$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac08313b-41f0-3031-9d94-b71cd2407732.roa File: ac08313b-41f0-3031-9d94-b71cd2407732.roa (raw, json) Hash identifier: gQbfE9nKKt0RnrHHOhhBlDEHHL7P4ritYAHWUaIz0cA= Subject key identifier: DB:9E:31:5F:1F:28:FF:C8:53:CF:EF:84:00:90:8B:16:EE:5F:24:A3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E50721B39AAFAA7C209C300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac08313b-41f0-3031-9d94-b71cd2407732.roa Signing time: Tue 25 Mar 2025 14:08:58 +0000 ROA not before: Tue 25 Mar 2025 14:08:58 +0000 ROA not after: Mon 23 Jun 2025 14:08:58 +0000 asID: 16625 IP address blocks: 23.12.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:50:72:1b:39:aa:fa:a7:c2:09:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 14:08:58 2025 GMT Not After : Jun 23 14:08:58 2025 GMT Subject: CN=c318b36c-8f91-4b30-bd70-a9178c15ed9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:16:33:04:ba:c1:c7:3c:55:eb:7e:88:2b:35: 4d:0a:cb:5a:b0:f9:3f:d1:56:7f:bc:05:c4:c5:2a: d5:bb:d2:6c:cd:0c:fb:88:16:2c:93:cf:5d:82:c6: a4:21:c2:05:d1:db:64:1f:52:f4:a1:28:05:8a:62: f1:d8:1f:53:4c:8c:12:c8:fb:fe:0e:8e:e4:7c:ae: 7c:fa:6b:2e:76:89:ff:05:e3:fd:9b:34:6b:ae:f3: 71:e0:7f:93:98:f0:9e:c9:b0:94:f8:86:92:24:bf: a8:da:80:3c:12:b3:3f:e9:a0:a7:52:da:0c:9c:95: c5:7c:84:f2:b2:a7:fb:58:ea:00:13:fd:b1:9e:8d: bb:1e:aa:1f:b2:ce:dd:0c:cf:00:e3:65:bf:82:b1: fc:e5:75:e8:80:34:07:ec:6e:61:b1:89:99:25:fb: ab:d1:60:36:00:af:98:26:02:33:7a:8b:42:88:7d: 50:2b:83:f2:ba:b4:10:b3:e6:1e:b9:9c:25:3c:29: 36:44:1c:5e:cc:7d:de:91:bd:19:df:47:0a:18:ac: 67:60:2c:c1:22:34:b0:93:5d:06:a0:e1:f7:d1:19: 0c:61:eb:1a:6f:eb:b0:8f:b8:84:05:b2:c7:70:b4: 35:7b:38:d8:96:6e:6b:b9:48:58:a1:af:7b:c3:18: 1c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9E:31:5F:1F:28:FF:C8:53:CF:EF:84:00:90:8B:16:EE:5F:24:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac08313b-41f0-3031-9d94-b71cd2407732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.12.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:86:72:25:65:ef:1c:d8:ff:2e:11:ff:c3:eb:3d:f4:da:dc: 02:69:fb:1a:f8:d7:87:93:50:8c:c4:b5:90:58:86:b6:d5:b5: 75:99:93:08:44:21:ca:62:9f:5c:d6:da:55:a5:46:f9:19:4e: 86:de:a1:ad:4c:08:cd:20:6e:8c:0c:7e:7e:e3:07:9d:f2:74: 52:ae:af:4d:1c:96:32:69:37:03:8c:4c:65:0b:76:7c:c1:01: 11:c3:aa:f9:9c:34:9a:45:0e:dd:46:8f:3c:cd:4d:a4:ad:00: a3:fa:87:7e:e4:bb:20:90:8e:3d:4a:81:5e:a5:09:2f:f8:8b: 2e:6d:29:dc:b9:aa:e7:2d:39:d4:51:1c:6b:7d:fa:37:00:9a: aa:42:8a:aa:af:52:20:0a:72:a0:7e:ad:14:fe:cd:bb:5c:e2: a4:77:b2:48:a3:dc:0c:7c:05:51:bc:5c:6f:eb:e3:28:f0:db: fe:40:ad:3d:d3:ec:9b:5f:4a:e2:d9:03:09:80:da:d2:e9:7b: 03:c1:c2:e4:16:d3:0c:27:55:90:e6:26:6b:0d:6a:c2:e9:a4: 67:0b:0c:bc:82:f2:83:69:fd:43:01:da:06:8f:94:73:a4:39: 5b:ce:5b:d8:6c:a2:29:d3:0e:4a:9a:e3:ed:aa:de:52:40:5f: 33:28:4b:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOUHIbOar6p8IJwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTE0MDg1OFoXDTI1MDYyMzE0MDg1OFowLzEtMCsGA1UEAxMk YzMxOGIzNmMtOGY5MS00YjMwLWJkNzAtYTkxNzhjMTVlZDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBYzBLrBxzxV636IKzVNCstasPk/0VZ/vAXE xSrVu9JszQz7iBYsk89dgsakIcIF0dtkH1L0oSgFimLx2B9TTIwSyPv+Do7kfK58 +msudon/BeP9mzRrrvNx4H+TmPCeybCU+IaSJL+o2oA8ErM/6aCnUtoMnJXFfITy sqf7WOoAE/2xno27Hqofss7dDM8A42W/grH85XXogDQH7G5hsYmZJfur0WA2AK+Y JgIzeotCiH1QK4PyurQQs+YeuZwlPCk2RBxezH3ekb0Z30cKGKxnYCzBIjSwk10G oOH30RkMYesab+uwj7iEBbLHcLQ1ezjYlm5ruUhYoa97wxgcOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNueMV8fKP/IU8/vhACQixbuXySjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWMwODMxM2ItNDFmMC0z MDMxLTlkOTQtYjcxY2QyNDA3NzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaGciVl7xzY/y4R/8PrPfTa3AJp+xr414eTUIzEtZBYhrbVtXWZkwhE Icpin1zW2lWlRvkZTobeoa1MCM0gbowMfn7jB53ydFKur00cljJpNwOMTGULdnzB ARHDqvmcNJpFDt1GjzzNTaStAKP6h37kuyCQjj1KgV6lCS/4iy5tKdy5quctOdRR HGt9+jcAmqpCiqqvUiAKcqB+rRT+zbtc4qR3skij3Ax8BVG8XG/r4yjw2/5ArT3T 7JtfSuLZAwmA2tLpewPBwuQW0wwnVZDmJmsNasLppGcLDLyC8oNp/UMB2gaPlHOk OVvOW9hsoinTDkqa4+2q3lJAXzMoS6A= -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:43 2025 by rpki-client