:e9:98:b6:e1:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=854dd43a-ffcf-41d0-ad3d-3e8b8f8626fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cf:a2:bd:7b:97:6a:6f:9a:df:b3:35:6c:08: c0:75:9a:67:fd:43:81:e7:93:a7:7e:24:5d:49:07: 62:e8:77:c6:f0:46:84:64:9f:07:3c:1c:0f:e2:a8: 6c:67:e1:fb:92:f1:4a:37:a2:19:8b:6b:33:2f:8f: 07:b3:5a:43:6c:71:bf:3d:80:6b:3e:77:c0:a0:e9: 3d:a0:9c:29:cb:64:48:53:79:3b:82:7e:39:04:ec: 3d:e4:a0:6b:e1:50:40:13:63:cf:8f:5f:c1:08:07: 2f:a2:df:15:9d:99:22:fc:5a:2b:42:65:8e:2f:68: f4:5b:f3:a1:b4:75:42:7c:9f:24:95:6a:f2:c4:a4: 00:bc:60:f2:e6:80:11:ee:e0:47:34:5f:c4:b5:74: 6c:ce:33:bb:1a:a4:90:ba:4c:d4:df:70:4b:89:57: 37:c3:2b:b6:0c:9b:1b:c3:7a:51:a5:fc:85:6a:97: d5:73:2a:e7:27:80:ec:5b:5b:ed:af:3c:f6:f6:d8: 53:9b:9e:69:4e:83:c2:08:d9:41:e6:6f:52:fc:28: 69:f9:28:1b:ba:1f:ec:9b:53:31:de:ac:e5:29:a8: 65:99:f9:d1:4c:71:c4:f5:70:51:04:57:9d:c9:5b: f2:84:dd:a0:38:2f:5b:01:de:1a:dc:b6:73:77:1f: d2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:42:86:C8:96:17:F0:A7:9E:0D:9F:85:61:EC:D5:ED:16:9D:7B:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4ad938e-5c97-3b57-a7cf-a006bd1824c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.49.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:4f:a9:46:ee:da:ce:5f:76:c4:a0:f5:56:3d:82:de:66:24: af:d7:15:51:51:c0:14:91:a5:20:46:28:ab:0f:8b:50:42:95: 29:bb:67:14:5e:b4:0f:75:64:16:a5:40:44:e2:e9:a9:a4:a4: 13:c7:ea:f3:36:06:6b:b0:f8:09:f3:4b:cc:4d:00:50:fc:e8: 00:b1:f5:3d:3f:dd:88:4b:84:83:d1:59:62:50:96:f8:ac:7a: 40:cb:ed:68:8e:f4:23:6c:5e:bd:d6:12:bf:eb:fe:fc:7c:b2: 72:59:f4:05:b6:ac:27:64:ea:2f:1f:26:d1:48:ed:7f:8a:38: 4e:e8:1a:68:98:f4:e5:fc:6d:88:4e:0e:1b:34:c8:f5:b1:0c: 2c:84:ac:72:f3:86:e2:7c:ca:dd:b6:88:33:07:81:c6:21:3c: 49:fa:be:c8:0f:33:41:95:d9:ea:2c:2e:de:73:8f:21:22:e4: b3:90:af:57:6e:46:5a:8f:c2:4f:d1:48:8f:14:75:04:48:93: a0:53:0a:0d:13:a3:8b:05:62:33:e0:f2:62:7b:fa:ef:ba:e3: bb:61:7e:e4:b8:f0:34:33:5b:fd:13:fc:a3:23:0d:8e:9c:c7: 54:2e:e8:7b:cd:f7:1f:1d:5f:d1:6a:83:ec:f8:9d:26:84:53: f9:00:7b:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgVBzV6bvpmLbh94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk ODU0ZGQ0M2EtZmZjZi00MWQwLWFkM2QtM2U4YjhmODYyNmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8+ivXuXam+a37M1bAjAdZpn/UOB55OnfiRd SQdi6HfG8EaEZJ8HPBwP4qhsZ+H7kvFKN6IZi2szL48Hs1pDbHG/PYBrPnfAoOk9 oJwpy2RIU3k7gn45BOw95KBr4VBAE2PPj1/BCAcvot8VnZki/ForQmWOL2j0W/Oh tHVCfJ8klWryxKQAvGDy5oAR7uBHNF/EtXRszjO7GqSQukzU33BLiVc3wyu2DJsb w3pRpfyFapfVcyrnJ4DsW1vtrzz29thTm55pToPCCNlB5m9S/Chp+Sgbuh/sm1Mx 3qzlKahlmfnRTHHE9XBRBFedyVvyhN2gOC9bAd4a3LZzdx/SAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJChsiWF/Cnng2fhWHs1e0WnXvlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTRhZDkzOGUtNWM5Ny0z YjU3LWE3Y2YtYTAwNmJkMTgyNGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxPqUbu2s5fdsSg9VY9gt5mJK/XFVFRwBSRpSBGKKsPi1BClSm7ZxRe tA91ZBalQETi6amkpBPH6vM2Bmuw+AnzS8xNAFD86ACx9T0/3YhLhIPRWWJQlvis ekDL7WiO9CNsXr3WEr/r/vx8snJZ9AW2rCdk6i8fJtFI7X+KOE7oGmiY9OX8bYhO Dhs0yPWxDCyErHLzhuJ8yt22iDMHgcYhPEn6vsgPM0GV2eosLt5zjyEi5LOQr1du RlqPwk/RSI8UdQRIk6BTCg0To4sFYjPg8mJ7+u+647thfuS48DQzW/0T/KMjDY6c x1Qu6HvN9x8dX9Fqg+z4nSaEU/kAe+w= -----END CERTIFICATE-----Generated at Sat Apr 5 12:13:02 2025 by rpki-client