$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9a8533d-7c2c-35a7-aaba-d581d734463c.roa File: c9a8533d-7c2c-35a7-aaba-d581d734463c.roa (raw, json) Hash identifier: kqjXvRCaG/8zEw70CeelYKaXdvJfGci3yyxAY4B+aLw= Subject key identifier: 2B:1F:18:AD:7C:AB:05:62:93:46:45:73:8F:33:AA:E2:A9:12:C0:91 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495EEEF545B2F752F06827BFC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9a8533d-7c2c-35a7-aaba-d581d734463c.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.48.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:f5:45:b2:f7:52:f0:68:27:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=3ed88217-b7fb-40af-a0ee-d2611430a8eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0e:36:85:9a:9b:eb:43:a3:cd:d3:ff:00:b8: b7:2b:85:77:60:8f:de:db:56:11:7a:34:a3:fc:a6: 0e:80:10:6a:a1:53:99:df:61:74:d2:ce:59:96:85: 16:f5:fd:0d:57:92:c0:97:5c:93:0e:cf:b5:cb:3d: 26:b4:2c:7e:80:80:4d:fc:8e:c6:1d:cb:fe:6d:6b: 2e:24:e5:9f:1f:ec:34:83:41:52:b4:2f:b4:6f:5c: 94:97:50:4f:82:05:d9:79:4e:10:58:0a:90:2c:97: 74:8e:fb:9e:95:3c:7a:d8:16:a9:ab:ae:10:97:96: 4a:b3:df:88:34:62:fa:07:ce:61:d1:f6:2d:fa:b0: 79:ad:a9:f6:55:a2:ed:09:2e:34:df:ac:54:8a:a2: 16:48:ac:0f:17:43:56:89:b9:d5:c3:44:e4:c2:7d: d4:ae:5c:a5:85:9c:68:55:c7:c8:a3:0e:d8:51:e6: 77:39:45:6a:d5:f9:e6:1c:9a:ce:15:2f:fd:b2:96: 87:92:04:b8:09:97:86:44:6b:ee:e8:81:b3:d2:f2: 89:8d:cd:85:49:82:f6:1f:df:ca:29:48:58:a1:64: f0:da:fe:5a:82:22:c3:cd:73:d9:36:ba:4d:ec:a8: b0:d3:d9:99:53:54:f5:9b:30:8f:4b:45:bc:d7:94: b8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1F:18:AD:7C:AB:05:62:93:46:45:73:8F:33:AA:E2:A9:12:C0:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9a8533d-7c2c-35a7-aaba-d581d734463c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:21:bd:23:27:50:d2:f0:5a:c7:95:e3:e0:a8:d6:b4:79:68: 7f:9c:c4:6b:c8:78:09:7f:48:69:5a:02:5c:0c:ac:d3:5a:88: a8:c0:0f:41:23:40:2a:16:41:d2:ca:95:e0:a6:96:0b:f0:a8: 1c:fe:3b:d5:b3:09:9a:2e:b0:5c:ba:9b:b0:8d:b2:b8:42:85: bb:3d:3f:fa:d1:3f:cf:94:8e:46:14:86:cb:cd:7c:41:12:77: 55:48:2f:9f:df:9c:bc:59:4e:d6:6e:07:fe:43:86:6b:88:c6: 2b:fa:24:9d:42:a1:66:71:e4:23:b9:0f:7b:b2:72:df:82:c3: 3b:c5:bf:19:63:32:43:7b:6f:1e:60:77:71:d5:83:75:78:39: c2:9c:6f:7d:4c:1d:75:ea:5c:b5:2d:b3:96:db:78:d8:e1:93: e6:28:0f:6c:75:77:a0:09:d8:23:3f:a5:65:aa:03:4f:c5:31: b3:eb:e8:44:3f:8d:75:65:ae:2a:f1:77:6a:6d:e4:86:c1:34: c8:7d:ec:41:7c:8b:84:a3:70:0b:f1:53:e2:6a:32:58:9e:b9: 7c:09:06:bb:30:7a:d4:0e:ff:43:14:15:00:34:16:8f:25:0a: 0e:f8:bb:51:bd:eb:96:e6:7a:d1:ed:d0:2c:9c:7e:12:d2:0d: c3:51:31:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7vVFsvdS8Ggnv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk M2VkODgyMTctYjdmYi00MGFmLWEwZWUtZDI2MTE0MzBhOGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww42hZqb60OjzdP/ALi3K4V3YI/e21YRejSj /KYOgBBqoVOZ32F00s5ZloUW9f0NV5LAl1yTDs+1yz0mtCx+gIBN/I7GHcv+bWsu JOWfH+w0g0FStC+0b1yUl1BPggXZeU4QWAqQLJd0jvuelTx62Bapq64Ql5ZKs9+I NGL6B85h0fYt+rB5ran2VaLtCS4036xUiqIWSKwPF0NWibnVw0Tkwn3UrlylhZxo VcfIow7YUeZ3OUVq1fnmHJrOFS/9spaHkgS4CZeGRGvu6IGz0vKJjc2FSYL2H9/K KUhYoWTw2v5agiLDzXPZNrpN7Kiw09mZU1T1mzCPS0W815S4PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsfGK18qwVik0ZFc48zquKpEsCRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzlhODUzM2QtN2MyYy0z NWE3LWFhYmEtZDU4MWQ3MzQ0NjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzAFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAhvSMnUNLwWseV4+Co1rR5aH+cxGvIeAl/SGlaAlwMrNNaiKjAD0Ej QCoWQdLKleCmlgvwqBz+O9WzCZousFy6m7CNsrhChbs9P/rRP8+UjkYUhsvNfEES d1VIL5/fnLxZTtZuB/5DhmuIxiv6JJ1CoWZx5CO5D3uyct+CwzvFvxljMkN7bx5g d3HVg3V4OcKcb31MHXXqXLUts5bbeNjhk+YoD2x1d6AJ2CM/pWWqA0/FMbPr6EQ/ jXVlrirxd2pt5IbBNMh97EF8i4SjcAvxU+JqMlieuXwJBrswetQO/0MUFQA0Fo8l Cg74u1G965bmetHt0CycfhLSDcNRMYc= -----END CERTIFICATE-----Generated at Sat Apr 5 10:52:23 2025 by rpki-client