$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c91dba92-42b8-3af4-9c90-f0513847fe77.roa File: c91dba92-42b8-3af4-9c90-f0513847fe77.roa (raw, json) Hash identifier: WrlZtD5ZNDdobIAWuA2UqgE3HPSc4ORu4nG3gdbfYT4= Subject key identifier: B9:8D:A9:CC:46:2E:95:E2:0B:C1:00:2A:3A:42:6E:98:F2:D3:03:01 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849244E8D8948D680988C349300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c91dba92-42b8-3af4-9c90-f0513847fe77.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.3.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:8d:89:48:d6:80:98:8c:34:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=54ddfec9-ad60-43c7-b4a3-5aeb11ca6bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a0:d0:1c:ac:cc:c5:bf:b4:bc:c9:6b:5f:06: 36:14:8c:65:4e:62:66:ff:36:fd:27:d6:42:2d:62: 77:19:89:79:4c:7c:bf:76:3f:d6:f3:79:9c:ba:cf: 16:64:98:b8:a2:fa:42:8c:0d:25:3c:6a:c6:4c:2b: 64:e5:c4:ba:09:75:70:1b:a5:6b:f9:9c:a4:37:6b: 38:91:b3:77:f2:2d:bf:c6:a5:42:ee:39:50:a4:1f: 5f:72:32:5a:b6:61:f2:38:a5:8c:ee:db:15:89:6e: c5:e1:e4:f4:bc:e8:52:68:be:bb:a6:9d:b0:40:cf: 70:bc:09:89:df:bf:c8:fe:9e:05:f6:48:55:a5:f0: d6:39:4b:5f:51:58:cf:5d:8f:66:54:49:96:f9:5b: e9:e2:4f:24:47:31:bc:31:c0:26:09:f6:0f:fc:73: f7:d8:30:28:7d:3f:ec:c1:bb:c9:bd:55:91:df:8b: f2:84:df:a4:bb:da:9f:08:22:22:a9:61:cf:54:08: 97:c4:f3:b1:60:c7:43:27:70:2c:dc:e6:bd:d9:e7: de:42:3b:9a:d7:d3:87:d6:e7:27:13:9a:8b:a3:ab: b1:cd:fa:ea:35:0d:24:1a:c1:42:b8:86:bc:4c:e5: 85:f8:02:23:77:54:8e:26:12:19:b9:e6:de:91:e1: 40:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8D:A9:CC:46:2E:95:E2:0B:C1:00:2A:3A:42:6E:98:F2:D3:03:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c91dba92-42b8-3af4-9c90-f0513847fe77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:bb:e1:ec:4f:d6:82:b9:8d:dd:e9:3e:9b:46:73:65:f8:46: 01:83:aa:c3:bf:d9:73:88:15:d3:38:1c:c1:44:df:3b:3f:58: 23:78:f9:f5:7c:1e:87:d8:31:21:de:1e:4e:7f:28:da:e5:6a: 0b:aa:87:2d:d4:28:f5:b1:01:16:14:dd:26:72:c0:92:a1:81: f3:2d:fe:6d:5b:f1:fd:96:68:37:f0:0b:ff:45:ac:5c:89:1f: d9:f0:2d:a6:02:96:ec:09:f3:3e:47:aa:3b:45:f4:b6:00:c4: fd:1c:d0:14:40:53:55:97:7f:2a:9a:de:f3:a4:7b:67:15:9c: bd:65:ac:7d:e1:e8:af:90:db:2d:65:86:9a:20:f6:c3:f6:e4: ac:29:9c:1e:6e:33:aa:7d:cf:2e:d4:de:0e:c6:8d:f7:96:fa: 23:15:52:34:8f:52:57:c0:75:55:c2:69:bb:8b:f0:1f:3c:5e: 22:05:92:60:cf:d9:67:4d:49:a7:51:b4:52:49:e7:cc:89:8e: 14:49:9e:16:fd:6a:8f:dd:aa:f8:40:8a:98:40:01:2c:85:06: ac:d5:45:50:51:67:e1:af:84:53:1e:d3:23:fa:c6:56:eb:e6: 39:6c:c7:0e:7a:25:bc:49:1b:19:ab:43:ca:ae:f1:68:01:94: 29:4c:a2:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTo2JSNaAmIw0kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NTRkZGZlYzktYWQ2MC00M2M3LWI0YTMtNWFlYjExY2E2YmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqDQHKzMxb+0vMlrXwY2FIxlTmJm/zb9J9ZC LWJ3GYl5THy/dj/W83mcus8WZJi4ovpCjA0lPGrGTCtk5cS6CXVwG6Vr+ZykN2s4 kbN38i2/xqVC7jlQpB9fcjJatmHyOKWM7tsViW7F4eT0vOhSaL67pp2wQM9wvAmJ 37/I/p4F9khVpfDWOUtfUVjPXY9mVEmW+Vvp4k8kRzG8McAmCfYP/HP32DAofT/s wbvJvVWR34vyhN+ku9qfCCIiqWHPVAiXxPOxYMdDJ3As3Oa92efeQjua19OH1ucn E5qLo6uxzfrqNQ0kGsFCuIa8TOWF+AIjd1SOJhIZuebekeFA1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmNqcxGLpXiC8EAKjpCbpjy0wMBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzkxZGJhOTItNDJiOC0z YWY0LTljOTAtZjA1MTM4NDdmZTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwMNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABC74exP1oK5jd3pPptGc2X4RgGDqsO/2XOIFdM4HMFE3zs/WCN4+fV8 HofYMSHeHk5/KNrlaguqhy3UKPWxARYU3SZywJKhgfMt/m1b8f2WaDfwC/9FrFyJ H9nwLaYCluwJ8z5HqjtF9LYAxP0c0BRAU1WXfyqa3vOke2cVnL1lrH3h6K+Q2y1l hpog9sP25KwpnB5uM6p9zy7U3g7GjfeW+iMVUjSPUlfAdVXCabuL8B88XiIFkmDP 2WdNSadRtFJJ58yJjhRJnhb9ao/dqvhAiphAASyFBqzVRVBRZ+GvhFMe0yP6xlbr 5jlsxw56JbxJGxmrQ8qu8WgBlClMolE= -----END CERTIFICATE-----Generated at Sat Apr 5 10:54:41 2025 by rpki-client