$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb059795-6e60-3868-b25b-789b72c841f3.roa File: cb059795-6e60-3868-b25b-789b72c841f3.roa (raw, json) Hash identifier: ACrCoaBhr4XcvoAZHnZf4FKDYbztYsHSlQbvdhswWww= Subject key identifier: 03:5B:29:11:5E:8F:FA:9F:79:E5:B6:35:9F:65:DC:79:2A:D7:C4:28 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858493C093703ED46B80AD3FDA280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb059795-6e60-3868-b25b-789b72c841f3.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 20940 IP address blocks: 23.39.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:37:03:ed:46:b8:0a:d3:fd:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=6b3afc92-354f-427b-b146-c65af664829f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ed:c0:98:3d:56:80:5c:43:dd:24:a0:63:ce: 9d:54:44:5a:ad:ff:52:d8:92:94:53:45:59:3d:bf: 55:2d:c2:de:c2:c7:27:ad:2e:e8:c5:d2:b1:83:59: 66:66:a5:b7:52:97:c3:31:4d:54:05:48:61:9d:b8: ed:97:0b:29:d6:08:ed:47:ca:c7:50:65:cb:a8:4b: e1:74:3b:aa:83:44:86:c5:04:97:3c:61:b2:58:91: cd:6c:d4:7e:ec:b4:98:fc:03:0d:1b:91:16:21:8f: 0d:bb:e9:a4:be:e4:6f:2b:75:45:b8:bc:3c:b3:ce: fb:72:e2:58:6c:1f:2a:60:fe:bc:cd:4c:d5:5b:d6: 5f:c3:dc:98:08:f2:60:e7:21:10:6f:6f:60:d4:4f: 7f:14:4e:5e:06:ca:bc:32:3e:1a:c4:02:bc:90:70: 6c:ab:8b:d6:0d:ee:87:6f:8c:d4:77:8a:7c:20:6e: 51:4b:3a:37:c6:d6:a9:34:ff:01:0d:9b:4f:7d:d9: 28:87:7f:35:19:48:36:65:84:e1:23:32:7a:10:c5: c5:79:e1:de:1e:43:82:87:0a:17:de:d5:0b:79:a7: 51:89:54:fe:ad:ff:1f:69:c3:8f:9e:28:5d:42:c5: 1c:1b:dd:e6:27:86:12:b0:20:b9:be:93:8c:79:8c: 66:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5B:29:11:5E:8F:FA:9F:79:E5:B6:35:9F:65:DC:79:2A:D7:C4:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb059795-6e60-3868-b25b-789b72c841f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:e9:a7:f0:a8:5d:04:4f:76:35:95:88:6c:9d:79:00:ec:2c: ed:7c:8d:74:b2:4e:29:23:36:13:c0:31:85:f0:53:81:87:51: a5:93:05:62:95:21:be:c6:ab:8b:96:15:57:3c:9b:b6:30:81: 9f:15:52:78:ee:fd:91:fd:9d:83:b8:1c:7e:2e:ce:42:65:04: d2:4a:01:04:0f:67:7f:c5:89:00:98:0f:a9:12:e8:21:50:63: dd:d3:b0:7c:e5:99:cd:d6:07:17:43:a9:7f:ac:41:be:38:e5: a6:ee:34:58:20:18:ce:15:70:19:fc:7c:eb:23:d9:57:ce:8f: e7:fd:c5:f8:ea:9b:3a:f2:49:43:c9:49:22:5d:5a:50:c8:61: ec:01:e1:34:be:42:9b:b9:9b:fd:ff:f4:7f:a8:52:5f:f8:35: 64:5f:ee:21:54:e8:73:5f:91:f4:03:55:33:12:f9:fe:19:e3: 0c:eb:6b:4d:48:bc:b1:32:7b:6f:60:30:e2:d0:45:88:51:52: 87:fc:24:31:55:4e:88:0b:79:cd:0c:48:78:a4:be:fa:f1:98: 5b:df:17:ce:ec:ab:a5:45:ed:f6:56:0a:bc:74:7f:fd:66:41: e4:c8:c7:97:5a:f0:33:e7:2d:8d:8e:9f:19:ac:d6:74:db:a3: 7f:e7:21:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTcD7Ua4CtP9ooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk NmIzYWZjOTItMzU0Zi00MjdiLWIxNDYtYzY1YWY2NjQ4MjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+3AmD1WgFxD3SSgY86dVERarf9S2JKUU0VZ Pb9VLcLewscnrS7oxdKxg1lmZqW3UpfDMU1UBUhhnbjtlwsp1gjtR8rHUGXLqEvh dDuqg0SGxQSXPGGyWJHNbNR+7LSY/AMNG5EWIY8Nu+mkvuRvK3VFuLw8s877cuJY bB8qYP68zUzVW9Zfw9yYCPJg5yEQb29g1E9/FE5eBsq8Mj4axAK8kHBsq4vWDe6H b4zUd4p8IG5RSzo3xtapNP8BDZtPfdkoh381GUg2ZYThIzJ6EMXFeeHeHkOChwoX 3tULeadRiVT+rf8facOPnihdQsUcG93mJ4YSsCC5vpOMeYxmOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANbKRFej/qfeeW2NZ9l3Hkq18QoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2IwNTk3OTUtNmU2MC0z ODY4LWIyNWItNzg5YjcyYzg0MWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyeiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbpp/CoXQRPdjWViGydeQDsLO18jXSyTikjNhPAMYXwU4GHUaWTBWKV Ib7Gq4uWFVc8m7YwgZ8VUnju/ZH9nYO4HH4uzkJlBNJKAQQPZ3/FiQCYD6kS6CFQ Y93TsHzlmc3WBxdDqX+sQb445abuNFggGM4VcBn8fOsj2VfOj+f9xfjqmzrySUPJ SSJdWlDIYewB4TS+Qpu5m/3/9H+oUl/4NWRf7iFU6HNfkfQDVTMS+f4Z4wzra01I vLEye29gMOLQRYhRUof8JDFVTogLec0MSHikvvrxmFvfF87sq6VF7fZWCrx0f/1m QeTIx5da8DPnLY2Onxms1nTbo3/nIVo= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:31 2025 by rpki-client