$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa55d1d6-b0a6-3741-9a2b-f65ab1ade14e.roa File: aa55d1d6-b0a6-3741-9a2b-f65ab1ade14e.roa (raw, json) Hash identifier: 49F83klRiz7xhQC5dRXrOS1GdVNwoGS40HO5vvSmMDk= Subject key identifier: EC:D6:91:15:97:CC:C1:5F:3F:DF:F9:7E:64:45:42:2A:3B:E0:E5:18 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858488DAB60D85316DF7EBE1B65F8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa55d1d6-b0a6-3741-9a2b-f65ab1ade14e.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.60.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:60:d8:53:16:df:7e:be:1b:65:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=3ca9a318-31ee-49df-aa9e-0a3bbc8e032f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a6:07:55:22:f8:3b:3b:28:b6:f7:ce:fd:d6: ce:ba:a3:7b:4d:90:2a:93:db:52:ff:6d:7e:9a:53: 6e:bc:cc:95:85:ac:e1:62:4b:a4:16:18:5d:2b:8a: 09:f8:92:4f:cb:f0:ca:af:90:bf:0d:13:54:31:51: 75:3e:60:60:eb:61:eb:6e:d9:9f:e8:0b:54:f3:ff: 0f:d1:b7:74:d2:ea:91:4a:ff:c0:ac:6a:d1:61:38: 19:2a:22:33:d5:d5:21:43:a3:28:13:a4:ae:2a:6f: 20:bf:1e:3c:fc:f8:a5:31:7e:59:a3:66:ae:84:21: 84:05:4d:ad:fd:37:71:67:d3:ad:de:07:80:bf:3e: 6c:79:3f:ad:b3:07:3a:70:f7:19:e9:1d:5b:26:9e: 2d:55:56:94:ba:91:fd:06:65:06:a1:9a:62:ca:47: e7:94:03:c2:66:80:57:32:b1:52:3e:21:5a:c4:a8: e5:19:f3:69:57:5f:b7:b9:db:94:77:09:25:71:57: 16:53:e9:e1:ee:94:5b:ca:2a:77:d9:c1:00:d3:b7: 93:51:37:ad:a2:bb:2b:9c:bc:1b:b3:2a:79:bc:83: fd:18:16:6c:fe:ef:a5:89:fb:e6:21:54:60:7b:b6: ff:67:e9:10:78:9e:a1:6c:2c:57:f1:73:73:db:ca: 2d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D6:91:15:97:CC:C1:5F:3F:DF:F9:7E:64:45:42:2A:3B:E0:E5:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa55d1d6-b0a6-3741-9a2b-f65ab1ade14e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.60.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:b3:ee:b7:30:8d:48:07:b9:df:23:cf:79:c3:50:30:cb:ae: 9b:7d:d7:bb:7c:95:d5:18:a0:20:68:ba:bb:7d:01:16:28:f9: c2:38:24:17:71:72:45:60:d3:b1:bc:da:14:58:be:2a:09:f5: 80:1b:b9:c7:81:d9:6c:e5:d7:bc:92:b1:27:59:24:5f:d2:2e: 29:a4:2d:f2:ee:ec:e7:f6:5e:62:f7:ce:ec:d7:c1:bc:27:2e: 79:70:a9:85:24:88:3e:30:b7:31:d8:fb:d1:df:6d:5c:26:2f: ee:cf:cb:a4:4d:bc:66:25:62:51:50:93:51:a0:f4:11:f2:ef: bc:dc:38:a1:25:e1:8a:fa:14:2b:1d:de:08:b4:36:4d:8e:be: 6c:d5:f1:f0:c5:48:8d:34:5a:09:b1:f4:82:67:d0:80:b5:75: 0d:83:eb:7e:67:a6:33:85:fc:fc:7c:80:60:e2:8c:f8:39:5d: 34:f6:63:10:e8:2c:04:7d:1d:6c:7d:f7:57:87:7a:c8:0d:9f: 6f:d4:04:1a:43:94:5f:c3:c5:4b:b0:4e:87:eb:71:83:97:4f: dc:dd:38:eb:12:26:cc:b3:11:87:2a:c1:fb:18:b6:37:05:a2: 3b:17:3b:42:61:71:76:b5:b4:6c:c6:30:89:9d:6d:6d:71:c1: d6:c3:a8:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq2DYUxbffr4bZfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk M2NhOWEzMTgtMzFlZS00OWRmLWFhOWUtMGEzYmJjOGUwMzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaYHVSL4OzsotvfO/dbOuqN7TZAqk9tS/21+ mlNuvMyVhazhYkukFhhdK4oJ+JJPy/DKr5C/DRNUMVF1PmBg62Hrbtmf6AtU8/8P 0bd00uqRSv/ArGrRYTgZKiIz1dUhQ6MoE6SuKm8gvx48/PilMX5Zo2auhCGEBU2t /TdxZ9Ot3geAvz5seT+tswc6cPcZ6R1bJp4tVVaUupH9BmUGoZpiykfnlAPCZoBX MrFSPiFaxKjlGfNpV1+3uduUdwklcVcWU+nh7pRbyip32cEA07eTUTetorsrnLwb syp5vIP9GBZs/u+lifvmIVRge7b/Z+kQeJ6hbCxX8XNz28otEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzWkRWXzMFfP9/5fmRFQio74OUYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWE1NWQxZDYtYjBhNi0z NzQxLTlhMmItZjY1YWIxYWRlMTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+z7rcwjUgHud8jz3nDUDDLrpt917t8ldUYoCBourt9ARYo+cI4JBdx ckVg07G82hRYvioJ9YAbuceB2Wzl17ySsSdZJF/SLimkLfLu7Of2XmL3zuzXwbwn LnlwqYUkiD4wtzHY+9HfbVwmL+7Py6RNvGYlYlFQk1Gg9BHy77zcOKEl4Yr6FCsd 3gi0Nk2OvmzV8fDFSI00Wgmx9IJn0IC1dQ2D635npjOF/Px8gGDijPg5XTT2YxDo LAR9HWx991eHesgNn2/UBBpDlF/DxUuwTofrcYOXT9zdOOsSJsyzEYcqwfsYtjcF ojsXO0JhcXa1tGzGMImdbW1xwdbDqFo= -----END CERTIFICATE-----Generated at Sat Apr 5 10:56:22 2025 by rpki-client