$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9d647b7-eff1-363b-8359-c1450f30a04b.roa File: c9d647b7-eff1-363b-8359-c1450f30a04b.roa (raw, json) Hash identifier: G4aMXXLBsoPqZOm0bxUzl07KpYhPbMrtzNNracJQqaU= Subject key identifier: A2:05:66:9E:2B:2C:D5:02:FE:E4:DA:2C:A9:09:EC:BB:CF:7B:09:20 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABED5DA7FBEE100033DB400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9d647b7-eff1-363b-8359-c1450f30a04b.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.36.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:d5:da:7f:be:e1:00:03:3d:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=677e8be1-3388-4406-b15b-7cc62633b4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2a:6f:39:eb:17:b7:1b:e4:f4:6b:f0:c7:a6: 4c:6d:84:83:51:44:2c:90:5a:45:6f:36:98:02:00: d0:b6:fb:0f:73:76:26:55:8f:04:94:80:e9:8d:45: 10:d6:8e:a7:3e:b4:e6:10:47:00:bc:5e:3a:e5:9b: 8d:6e:f6:d2:11:0c:77:8f:a8:a4:d3:24:30:7f:3c: 33:bf:35:65:d5:3a:e1:4d:71:e4:2a:15:6d:ed:3b: 90:02:9c:1b:46:ab:49:60:12:2c:3f:60:c8:8d:82: 88:4d:1f:7b:f5:2e:46:fe:3e:da:0e:2b:98:c3:9f: b8:b3:6e:9d:c9:ec:ae:95:5c:1d:03:6d:e4:79:a7: 47:92:fd:2d:ae:73:97:34:27:df:58:d6:a7:2e:91: e6:3e:0d:c5:1d:63:6b:83:df:5a:91:54:2e:52:35: bf:7f:53:70:08:e9:f5:48:2e:85:66:d4:fc:19:08: 60:2e:32:0f:00:2b:63:40:95:06:64:1b:37:04:b1: 12:eb:26:b5:57:6d:0a:1c:13:b5:fa:06:35:fe:4a: 72:6a:c0:23:ed:92:78:1f:14:f4:8b:bf:bb:5e:12: 71:5a:71:88:24:8e:79:cc:0c:4f:41:58:4c:47:2d: 05:c4:23:c7:26:74:f9:30:02:5c:89:af:6d:06:90: df:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:05:66:9E:2B:2C:D5:02:FE:E4:DA:2C:A9:09:EC:BB:CF:7B:09:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9d647b7-eff1-363b-8359-c1450f30a04b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:7c:bd:74:1e:1b:a4:fe:da:05:21:7b:0d:b2:09:1d:3c:0c: b3:9b:ff:e3:5d:5a:cb:69:0d:df:34:0b:71:e4:ba:a5:27:40: a0:e6:a8:b5:af:0b:52:53:2e:dc:45:c2:3e:26:2a:eb:19:20: 0b:f9:48:87:d5:4b:1a:e4:9d:9e:9b:e4:c8:15:29:12:ee:12: 86:a6:cf:7b:56:19:69:f5:d7:f9:bd:f3:c6:c0:f2:3f:e5:7b: 6e:cc:cf:71:72:10:ea:3d:96:fd:b6:3f:93:f6:33:41:4b:00: b8:ed:13:0f:ca:87:97:25:70:82:3c:df:7d:2a:a2:f2:cc:b6: 5d:7b:6b:95:1e:ff:40:f8:a3:5b:dd:54:ac:83:e1:1b:57:53: cf:cc:d5:ae:09:ec:73:d9:ae:bc:e9:55:74:f4:bb:b0:85:53: 79:d3:1a:bc:f1:10:b9:64:53:5d:92:b9:ea:a3:a6:5b:50:75: 34:0c:ad:07:10:e4:33:b1:26:eb:d7:94:f7:92:00:ee:5f:4a: e2:79:1e:38:b7:1a:28:1f:a4:bc:d5:c6:0e:07:16:bb:6d:6b: 25:3b:c1:3f:2f:73:05:40:25:18:51:3b:d7:e6:87:61:d8:f2: 21:af:bd:fc:83:db:b7:aa:fd:71:76:f3:be:0a:0f:97:e1:ef: b8:23:d5:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavtXaf77hAAM9tAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk Njc3ZThiZTEtMzM4OC00NDA2LWIxNWItN2NjNjI2MzNiNGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlypvOesXtxvk9Gvwx6ZMbYSDUUQskFpFbzaY AgDQtvsPc3YmVY8ElIDpjUUQ1o6nPrTmEEcAvF465ZuNbvbSEQx3j6ik0yQwfzwz vzVl1TrhTXHkKhVt7TuQApwbRqtJYBIsP2DIjYKITR979S5G/j7aDiuYw5+4s26d yeyulVwdA23keadHkv0trnOXNCffWNanLpHmPg3FHWNrg99akVQuUjW/f1NwCOn1 SC6FZtT8GQhgLjIPACtjQJUGZBs3BLES6ya1V20KHBO1+gY1/kpyasAj7ZJ4HxT0 i7+7XhJxWnGIJI55zAxPQVhMRy0FxCPHJnT5MAJcia9tBpDf4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIFZp4rLNUC/uTaLKkJ7LvPewkgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzlkNjQ3YjctZWZmMS0z NjNiLTgzNTktYzE0NTBmMzBhMDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyQYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABl8vXQeG6T+2gUhew2yCR08DLOb/+NdWstpDd80C3HkuqUnQKDmqLWv C1JTLtxFwj4mKusZIAv5SIfVSxrknZ6b5MgVKRLuEoamz3tWGWn11/m988bA8j/l e27Mz3FyEOo9lv22P5P2M0FLALjtEw/Kh5clcII8330qovLMtl17a5Ue/0D4o1vd VKyD4RtXU8/M1a4J7HPZrrzpVXT0u7CFU3nTGrzxELlkU12SueqjpltQdTQMrQcQ 5DOxJuvXlPeSAO5fSuJ5Hji3GigfpLzVxg4HFrttayU7wT8vcwVAJRhRO9fmh2HY 8iGvvfyD27eq/XF2874KD5fh77gj1QE= -----END CERTIFICATE-----Generated at Sat Apr 5 10:56:02 2025 by rpki-client