$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd81d74e-d4fd-3538-8da5-a9c90c9059bc.roa File: bd81d74e-d4fd-3538-8da5-a9c90c9059bc.roa (raw, json) Hash identifier: Sq5vHAwZk0ifGQrvC+9h/hvJsRYwk9gZA/CYV1uUIiQ= Subject key identifier: D5:27:90:40:00:BF:CA:AC:F9:43:50:DC:72:3B:C6:C2:19:CD:5F:C2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584913AC4176D37034529375B2E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd81d74e-d4fd-3538-8da5-a9c90c9059bc.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.64.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:41:76:d3:70:34:52:93:75:b2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=1b52860f-52ad-488b-ae12-604bf7a26121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1f:bf:d5:17:5c:eb:93:30:a8:07:8c:5a:7f: f9:05:c3:1a:a7:ab:c6:7b:44:bb:a1:9e:74:5f:e4: 43:86:2d:b9:75:05:62:9c:ca:30:ae:09:b2:b2:b8: 4e:aa:d8:96:9a:62:ce:d6:d8:73:e5:bb:f6:0a:d2: 4c:48:89:16:50:f8:e6:bf:8d:c6:b8:0a:43:d5:21: 1b:de:2e:b6:ac:80:6c:0d:78:0d:29:01:cf:d9:59: c5:4c:92:ed:0b:7c:90:59:94:c0:ff:cf:db:62:01: d4:6b:c2:8d:6c:cd:e6:4a:28:3b:c6:31:2f:d3:bd: 2d:72:01:7d:09:9b:57:7f:85:1a:bc:87:4e:37:99: 1f:f6:74:a3:22:a7:c7:a7:3f:af:ed:f9:bb:2b:8f: f7:22:87:42:cb:4c:09:00:e7:f1:09:6f:7b:0b:43: f8:b2:6d:5e:5f:bc:56:8f:a5:07:f9:7f:1e:f1:19: ea:79:79:62:81:96:d3:82:4e:ab:58:f9:51:9d:e2: 9f:2f:27:29:13:c1:87:6c:0e:e7:d0:f8:51:03:fb: a9:63:93:21:ac:92:24:d9:e6:94:cf:eb:09:76:cc: 3c:9d:67:ef:6a:d6:2f:7a:e2:55:69:05:96:d4:83: ab:df:72:3e:9f:72:ac:96:68:7f:ea:7c:e3:3b:e3: 04:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:27:90:40:00:BF:CA:AC:F9:43:50:DC:72:3B:C6:C2:19:CD:5F:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd81d74e-d4fd-3538-8da5-a9c90c9059bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.64.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:5f:c5:d0:db:98:bf:ce:99:73:b8:04:70:aa:e5:f3:e1:d3: c9:af:fb:be:e4:d2:ae:ae:3c:ba:5f:0f:1b:f5:e0:c7:de:98: 70:19:68:15:50:e6:54:c4:69:12:36:1c:45:ed:73:d0:2f:2f: 99:99:56:9e:05:ef:50:dc:e0:b6:b5:8f:9c:28:0d:00:53:53: d3:ef:80:61:8a:80:19:dc:12:f7:82:6f:5c:15:de:d0:1a:7a: e6:b5:7a:24:d7:15:3d:0d:8f:53:bb:00:91:af:41:05:91:dc: f8:1c:d6:ed:ab:59:cd:f4:dc:4d:e9:04:61:a9:af:81:8b:c5: e6:23:27:07:83:18:21:5f:7a:37:8f:6d:c9:6d:b2:79:1e:d8: 4c:15:98:46:d3:64:6b:de:c7:e7:5a:8c:6b:19:5c:86:22:88: 67:46:6f:88:6c:9e:ee:81:a5:b5:69:53:54:30:c5:f6:80:a3: 68:3f:19:38:47:43:98:f9:0c:d6:c4:3e:27:6e:f9:b6:9c:1d: 1f:a3:e0:44:8e:0b:13:f3:6c:d2:e5:6e:ad:4b:da:cd:fc:f0: ad:8e:b0:53:e9:80:c3:3d:e7:04:3a:bb:eb:2c:42:ad:a6:92: 8e:c7:19:8f:7c:8b:01:10:f6:8b:27:f0:da:ef:b8:f4:dc:c4: 90:49:d1:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrEF203A0UpN1suAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MWI1Mjg2MGYtNTJhZC00ODhiLWFlMTItNjA0YmY3YTI2MTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh+/1Rdc65MwqAeMWn/5BcMap6vGe0S7oZ50 X+RDhi25dQVinMowrgmysrhOqtiWmmLO1thz5bv2CtJMSIkWUPjmv43GuApD1SEb 3i62rIBsDXgNKQHP2VnFTJLtC3yQWZTA/8/bYgHUa8KNbM3mSig7xjEv070tcgF9 CZtXf4UavIdON5kf9nSjIqfHpz+v7fm7K4/3IodCy0wJAOfxCW97C0P4sm1eX7xW j6UH+X8e8RnqeXligZbTgk6rWPlRneKfLycpE8GHbA7n0PhRA/upY5MhrJIk2eaU z+sJdsw8nWfvatYveuJVaQWW1IOr33I+n3Kslmh/6nzjO+METQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUnkEAAv8qs+UNQ3HI7xsIZzV/CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmQ4MWQ3NGUtZDRmZC0z NTM4LThkYTUtYTljOTBjOTA1OWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF0DwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5fxdDbmL/OmXO4BHCq5fPh08mv+77k0q6uPLpfDxv14MfemHAZaBVQ 5lTEaRI2HEXtc9AvL5mZVp4F71Dc4La1j5woDQBTU9PvgGGKgBncEveCb1wV3tAa eua1eiTXFT0Nj1O7AJGvQQWR3Pgc1u2rWc303E3pBGGpr4GLxeYjJweDGCFfejeP bcltsnke2EwVmEbTZGvex+dajGsZXIYiiGdGb4hsnu6BpbVpU1QwxfaAo2g/GThH Q5j5DNbEPidu+bacHR+j4ESOCxPzbNLlbq1L2s388K2OsFPpgMM95wQ6u+ssQq2m ko7HGY98iwEQ9osn8NrvuPTcxJBJ0aM= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:34 2025 by rpki-client