$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b84dcbd0-45de-3518-b9be-14855a3a2f9a.roa File: b84dcbd0-45de-3518-b9be-14855a3a2f9a.roa (raw, json) Hash identifier: SptOQNmVuW7Tlgd4O7AHxALuwwN0y7m9B6msZiSsTa0= Subject key identifier: AB:06:13:F6:F9:9B:7E:AA:37:B8:6D:19:05:99:74:33:B6:7A:C0:6E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849244E8E1A0BDD0D75BAC32000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b84dcbd0-45de-3518-b9be-14855a3a2f9a.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.4.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:8e:1a:0b:dd:0d:75:ba:c3:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=dcc26bf1-3d8a-4b5a-bb3b-57ed9b6d9956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:60:06:c1:61:8c:56:e6:df:02:88:97:cc:e4: e4:3c:bb:88:dc:36:e4:aa:de:45:4f:12:5b:ad:ca: d7:d1:de:42:60:21:0d:ad:6e:e6:a4:4c:6c:41:b8: 71:d2:0f:8b:14:30:a5:ca:a1:e5:bc:e6:cd:e3:bd: 16:51:01:a7:f3:0d:42:88:3b:3b:9f:cb:8a:15:08: 29:77:8d:80:f4:0f:d4:c6:0c:ac:5c:16:e3:4b:3e: e8:f1:24:08:5f:fb:d1:59:1e:04:8f:19:51:66:11: 13:82:51:14:6e:19:1e:c5:60:a6:de:0d:d5:ae:e1: 07:60:e5:e4:93:a4:4e:1f:d0:23:b5:70:cc:26:57: cb:11:65:a0:6b:1d:88:4c:a9:f4:77:d2:48:fb:64: 72:cc:db:80:a8:31:c3:39:b3:04:29:3a:bd:1e:dd: 13:70:74:b1:c8:de:cd:25:72:43:cc:3e:c1:a3:39: 49:2c:66:f1:c0:29:70:8e:95:91:6f:42:11:65:09: 9f:34:ae:f8:f2:39:10:b8:f7:8e:7c:78:ef:45:00: cd:a2:e7:8e:31:2e:95:3f:45:57:a7:1d:ee:20:d9: 7f:e5:74:61:1e:6a:83:d8:45:e0:5b:81:19:38:11: 48:b6:08:71:b7:79:0d:8a:c5:f1:da:5d:54:2f:82: 81:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:06:13:F6:F9:9B:7E:AA:37:B8:6D:19:05:99:74:33:B6:7A:C0:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b84dcbd0-45de-3518-b9be-14855a3a2f9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.4.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:37:16:32:7e:8f:73:7a:7e:c1:03:4b:a9:cd:1e:88:18:31: 66:17:d0:77:43:96:40:60:43:69:33:79:d1:de:1a:d5:2d:73: f0:da:ca:09:06:c2:db:03:19:c3:e7:f0:f0:94:af:39:0b:a8: 51:ad:88:93:f3:6e:6a:eb:17:25:01:d9:a3:61:29:fb:52:ad: 43:71:b0:11:92:25:f4:b9:e4:74:b6:4e:ab:d4:6c:bc:ea:85: a0:35:af:92:87:5d:2a:25:b5:b5:26:9b:86:56:59:1a:ea:e2: 91:0a:d9:52:44:bb:92:fe:9b:31:3d:08:f3:e6:5f:8a:8c:43: 66:f0:66:f3:63:57:5c:af:e8:b4:f5:2d:58:3c:61:8d:a9:94: 89:21:f6:f6:ab:6f:f7:90:99:98:1c:cd:8c:1f:d7:4d:11:9f: a8:98:5e:e5:66:ec:89:5e:3f:9b:0b:b7:4f:c3:3d:1c:c8:0d: 6c:09:ef:68:e3:91:7c:1d:34:94:f1:7d:84:39:51:e3:9f:5d: a9:7e:98:8c:44:5c:43:90:db:b0:61:36:48:b3:19:91:35:f4: 0e:03:92:0d:0f:62:5f:20:56:6d:04:a1:c3:86:b6:b6:43:bb: fb:fb:00:24:fc:01:76:a8:21:22:b0:7f:55:be:ca:37:8e:1b: 62:2b:68:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTo4aC90NdbrDIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk ZGNjMjZiZjEtM2Q4YS00YjVhLWJiM2ItNTdlZDliNmQ5OTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWAGwWGMVubfAoiXzOTkPLuI3Dbkqt5FTxJb rcrX0d5CYCENrW7mpExsQbhx0g+LFDClyqHlvObN470WUQGn8w1CiDs7n8uKFQgp d42A9A/UxgysXBbjSz7o8SQIX/vRWR4EjxlRZhETglEUbhkexWCm3g3VruEHYOXk k6ROH9AjtXDMJlfLEWWgax2ITKn0d9JI+2RyzNuAqDHDObMEKTq9Ht0TcHSxyN7N JXJDzD7BozlJLGbxwClwjpWRb0IRZQmfNK748jkQuPeOfHjvRQDNoueOMS6VP0VX px3uINl/5XRhHmqD2EXgW4EZOBFItghxt3kNisXx2l1UL4KBQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsGE/b5m36qN7htGQWZdDO2esBuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjg0ZGNiZDAtNDVkZS0z NTE4LWI5YmUtMTQ4NTVhM2EyZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw3FjJ+j3N6fsEDS6nNHogYMWYX0HdDlkBgQ2kzedHeGtUtc/DaygkG wtsDGcPn8PCUrzkLqFGtiJPzbmrrFyUB2aNhKftSrUNxsBGSJfS55HS2TqvUbLzq haA1r5KHXSoltbUmm4ZWWRrq4pEK2VJEu5L+mzE9CPPmX4qMQ2bwZvNjV1yv6LT1 LVg8YY2plIkh9varb/eQmZgczYwf100Rn6iYXuVm7IleP5sLt0/DPRzIDWwJ72jj kXwdNJTxfYQ5UeOfXal+mIxEXEOQ27BhNkizGZE19A4Dkg0PYl8gVm0EocOGtrZD u/v7ACT8AXaoISKwf1W+yjeOG2IraEA= -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:43 2025 by rpki-client