$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a86e3783-e4be-3b78-8bc1-9e2b43a9b90e.roa File: a86e3783-e4be-3b78-8bc1-9e2b43a9b90e.roa (raw, json) Hash identifier: HYxUE2dItxn9Ww1RaBjMtjsy6I9SC5xY8PaWd1quWcU= Subject key identifier: AC:20:9A:BF:DE:02:4B:0E:86:93:95:57:4D:FF:38:F2:75:69:45:3A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858491ED6EFF121554C0007086580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a86e3783-e4be-3b78-8bc1-9e2b43a9b90e.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.76.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:ef:f1:21:55:4c:00:07:08:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=f01494ea-9c86-440f-b516-2f28cfd146b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:75:45:d1:0a:a8:35:b8:de:e5:bc:a1:6e:ec: 08:23:82:0d:94:5f:60:a1:1a:65:76:5b:f8:eb:d3: 53:91:39:18:d7:e0:5e:7f:c8:4b:ef:6d:81:69:91: d3:d6:6b:b7:9f:22:86:1c:77:be:81:9c:90:26:39: 7e:6b:f9:08:a4:a3:52:0a:65:32:df:e2:22:0d:61: 18:71:f7:6d:e9:dc:bf:1e:75:8e:55:9f:22:29:6f: 02:d6:58:07:88:9f:ed:33:89:19:81:b3:1f:3e:76: 0c:f5:ca:11:7e:ba:71:8a:1d:d1:cc:2b:f4:69:32: a2:cd:2e:82:cb:ab:e9:40:38:4f:ea:55:97:51:72: d7:e0:fd:f5:2a:3f:e6:55:25:93:96:f3:94:0a:62: 0e:4f:0f:5d:1e:79:b9:6b:5b:de:60:2a:4b:da:6c: fe:2c:33:89:d4:5b:d0:16:c7:20:95:97:b3:46:08: 0b:7e:75:97:9a:56:3f:41:86:08:d9:23:56:99:96: 2e:34:29:2c:92:97:aa:5b:9e:95:fd:be:33:c6:e3: f9:e7:ea:ed:d2:ef:5c:33:4e:8d:68:ab:4d:9e:93: 7e:89:6c:f7:48:39:24:02:aa:92:1a:56:0c:42:b7: 84:e8:c3:9e:51:cd:30:44:c5:fe:7d:3e:73:2e:7b: fb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:20:9A:BF:DE:02:4B:0E:86:93:95:57:4D:FF:38:F2:75:69:45:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a86e3783-e4be-3b78-8bc1-9e2b43a9b90e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.76.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ba:65:8d:f5:e3:f1:d9:4c:ab:2e:93:d0:e8:4e:a3:d0:bc: 96:60:1c:6a:91:f4:e4:9e:f2:fe:39:5d:05:e6:94:64:88:c4: 61:09:e4:6f:c4:d7:9f:ce:7d:14:6c:c8:e0:a2:54:a1:f7:6c: 7d:75:d6:9f:87:a8:6a:a2:a0:75:13:05:b8:33:a6:83:a0:4b: 38:bb:cf:ed:f9:c4:33:f4:5c:73:af:cb:f0:ea:01:3d:75:a2: b9:71:e7:c2:bd:44:0e:e1:f7:0c:6e:00:42:f8:30:c5:d5:ac: 70:f3:13:7d:7c:b9:c4:a8:9c:2b:cc:9c:64:37:3c:02:8d:c2: 9b:06:6f:ba:a4:ee:e5:b5:b3:bc:fb:db:df:56:5c:9d:62:80: 95:75:34:a4:63:e5:6e:3b:2d:c9:70:d9:75:48:33:28:f2:13: 28:0f:0b:9d:a4:28:af:40:90:fc:45:e9:9e:e2:f9:85:ab:d8: a0:05:26:be:fb:7f:15:9c:1a:a3:15:5f:4f:8c:21:45:e5:34: 80:c1:13:59:dd:f6:4a:fa:ad:3e:c7:55:8f:52:4d:90:db:6c: 71:ae:8f:d6:25:90:6a:01:5e:0e:5f:d1:33:22:03:35:a3:f7: ce:c4:6d:bf:fa:2d:aa:b1:cd:8d:7b:fe:52:2c:a1:b5:13:c5: 3f:9f:c9:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1u/xIVVMAAcIZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk ZjAxNDk0ZWEtOWM4Ni00NDBmLWI1MTYtMmYyOGNmZDE0NmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3VF0QqoNbje5byhbuwII4INlF9goRpldlv4 69NTkTkY1+Bef8hL722BaZHT1mu3nyKGHHe+gZyQJjl+a/kIpKNSCmUy3+IiDWEY cfdt6dy/HnWOVZ8iKW8C1lgHiJ/tM4kZgbMfPnYM9coRfrpxih3RzCv0aTKizS6C y6vpQDhP6lWXUXLX4P31Kj/mVSWTlvOUCmIOTw9dHnm5a1veYCpL2mz+LDOJ1FvQ FscglZezRggLfnWXmlY/QYYI2SNWmZYuNCkskpeqW56V/b4zxuP55+rt0u9cM06N aKtNnpN+iWz3SDkkAqqSGlYMQreE6MOeUc0wRMX+fT5zLnv7cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwgmr/eAksOhpOVV03/OPJ1aUU6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTg2ZTM3ODMtZTRiZS0z Yjc4LThiYzEtOWUyYjQzYTliOTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0yTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+6ZY314/HZTKsuk9DoTqPQvJZgHGqR9OSe8v45XQXmlGSIxGEJ5G/E 15/OfRRsyOCiVKH3bH111p+HqGqioHUTBbgzpoOgSzi7z+35xDP0XHOvy/DqAT11 orlx58K9RA7h9wxuAEL4MMXVrHDzE318ucSonCvMnGQ3PAKNwpsGb7qk7uW1s7z7 299WXJ1igJV1NKRj5W47Lclw2XVIMyjyEygPC52kKK9AkPxF6Z7i+YWr2KAFJr77 fxWcGqMVX0+MIUXlNIDBE1nd9kr6rT7HVY9STZDbbHGuj9YlkGoBXg5f0TMiAzWj 987Ebb/6LaqxzY17/lIsobUTxT+fyaI= -----END CERTIFICATE-----Generated at Sat Apr 5 10:56:13 2025 by rpki-client