$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c834a061-9bb2-3d89-a4c4-ad8138352952.roa File: c834a061-9bb2-3d89-a4c4-ad8138352952.roa (raw, json) Hash identifier: uGnGs+gN7O6OC586XXd5B+h8XrZnTeoox1POfjss5ho= Subject key identifier: 50:2F:F4:95:29:67:1E:22:57:2D:43:21:CE:C4:55:31:FC:5F:7A:17 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABEDCE60C6F7263EEBFD000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c834a061-9bb2-3d89-a4c4-ad8138352952.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.40.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:dc:e6:0c:6f:72:63:ee:bf:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=4d340c7f-0980-4740-9c75-8577358c9e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d8:6b:cb:a0:74:f5:4f:86:31:9c:be:42:98: 42:86:0c:d4:89:6b:21:1b:1b:e7:e4:36:42:3f:4b: a9:99:c7:ae:b8:5c:77:f4:13:8a:4a:58:75:85:25: 87:5a:04:cd:e8:88:5b:d0:4f:ba:96:aa:85:f2:a9: 26:fc:c4:1d:9e:02:d7:34:61:f0:3d:e2:9a:95:98: 10:f3:1f:f9:b0:97:a5:99:00:43:21:41:93:f7:1d: db:36:52:b0:b6:10:de:72:75:5b:52:1d:f0:c4:a6: bd:39:3a:85:16:f5:ea:a1:1d:cb:ed:f9:85:c4:8f: a5:b1:53:05:d8:59:e0:1f:f2:56:a7:85:e7:98:02: cc:14:68:2f:bb:7e:7c:92:75:22:54:35:c4:68:41: a2:ba:50:8e:4a:2b:ae:d5:e4:2d:16:d9:1d:88:bb: e2:3d:10:2a:dc:5a:e8:37:49:44:e7:35:95:d2:c9: 42:1f:3a:ed:18:46:e8:73:74:23:71:05:7b:22:c5: 1a:35:67:d1:df:2c:83:d2:55:fe:a9:24:af:02:6a: a2:76:f7:6d:30:23:73:68:bf:9a:ef:cc:aa:df:0b: 8b:44:0d:29:1b:8e:f4:ce:06:2a:0a:b3:8f:5b:be: 3e:b4:ea:2c:70:5f:9c:3e:b8:30:1e:de:6b:d0:7a: 26:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2F:F4:95:29:67:1E:22:57:2D:43:21:CE:C4:55:31:FC:5F:7A:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c834a061-9bb2-3d89-a4c4-ad8138352952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:5e:3b:e8:70:ea:fb:09:40:cb:cd:2f:1e:f6:c1:18:4e:ef: d5:ce:ce:b7:8f:1d:e6:6d:71:2a:6b:71:d3:f4:ce:44:9e:bd: 5b:6c:0f:6f:19:95:36:b1:04:23:06:5b:c0:0b:10:b5:46:75: ab:2f:3b:1a:24:e8:22:a0:3e:f6:13:9c:a4:a0:04:13:a8:7c: 23:4a:53:a9:05:79:28:f0:74:0d:54:0f:f8:2c:2b:09:16:c4: 5a:db:d5:92:b9:b9:c6:f4:7b:75:25:6b:47:b9:08:d5:f1:09: 03:a9:de:53:23:31:e7:73:34:a1:ad:1c:35:d1:31:b7:2c:0f: 18:a1:49:30:dc:88:e4:ca:91:33:d0:d1:80:dc:59:83:df:1b: 49:c2:71:80:90:de:61:54:cb:74:65:ef:14:31:6d:a7:5c:3d: f7:f0:6e:3d:e5:43:21:82:36:a7:fc:48:e4:4d:fe:5b:6f:2e: 3d:6b:28:51:4d:8a:e0:25:59:59:2a:27:55:76:7f:1a:4d:2a: 2a:cb:00:79:1b:ee:f9:4c:b4:26:0f:47:39:11:2d:ac:3a:3e: 5c:6c:16:e6:66:0e:96:af:f1:4a:87:55:3c:6b:a7:0b:05:16: c8:c3:b6:4b:84:a0:36:1b:ae:90:ce:7c:a9:15:2b:84:43:c8: 67:0e:53:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavtzmDG9yY+6/0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NGQzNDBjN2YtMDk4MC00NzQwLTljNzUtODU3NzM1OGM5ZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxthry6B09U+GMZy+QphChgzUiWshGxvn5DZC P0upmceuuFx39BOKSlh1hSWHWgTN6Ihb0E+6lqqF8qkm/MQdngLXNGHwPeKalZgQ 8x/5sJelmQBDIUGT9x3bNlKwthDecnVbUh3wxKa9OTqFFvXqoR3L7fmFxI+lsVMF 2FngH/JWp4XnmALMFGgvu358knUiVDXEaEGiulCOSiuu1eQtFtkdiLviPRAq3Fro N0lE5zWV0slCHzrtGEboc3QjcQV7IsUaNWfR3yyD0lX+qSSvAmqidvdtMCNzaL+a 78yq3wuLRA0pG470zgYqCrOPW74+tOoscF+cPrgwHt5r0HomnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAv9JUpZx4iVy1DIc7EVTH8X3oXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzgzNGEwNjEtOWJiMi0z ZDg5LWE0YzQtYWQ4MTM4MzUyOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9eO+hw6vsJQMvNLx72wRhO79XOzrePHeZtcSprcdP0zkSevVtsD28Z lTaxBCMGW8ALELVGdasvOxok6CKgPvYTnKSgBBOofCNKU6kFeSjwdA1UD/gsKwkW xFrb1ZK5ucb0e3Ula0e5CNXxCQOp3lMjMedzNKGtHDXRMbcsDxihSTDciOTKkTPQ 0YDcWYPfG0nCcYCQ3mFUy3Rl7xQxbadcPffwbj3lQyGCNqf8SORN/ltvLj1rKFFN iuAlWVkqJ1V2fxpNKirLAHkb7vlMtCYPRzkRLaw6PlxsFuZmDpav8UqHVTxrpwsF FsjDtkuEoDYbrpDOfKkVK4RDyGcOU6w= -----END CERTIFICATE-----Generated at Sat Apr 5 11:00:14 2025 by rpki-client