$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d33242c2-4936-3b9e-a769-0abece0988f0.roa File: d33242c2-4936-3b9e-a769-0abece0988f0.roa (raw, json) Hash identifier: 2HIzOOqG5ydeGAXJonBrqB9m+8ooodZ6601IAXwbyvc= Subject key identifier: D6:4D:22:48:E3:50:84:9C:09:FB:C2:F6:AD:BB:83:C2:58:02:5E:2B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495C24559964646115177DD240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d33242c2-4936-3b9e-a769-0abece0988f0.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 20940 IP address blocks: 23.45.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:55:99:64:64:61:15:17:7d:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=08e59b19-b18c-476e-a41e-697e6dbb7102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f1:ab:b1:3d:02:8c:90:bd:f6:cc:56:27:85: 64:ac:7c:8e:97:0b:90:d9:ec:4f:2e:11:78:1f:ff: c8:ee:ba:b7:e1:fc:b0:df:a8:54:18:d0:fb:e4:33: 58:fe:98:93:2d:88:0c:ed:f0:38:da:86:35:2b:74: eb:f5:42:7e:a2:40:aa:25:9f:7d:d3:66:e6:29:49: 00:61:ff:fc:aa:c3:1a:2b:f9:b7:b9:50:45:52:80: e7:64:a1:16:71:14:d8:4b:6d:89:c6:a7:9b:4f:ff: 77:f9:14:d6:fb:c4:c1:05:0e:dc:d8:3e:34:6a:be: 67:cf:d0:39:f6:87:2a:dd:12:fe:3f:2f:31:61:62: aa:f3:cb:00:73:01:57:06:b0:8a:6d:bb:5c:e3:59: 46:97:0f:3a:dc:29:c2:ca:ab:c9:0f:52:9b:95:1b: f7:8c:bd:59:59:cf:ed:3b:4c:e7:b6:88:e1:d3:69: 6b:08:5f:4b:52:c3:ad:60:f0:9f:0b:d8:d4:fc:53: 1c:98:30:fe:bf:e7:d7:3d:5b:39:9a:75:a7:88:ef: b9:b2:fe:ba:6e:f1:10:f0:15:73:be:1e:00:91:7e: 6b:42:13:13:f8:47:d0:4b:f8:42:40:5c:2d:d8:ca: 72:44:ef:b2:01:76:19:5f:2f:0e:c1:72:0f:aa:20: c2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4D:22:48:E3:50:84:9C:09:FB:C2:F6:AD:BB:83:C2:58:02:5E:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d33242c2-4936-3b9e-a769-0abece0988f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:17:a6:bf:8b:cc:e5:20:8b:30:67:32:da:14:1e:1e:37:b4: e9:50:1c:49:1c:44:0c:d4:3f:c6:fe:cc:f8:de:30:bb:b3:5e: 56:f6:9e:72:bf:bd:77:7e:08:2c:b2:c8:c0:bf:9b:74:e9:10: 60:8a:5a:9c:23:f3:b7:bc:0c:c0:bf:fb:df:d6:c7:f6:4e:bd: 94:43:18:44:2e:f1:37:13:cf:1f:24:04:f4:e2:d9:f5:42:ed: 6c:05:d8:df:f0:86:4a:bb:f0:bc:55:b8:53:94:e3:eb:71:9d: e3:3f:48:e8:70:41:e0:62:53:29:65:3a:6c:86:f1:4b:40:b3: 9a:ab:e1:33:a8:ca:61:77:2b:ba:fc:b4:71:aa:b5:3e:31:98: 0d:8d:af:9e:e8:37:a9:4a:aa:0c:7d:c3:83:75:ee:ea:7b:e4: 19:9e:07:df:8e:45:07:4b:c5:e5:df:28:b0:7a:6e:2e:27:28: 40:5c:6c:8e:d7:32:9a:b4:13:6c:14:d1:ac:4c:fb:33:b2:90: f7:79:49:5b:8b:3d:7b:b6:24:5e:af:84:71:64:d7:ec:81:51: 83:04:77:d0:b9:81:c0:4d:9c:95:e8:71:24:61:07:71:36:47: 26:e8:53:79:79:81:c2:fb:b1:48:f9:6f:dd:bb:ea:d6:16:37: e9:54:19:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJFWZZGRhFRd90kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk MDhlNTliMTktYjE4Yy00NzZlLWE0MWUtNjk3ZTZkYmI3MTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/GrsT0CjJC99sxWJ4VkrHyOlwuQ2exPLhF4 H//I7rq34fyw36hUGND75DNY/piTLYgM7fA42oY1K3Tr9UJ+okCqJZ9902bmKUkA Yf/8qsMaK/m3uVBFUoDnZKEWcRTYS22JxqebT/93+RTW+8TBBQ7c2D40ar5nz9A5 9ocq3RL+Py8xYWKq88sAcwFXBrCKbbtc41lGlw863CnCyqvJD1KblRv3jL1ZWc/t O0zntojh02lrCF9LUsOtYPCfC9jU/FMcmDD+v+fXPVs5mnWniO+5sv66bvEQ8BVz vh4AkX5rQhMT+EfQS/hCQFwt2MpyRO+yAXYZXy8OwXIPqiDCWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZNIkjjUIScCfvC9q27g8JYAl4rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDMzMjQyYzItNDkzNi0z YjllLWE3NjktMGFiZWNlMDk4OGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy19MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUXpr+LzOUgizBnMtoUHh43tOlQHEkcRAzUP8b+zPjeMLuzXlb2nnK/ vXd+CCyyyMC/m3TpEGCKWpwj87e8DMC/+9/Wx/ZOvZRDGEQu8TcTzx8kBPTi2fVC 7WwF2N/whkq78LxVuFOU4+txneM/SOhwQeBiUyllOmyG8UtAs5qr4TOoymF3K7r8 tHGqtT4xmA2Nr57oN6lKqgx9w4N17up75BmeB9+ORQdLxeXfKLB6bi4nKEBcbI7X Mpq0E2wU0axM+zOykPd5SVuLPXu2JF6vhHFk1+yBUYMEd9C5gcBNnJXocSRhB3E2 RyboU3l5gcL7sUj5b9276tYWN+lUGfo= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:13 2025 by rpki-client