$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d78f5a65-00cf-34ca-a5bb-f470ca477fa1.roa File: d78f5a65-00cf-34ca-a5bb-f470ca477fa1.roa (raw, json) Hash identifier: RsXkOLmtw7WDpJbZ5YQwJYPvyZPIUY2v9vRoGeFxu6k= Subject key identifier: 26:74:6D:42:63:C6:89:D1:63:71:48:F0:30:45:1B:24:00:57:35:26 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858488DAB57883115EA0BE7A54940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d78f5a65-00cf-34ca-a5bb-f470ca477fa1.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.55.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:57:88:31:15:ea:0b:e7:a5:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=b391acd1-4002-4fd1-ba56-269dbd3ac79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:01:ba:5f:4a:31:e7:e7:ba:e3:ac:4a:c5:77: e8:8e:d8:3a:1d:08:68:e5:07:45:29:0d:d6:b5:38: 0b:08:9c:8e:0d:64:25:a5:d5:2d:4c:31:30:4c:0d: 6c:de:fb:98:82:59:1c:6e:e4:e3:30:a6:88:a1:03: 35:7f:b0:e6:81:8f:09:65:1f:8a:a9:da:33:89:c1: 4b:b4:dc:05:1d:78:fd:79:bc:cd:46:b9:13:fe:f7: 15:22:3b:5b:d4:b3:57:96:df:69:ba:d6:13:8e:c9: 34:5d:ed:0b:78:1a:66:f8:40:c0:77:0f:40:ff:a4: 19:3d:de:8c:94:62:76:50:4d:7b:d4:a9:f7:29:5e: 36:67:ff:2f:85:45:31:90:7b:3d:53:6b:bb:11:8e: 80:5a:bd:89:88:27:47:5f:fa:e7:dc:06:d2:7b:56: 19:81:6c:06:f0:0d:61:4d:07:c4:c8:35:c7:14:f2: 98:a3:07:f0:f2:e7:d6:9e:28:70:60:63:52:41:06: 61:17:61:9d:1d:72:f7:8c:6a:b6:44:ea:65:16:ad: fb:3b:4d:72:8a:01:83:c5:a5:46:09:4a:30:2c:10: 86:b3:d1:56:30:cb:20:9f:ca:9f:ab:3d:97:c8:b9: d0:fe:70:f1:67:aa:f0:ad:77:95:55:ec:a3:0e:44: 73:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:74:6D:42:63:C6:89:D1:63:71:48:F0:30:45:1B:24:00:57:35:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d78f5a65-00cf-34ca-a5bb-f470ca477fa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.55.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:93:02:73:54:eb:25:73:06:b2:c0:41:30:ae:68:04:c4:47: dc:6e:4d:26:0d:8b:9f:f0:cd:a2:f5:60:73:67:2c:ee:6a:9a: ce:87:cb:ad:c2:4c:91:c7:b3:34:21:a5:05:c9:6b:96:54:54: a7:dc:ad:bc:fd:18:50:01:e6:c5:bd:9e:c8:91:9c:64:98:87: f0:97:c4:e6:c4:a3:f7:f0:f1:42:3e:5c:50:86:3a:5c:99:dc: 29:1c:df:a9:bd:42:aa:a9:06:8b:40:2a:ce:c5:02:6c:30:1e: 2d:90:51:38:44:1f:d8:22:be:75:5d:8b:24:f8:2e:aa:a6:50: be:a7:93:12:a7:15:fc:fb:25:42:68:cc:fc:fb:b0:66:65:6c: 18:83:3d:d2:65:7a:b2:a3:24:16:61:e1:29:15:2b:1b:dd:92: 12:e6:6e:b9:24:b3:2c:7e:ba:07:5c:29:f3:85:0d:95:08:46: 1c:d8:cf:05:38:ff:73:6c:b6:75:a8:c7:d1:8e:83:53:7a:57: 3b:f3:e9:b3:05:2d:7b:e9:23:45:98:35:0d:0f:b2:48:ac:37: 21:b1:aa:47:67:22:1c:48:ba:3a:3e:5a:23:16:4c:e2:20:1a: f7:05:bf:e1:c2:91:40:63:32:7d:41:e0:05:cd:3f:7e:d5:a1: f0:c3:0a:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq1eIMRXqC+elSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk YjM5MWFjZDEtNDAwMi00ZmQxLWJhNTYtMjY5ZGJkM2FjNzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugG6X0ox5+e646xKxXfojtg6HQho5QdFKQ3W tTgLCJyODWQlpdUtTDEwTA1s3vuYglkcbuTjMKaIoQM1f7DmgY8JZR+KqdozicFL tNwFHXj9ebzNRrkT/vcVIjtb1LNXlt9putYTjsk0Xe0LeBpm+EDAdw9A/6QZPd6M lGJ2UE171Kn3KV42Z/8vhUUxkHs9U2u7EY6AWr2JiCdHX/rn3AbSe1YZgWwG8A1h TQfEyDXHFPKYowfw8ufWnihwYGNSQQZhF2GdHXL3jGq2ROplFq37O01yigGDxaVG CUowLBCGs9FWMMsgn8qfqz2XyLnQ/nDxZ6rwrXeVVeyjDkRzjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZ0bUJjxonRY3FI8DBFGyQAVzUmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDc4ZjVhNjUtMDBjZi0z NGNhLWE1YmItZjQ3MGNhNDc3ZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzcnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCTAnNU6yVzBrLAQTCuaATER9xuTSYNi5/wzaL1YHNnLO5qms6Hy63C TJHHszQhpQXJa5ZUVKfcrbz9GFAB5sW9nsiRnGSYh/CXxObEo/fw8UI+XFCGOlyZ 3Ckc36m9QqqpBotAKs7FAmwwHi2QUThEH9givnVdiyT4LqqmUL6nkxKnFfz7JUJo zPz7sGZlbBiDPdJlerKjJBZh4SkVKxvdkhLmbrkksyx+ugdcKfOFDZUIRhzYzwU4 /3NstnWox9GOg1N6Vzvz6bMFLXvpI0WYNQ0PskisNyGxqkdnIhxIujo+WiMWTOIg GvcFv+HCkUBjMn1B4AXNP37VofDDCpk= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:56 2025 by rpki-client