$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d3a8ff71-7205-33aa-a408-251f9ba79bf4.roa File: d3a8ff71-7205-33aa-a408-251f9ba79bf4.roa (raw, json) Hash identifier: KFD287D5CTjCpLDAYJvRrHEt3439zSqpEqXgwGP741c= Subject key identifier: 40:F2:25:FD:20:3F:60:56:62:F8:F1:FB:C5:CC:CF:11:FF:A3:47:6A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABED9C89A1C1B55B7958B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d3a8ff71-7205-33aa-a408-251f9ba79bf4.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.38.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:d9:c8:9a:1c:1b:55:b7:95:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=e2462e21-9944-4f0c-a360-fe821ffb8096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:79:d2:c2:c2:ba:cf:e6:e3:93:91:1c:b3:d9: 37:d0:dd:83:dc:bb:c1:28:be:71:8a:94:3c:d9:66: 75:30:74:7e:62:1c:1f:1d:f7:08:54:7f:c7:c9:19: 61:9a:df:60:37:b1:8f:5b:ca:8a:f3:8b:0a:e9:54: f2:22:05:3d:b7:ed:46:99:b0:b2:77:da:5e:34:86: be:61:8b:9c:43:f7:14:18:63:53:0e:93:93:38:e6: cb:a9:54:15:cf:b3:d7:93:8f:c3:45:d9:fe:cb:40: 41:7c:06:5a:83:e7:28:ad:7f:c4:ac:96:49:ba:d8: 08:36:4e:66:a3:b6:f4:83:63:bd:b2:90:cb:94:32: 2c:21:ff:80:60:41:52:28:84:35:83:56:40:ec:35: 5a:7f:39:35:72:da:e7:65:4d:da:e8:b9:fc:d4:1d: c8:77:f0:09:96:d8:8c:8f:0e:89:8e:71:fd:87:24: 27:32:3f:c5:0d:c6:e6:46:78:cb:2c:8b:53:1f:96: 67:b5:e0:c2:ee:4d:86:15:11:f1:6b:e2:1c:12:ed: 7c:61:4c:82:b6:1c:52:d5:fa:c2:7b:ef:ac:a6:bf: 30:94:19:f7:91:63:e8:b5:26:ee:5e:08:52:fd:dc: cf:3f:4e:09:11:29:93:59:98:20:1d:c4:f5:08:a5: 96:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F2:25:FD:20:3F:60:56:62:F8:F1:FB:C5:CC:CF:11:FF:A3:47:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d3a8ff71-7205-33aa-a408-251f9ba79bf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:59:41:b8:25:b6:db:77:32:50:3f:72:39:dd:2f:32:9b:54: c1:c5:65:7b:54:d5:ed:40:3f:1e:69:7e:c9:19:58:49:25:e8: 63:e7:ab:c5:56:24:41:1d:b5:2b:3f:30:82:ee:cf:82:53:fb: 4f:45:43:d9:0d:25:ee:d8:98:5b:4e:3b:ee:26:8a:b2:ff:8e: 15:6d:02:94:1c:9f:e0:c6:66:aa:41:2a:79:55:5f:a1:62:76: d2:8a:8d:0a:dd:3e:f9:84:fd:bd:2d:a1:83:b2:3b:05:ed:49: 73:8a:a5:63:8a:5a:c3:41:9e:b5:8a:e3:f6:25:77:48:5a:c8: 63:c7:ea:49:79:b2:29:92:d7:e8:b6:dc:9a:ec:0c:dc:c8:de: e7:a7:25:f8:7c:79:c4:5a:9a:a3:88:fb:9f:7f:a6:0f:28:72: 78:8b:51:ce:01:3c:cd:e1:f7:47:51:a4:a4:15:af:c2:04:e4: 5b:3a:bb:31:b9:01:63:2f:ec:05:82:f1:84:1c:39:7e:51:23: d9:d0:59:f3:69:ed:eb:91:4e:28:62:2d:c4:f1:56:76:29:8f: a7:41:d3:11:4d:84:a7:5c:eb:73:4f:1a:94:f2:31:8a:19:8d: 33:1c:79:66:c2:c6:b5:f6:46:43:3a:94:80:fb:f3:27:cf:85: c6:a2:d5:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavtnImhwbVbeVi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ZTI0NjJlMjEtOTk0NC00ZjBjLWEzNjAtZmU4MjFmZmI4MDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHnSwsK6z+bjk5Ecs9k30N2D3LvBKL5xipQ8 2WZ1MHR+YhwfHfcIVH/HyRlhmt9gN7GPW8qK84sK6VTyIgU9t+1GmbCyd9peNIa+ YYucQ/cUGGNTDpOTOObLqVQVz7PXk4/DRdn+y0BBfAZag+corX/ErJZJutgINk5m o7b0g2O9spDLlDIsIf+AYEFSKIQ1g1ZA7DVafzk1ctrnZU3a6Ln81B3Id/AJltiM jw6JjnH9hyQnMj/FDcbmRnjLLItTH5ZnteDC7k2GFRHxa+IcEu18YUyCthxS1frC e++spr8wlBn3kWPotSbuXghS/dzPP04JESmTWZggHcT1CKWWHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDyJf0gP2BWYvjx+8XMzxH/o0dqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDNhOGZmNzEtNzIwNS0z M2FhLWE0MDgtMjUxZjliYTc5YmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFybMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRZQbglttt3MlA/cjndLzKbVMHFZXtU1e1APx5pfskZWEkl6GPnq8VW JEEdtSs/MILuz4JT+09FQ9kNJe7YmFtOO+4mirL/jhVtApQcn+DGZqpBKnlVX6Fi dtKKjQrdPvmE/b0toYOyOwXtSXOKpWOKWsNBnrWK4/Yld0hayGPH6kl5simS1+i2 3JrsDNzI3uenJfh8ecRamqOI+59/pg8ocniLUc4BPM3h90dRpKQVr8IE5Fs6uzG5 AWMv7AWC8YQcOX5RI9nQWfNp7euRTihiLcTxVnYpj6dB0xFNhKdc63NPGpTyMYoZ jTMceWbCxrX2RkM6lID78yfPhcai1fY= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:56 2025 by rpki-client