$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7d6ebda-1b2d-3bc1-b514-3f2db4a6f2f6.roa File: d7d6ebda-1b2d-3bc1-b514-3f2db4a6f2f6.roa (raw, json) Hash identifier: SQvSR70hc9wkWsNChTxZ4zcIQHpthEAz3CnyUU7/Qyc= Subject key identifier: 53:0B:E1:76:C2:51:FD:AB:0B:52:99:49:78:5F:23:D0:5B:A8:AF:A6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849244E9F0AD63F265E71257700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7d6ebda-1b2d-3bc1-b514-3f2db4a6f2f6.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.15.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:9f:0a:d6:3f:26:5e:71:25:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=4b21621e-9bae-407d-acd8-433f457ed4b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8e:96:b6:bd:3b:70:39:1a:7e:4b:12:1c:46: eb:2e:de:9d:98:3d:dc:ad:11:b8:af:75:a7:7e:52: 7a:24:11:61:c1:e8:89:ec:4a:7d:58:b4:8f:8d:05: c4:01:9b:d5:ad:2a:a1:46:20:1f:e9:ea:28:be:c3: db:59:84:49:8b:4a:4a:66:e9:79:b1:53:ca:81:96: 90:32:d9:9f:67:9a:22:b0:2e:3b:10:2f:17:58:b9: be:68:13:75:c5:a4:29:ba:64:37:10:52:c4:61:7b: f6:33:14:bd:e7:2a:c5:40:7a:19:3f:c7:32:f8:17: 97:a3:0c:fe:2a:0d:72:73:7d:41:4b:ec:f8:91:9e: 43:0c:c8:60:6c:e7:97:e6:8c:ae:12:96:de:3f:7c: 2d:d9:3e:23:88:ef:20:06:a5:b8:ec:e4:f7:ae:27: ab:89:04:32:b9:36:35:a8:6c:1a:57:27:f3:a8:9f: 26:4d:d9:5d:67:0b:e7:65:07:76:62:d2:14:2e:cb: ec:2e:27:3f:78:90:85:d8:4f:64:6b:44:8f:9c:20: 06:7a:91:2f:1a:ad:8b:e8:88:d9:9e:c7:66:c1:45: b5:ec:fc:15:a0:d6:e0:38:c8:03:a5:9c:0a:c2:b8: dc:f8:fe:43:c3:95:be:b4:c8:d1:30:84:05:fc:64: 71:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0B:E1:76:C2:51:FD:AB:0B:52:99:49:78:5F:23:D0:5B:A8:AF:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7d6ebda-1b2d-3bc1-b514-3f2db4a6f2f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.15.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:00:5c:0e:8d:5f:a9:90:91:6b:f0:61:af:46:c2:33:1e:8c: d5:af:ed:b6:56:2f:27:32:a0:eb:65:c4:6a:6d:ae:98:45:5f: 82:84:6a:f9:ce:9e:b2:2b:44:60:c8:82:c7:63:7e:74:63:50: 05:06:8b:7d:7c:06:20:d4:23:b9:a9:37:08:21:e4:14:fc:ad: 10:f5:cd:92:00:55:92:28:1f:d7:56:a4:6f:b7:52:62:af:ab: 06:b7:39:cc:35:92:39:3e:20:aa:60:29:3f:c1:83:4e:71:98: 24:53:1e:4c:c8:76:16:c2:00:91:4b:6f:00:df:bb:cd:7d:5c: e3:d0:db:16:4f:b0:b3:8c:38:ee:f4:4f:ae:5a:c2:8f:b5:a0: 28:bf:31:94:60:6f:5a:33:72:09:60:19:ee:67:aa:81:53:56: 9d:07:2a:cd:4b:a4:84:ec:dd:9e:59:71:0d:66:d4:04:95:51: 0e:05:5d:80:bb:84:60:14:51:41:8d:12:e4:76:08:f7:7c:ef: 76:27:b8:46:43:ae:e5:21:1d:bf:27:62:9d:a3:af:a1:ef:56: 56:c9:a2:ae:b8:ae:6c:57:7d:6b:0a:4f:15:14:11:05:44:27: c3:c3:b0:88:e0:67:bf:3e:7f:64:11:f7:ad:27:09:18:98:4e: ba:f0:06:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTp8K1j8mXnEldwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NGIyMTYyMWUtOWJhZS00MDdkLWFjZDgtNDMzZjQ1N2VkNGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio6Wtr07cDkafksSHEbrLt6dmD3crRG4r3Wn flJ6JBFhweiJ7Ep9WLSPjQXEAZvVrSqhRiAf6eoovsPbWYRJi0pKZul5sVPKgZaQ MtmfZ5oisC47EC8XWLm+aBN1xaQpumQ3EFLEYXv2MxS95yrFQHoZP8cy+BeXowz+ Kg1yc31BS+z4kZ5DDMhgbOeX5oyuEpbeP3wt2T4jiO8gBqW47OT3rieriQQyuTY1 qGwaVyfzqJ8mTdldZwvnZQd2YtIULsvsLic/eJCF2E9ka0SPnCAGepEvGq2L6IjZ nsdmwUW17PwVoNbgOMgDpZwKwrjc+P5Dw5W+tMjRMIQF/GRxIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFML4XbCUf2rC1KZSXhfI9BbqK+mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDdkNmViZGEtMWIyZC0z YmMxLWI1MTQtM2YyZGI0YTZmMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFw/0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAAXA6NX6mQkWvwYa9GwjMejNWv7bZWLycyoOtlxGptrphFX4KEavnO nrIrRGDIgsdjfnRjUAUGi318BiDUI7mpNwgh5BT8rRD1zZIAVZIoH9dWpG+3UmKv qwa3Ocw1kjk+IKpgKT/Bg05xmCRTHkzIdhbCAJFLbwDfu819XOPQ2xZPsLOMOO70 T65awo+1oCi/MZRgb1ozcglgGe5nqoFTVp0HKs1LpITs3Z5ZcQ1m1ASVUQ4FXYC7 hGAUUUGNEuR2CPd873YnuEZDruUhHb8nYp2jr6HvVlbJoq64rmxXfWsKTxUUEQVE J8PDsIjgZ78+f2QR960nCRiYTrrwBvU= -----END CERTIFICATE-----Generated at Sat Apr 5 10:55:38 2025 by rpki-client